{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:OITE7S33LVTWM6DX2ZHCMAEX2C","short_pith_number":"pith:OITE7S33","canonical_record":{"source":{"id":"2505.13528","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-18T04:40:34Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ef81b575c88bed5ade163b739a915ee3409cdc4c29cef673e72320f01fe7f024","abstract_canon_sha256":"62ca2248350451fbd5d564d594d92ef3b0f933751555ca3c586ba6af54a8d4a4"},"schema_version":"1.0"},"canonical_sha256":"72264fcb7b5d67667877d64e260097d0b0871686dc35127a53bb9dcc8048f742","source":{"kind":"arxiv","id":"2505.13528","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.13528","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"arxiv_version","alias_value":"2505.13528v1","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.13528","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"pith_short_12","alias_value":"OITE7S33LVTW","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"pith_short_16","alias_value":"OITE7S33LVTWM6DX","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"pith_short_8","alias_value":"OITE7S33","created_at":"2026-07-05T11:05:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:OITE7S33LVTWM6DX2ZHCMAEX2C","target":"record","payload":{"canonical_record":{"source":{"id":"2505.13528","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-18T04:40:34Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ef81b575c88bed5ade163b739a915ee3409cdc4c29cef673e72320f01fe7f024","abstract_canon_sha256":"62ca2248350451fbd5d564d594d92ef3b0f933751555ca3c586ba6af54a8d4a4"},"schema_version":"1.0"},"canonical_sha256":"72264fcb7b5d67667877d64e260097d0b0871686dc35127a53bb9dcc8048f742","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:05:47.372984Z","signature_b64":"/3HIYbevcDCb8AyYVnuaxVAHSiG2CeULAD0qjTKwut7aS8UTS5OrqlWF2s05bK0B51392SY1igWAQDbHccv+Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"72264fcb7b5d67667877d64e260097d0b0871686dc35127a53bb9dcc8048f742","last_reissued_at":"2026-07-05T11:05:47.372415Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:05:47.372415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.13528","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:05:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oKoEhHOWrtXvx9KCRVe39FwXfKcELS+otRTI6r+A9/6/HIBbugmKs9lhU+KuB+hSaJMB/99TNkLWlxTTlG9CCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:48:20.414502Z"},"content_sha256":"c6e02a8b7c74ca0ecf379e5bc0c7fa8b75548386b88112928fc1fe81bd8d3e32","schema_version":"1.0","event_id":"sha256:c6e02a8b7c74ca0ecf379e5bc0c7fa8b75548386b88112928fc1fe81bd8d3e32"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:OITE7S33LVTWM6DX2ZHCMAEX2C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM-Based User Simulation for Low-Knowledge Shilling Attacks on Recommender Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.IR","authors_text":"Dongsheng Li, Guangping Zhang, Hansu Gu, Jiahao Liu, Li Shang, Mingzhe Han, Ning Gu, Peng Zhang, Shengkang Gu, Tun Lu","submitted_at":"2025-05-18T04:40:34Z","abstract_excerpt":"Recommender systems (RS) are increasingly vulnerable to shilling attacks, where adversaries inject fake user profiles to manipulate system outputs. Traditional attack strategies often rely on simplistic heuristics, require access to internal RS data, and overlook the manipulation potential of textual reviews. In this work, we introduce Agent4SR, a novel framework that leverages Large Language Model (LLM)-based agents to perform low-knowledge, high-impact shilling attacks through both rating and review generation. Agent4SR simulates realistic user behavior by orchestrating adversarial interacti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.13528","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.13528/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:05:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bf4rPJ7S6ElzYc5nfoxfwGLFwj4P6qWFqkXWUOEiZ18ekWErkFBT9xaFSdww4dPD3TXMDXYZgO5DJp0dZU3qAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:48:20.415049Z"},"content_sha256":"b1fa97f2e11ba387b1f9283680bfc7ab89dc9c91cd2857bb03da2bfc758bc16a","schema_version":"1.0","event_id":"sha256:b1fa97f2e11ba387b1f9283680bfc7ab89dc9c91cd2857bb03da2bfc758bc16a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OITE7S33LVTWM6DX2ZHCMAEX2C/bundle.json","state