{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:O6KLQYOCQ3ZIYCJMM6BR4B77V2","short_pith_number":"pith:O6KLQYOC","canonical_record":{"source":{"id":"2501.15145","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-25T09:03:19Z","cross_cats_sorted":[],"title_canon_sha256":"79abce669ecdd91e83ee896f218c864160670062f227f091969734dbb52b68bb","abstract_canon_sha256":"c141034ca3082e488044e2d0f3dcc5238656e7c4ac242e0efe8d8ea853c12e11"},"schema_version":"1.0"},"canonical_sha256":"7794b861c286f28c092c67831e07ffaeb654c145affe86d9a624670633d86f90","source":{"kind":"arxiv","id":"2501.15145","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.15145","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"arxiv_version","alias_value":"2501.15145v2","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.15145","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"pith_short_12","alias_value":"O6KLQYOCQ3ZI","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"pith_short_16","alias_value":"O6KLQYOCQ3ZIYCJM","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"pith_short_8","alias_value":"O6KLQYOC","created_at":"2026-07-05T10:47:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:O6KLQYOCQ3ZIYCJMM6BR4B77V2","target":"record","payload":{"canonical_record":{"source":{"id":"2501.15145","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-25T09:03:19Z","cross_cats_sorted":[],"title_canon_sha256":"79abce669ecdd91e83ee896f218c864160670062f227f091969734dbb52b68bb","abstract_canon_sha256":"c141034ca3082e488044e2d0f3dcc5238656e7c4ac242e0efe8d8ea853c12e11"},"schema_version":"1.0"},"canonical_sha256":"7794b861c286f28c092c67831e07ffaeb654c145affe86d9a624670633d86f90","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:47:57.037361Z","signature_b64":"jUxxOrNxN87wYtkePP6bi1tvjsg17uxpURrhxDZkbslndsDFqVIyuodithNxHLC78QMWbk68mxXMunw1NgnGBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7794b861c286f28c092c67831e07ffaeb654c145affe86d9a624670633d86f90","last_reissued_at":"2026-07-05T10:47:57.036886Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:47:57.036886Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.15145","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:47:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w/shsMA4609RPuwXBOO34ho9rVM7K7W7wcVPQ7IQp43FYQJreuABfmUELzeRIIypWLnkbOKg80OdOphrtnnQCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:50:36.975455Z"},"content_sha256":"146636ad9e4d49eb0909a02ca10b08c1d773fb9ebe04504d62091b063aa26932","schema_version":"1.0","event_id":"sha256:146636ad9e4d49eb0909a02ca10b08c1d773fb9ebe04504d62091b063aa26932"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:O6KLQYOCQ3ZIYCJMM6BR4B77V2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PromptShield: Deployable Detection for Prompt Injection Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Basel Alomair, David Wagner, Dennis Jacob, Hend Alzahrani, Zhanhao Hu","submitted_at":"2025-01-25T09:03:19Z","abstract_excerpt":"Application designers have moved to integrate large language models (LLMs) into their products. However, many LLM-integrated applications are vulnerable to prompt injections. While attempts have been made to address this problem by building prompt injection detectors, many are not yet suitable for practical deployment. To support research in this area, we introduce PromptShield, a benchmark for training and evaluating deployable prompt injection detectors. Our benchmark is carefully curated and includes both conversational and application-structured data. In addition, we use insights from our "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.15145","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.15145/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:47:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uqEM+I7spmvViDBxO+Gzbm8fgiPT5qyyKTHyj0jZ/bS+1pgbcvulJMi3oFtkLeJyRGh/kgoCPRLv3b0dyXYCCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:50:36.976018Z"},"content_sha256":"1ca171a8ed5b05729098cdb82d957b33389d6297e0fed2d5e6647a66d4170a15","schema_version":"1.0","event_id":"sha256:1ca171a8ed5b05729098cdb82d957b33389d6297e0fed2d5e6647a66d4170a15"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O6KLQYOCQ3ZIYCJMM6BR4B77V2/bundle.json","state_url":"https://pith.science/pith/O6KLQYOCQ3ZIYCJMM6BR4B77V2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O6KLQYOCQ3ZIYCJMM6BR4B77V2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T15:50:36Z","links":{"resolver":"https://pith.science/pith/O6KLQYOCQ3ZIYCJMM6BR4B77V2","bundle":"https://pith.science/pith/O6KLQYOCQ3ZIYCJMM6BR4B77V2/bundle.json","state":"https://pith.science/pith/O6KLQYOCQ3ZIYCJMM6BR4B77V2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O6KLQYOCQ3ZIYCJMM6BR4B77V2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:O6KLQYOCQ3ZIYCJMM6BR4B77V2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c141034ca3082e488044e2d0f3dcc5238656e7c4ac242e0efe8d8ea853c12e11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-25T09:03:19Z","title_canon_sha256":"79abce669ecdd91e83ee896f218c864160670062f227f091969734dbb52b68bb"},"schema_version":"1.0","source":{"id":"2501.15145","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.15145","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"arxiv_version","alias_value":"2501.15145v2","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.15145","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"pith_short_12","alias_value":"O6KLQYOCQ3ZI","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"pith_short_16","alias_value":"O6KLQYOCQ3ZIYCJM","created_at":"2026-07-05T10:47:57Z"},{"alias_kind":"pith_short_8","alias_value":"O6KLQYOC","created_at":"2026-07-05T10:47:57Z"}],"graph_snapshots":[{"event_id":"sha256:1ca171a8ed5b05729098cdb82d957b33389d6297e0fed2d5e6647a66d4170a15","target":"graph","created_at":"2026-07-05T10:47:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.15145/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Application designers have moved to integrate large language models (LLMs) into their products. However, many LLM-integrated applications are vulnerable to prompt injections. While attempts have been made to address this problem by building prompt injection detectors, many are not yet suitable for practical deployment. To support research in this area, we introduce PromptShield, a benchmark for training and evaluating deployable prompt injection detectors. Our benchmark is carefully curated and includes both conversational and application-structured data. In addition, we use insights from our ","authors_text":"Basel Alomair, David Wagner, Dennis Jacob, Hend Alzahrani, Zhanhao Hu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-25T09:03:19Z","title":"PromptShield: Deployable Detection for Prompt Injection Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.15145","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:146636ad9e4d49eb0909a02ca10b08c1d773fb9ebe04504d62091b063aa26932","target":"record","created_at":"2026-07-05T10:47:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c141034ca3082e488044e2d0f3dcc5238656e7c4ac242e0efe8d8ea853c12e11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-25T09:03:19Z","title_canon_sha256":"79abce669ecdd91e83ee896f218c864160670062f227f091969734dbb52b68bb"},"schema_version":"1.0","source":{"id":"2501.15145","kind":"arxiv","version":2}},"canonical_sha256":"7794b861c286f28c092c67831e07ffaeb654c145affe86d9a624670633d86f90","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7794b861c286f28c092c67831e07ffaeb654c145affe86d9a624670633d86f90","first_computed_at":"2026-07-05T10:47:57.036886Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:47:57.036886Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jUxxOrNxN87wYtkePP6bi1tvjsg17uxpURrhxDZkbslndsDFqVIyuodithNxHLC78QMWbk68mxXMunw1NgnGBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:47:57.037361Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.15145","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:146636ad9e4d49eb0909a02ca10b08c1d773fb9ebe04504d62091b063aa26932","sha256:1ca171a8ed5b05729098cdb82d957b33389d6297e0fed2d5e6647a66d4170a15"],"state_sha256":"5c2f6b4bca8659ca5dfecb2e2a62d0452377280e5cd7e9ece87e85c2747ce5ea"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+AWFUDtR9sorVbV73+OlMNgQzx8XQWVxi9TIYVIobQT8NMC56MLRAAo7p0l4+PoZGK3FE9XL8ro4q+mWNt6dDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T15:50:36.982586Z","bundle_sha256":"ebaf59caa0de8924efb121fd9ddb7e29800f35f385cdd2f31bcb830d86beac43"}}