_url":"https://pith.science/pith/OITE7S33LVTWM6DX2ZHCMAEX2C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OITE7S33LVTWM6DX2ZHCMAEX2C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:48:20Z","links":{"resolver":"https://pith.science/pith/OITE7S33LVTWM6DX2ZHCMAEX2C","bundle":"https://pith.science/pith/OITE7S33LVTWM6DX2ZHCMAEX2C/bundle.json","state":"https://pith.science/pith/OITE7S33LVTWM6DX2ZHCMAEX2C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OITE7S33LVTWM6DX2ZHCMAEX2C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:OITE7S33LVTWM6DX2ZHCMAEX2C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"62ca2248350451fbd5d564d594d92ef3b0f933751555ca3c586ba6af54a8d4a4","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-18T04:40:34Z","title_canon_sha256":"ef81b575c88bed5ade163b739a915ee3409cdc4c29cef673e72320f01fe7f024"},"schema_version":"1.0","source":{"id":"2505.13528","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.13528","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"arxiv_version","alias_value":"2505.13528v1","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.13528","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"pith_short_12","alias_value":"OITE7S33LVTW","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"pith_short_16","alias_value":"OITE7S33LVTWM6DX","created_at":"2026-07-05T11:05:47Z"},{"alias_kind":"pith_short_8","alias_value":"OITE7S33","created_at":"2026-07-05T11:05:47Z"}],"graph_snapshots":[{"event_id":"sha256:b1fa97f2e11ba387b1f9283680bfc7ab89dc9c91cd2857bb03da2bfc758bc16a","target":"graph","created_at":"2026-07-05T11:05:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.13528/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recommender systems (RS) are increasingly vulnerable to shilling attacks, where adversaries inject fake user profiles to manipulate system outputs. Traditional attack strategies often rely on simplistic heuristics, require access to internal RS data, and overlook the manipulation potential of textual reviews. In this work, we introduce Agent4SR, a novel framework that leverages Large Language Model (LLM)-based agents to perform low-knowledge, high-impact shilling attacks through both rating and review generation. Agent4SR simulates realistic user behavior by orchestrating adversarial interacti","authors_text":"Dongsheng Li, Guangping Zhang, Hansu Gu, Jiahao Liu, Li Shang, Mingzhe Han, Ning Gu, Peng Zhang, Shengkang Gu, Tun Lu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-18T04:40:34Z","title":"LLM-Based User Simulation for Low-Knowledge Shilling Attacks on Recommender Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.13528","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c6e02a8b7c74ca0ecf379e5bc0c7fa8b75548386b88112928fc1fe81bd8d3e32","target":"record","created_at":"2026-07-05T11:05:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"62ca2248350451fbd5d564d594d92ef3b0f933751555ca3c586ba6af54a8d4a4","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-18T04:40:34Z","title_canon_sha256":"ef81b575c88bed5ade163b739a915ee3409cdc4c29cef673e72320f01fe7f024"},"schema_version":"1.0","source":{"id":"2505.13528","kind":"arxiv","version":1}},"canonical_sha256":"72264fcb7b5d67667877d64e260097d0b0871686dc35127a53bb9dcc8048f742","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"72264fcb7b5d67667877d64e260097d0b0871686dc35127a53bb9dcc8048f742","first_computed_at":"2026-07-05T11:05:47.372415Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:05:47.372415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/3HIYbevcDCb8AyYVnuaxVAHSiG2CeULAD0qjTKwut7aS8UTS5OrqlWF2s05bK0B51392SY1igWAQDbHccv+Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:05:47.372984Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.13528","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c6e02a8b7c74ca0ecf379e5bc0c7fa8b75548386b88112928fc1fe81bd8d3e32","sha256:b1fa97f2e11ba387b1f9283680bfc7ab89dc9c91cd2857bb03da2bfc758bc16a"],"state_sha256":"c51970d1932b8ed559c0958c4abf139136df7b62be2c07b8c5c95b444f433968"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JOeSQwiz5uLVzqpEn0DcvuV3dwRqBkuzJBq1Vou3kOfDVjZXbMpm1X5sDW/Xt4nNPOgO/VFgmQELKRRdvdXoAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:48:20.418818Z","bundle_sha256":"fdab12b2f62c0ba1632f7b3034faab6e7473b4a8cb836fe406a9c162cad38b8b"}}