{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:P6EIUUXLQGBFWG7POJLJ24X57N","short_pith_number":"pith:P6EIUUXL","canonical_record":{"source":{"id":"2606.28356","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-06-08T22:40:08Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7eaa7975e1588e2f9a04453163b5a5170427067ce5def367ef35383f12ce8c54","abstract_canon_sha256":"fe7a8af84772111cf2d1a60e33d2e210819ac19a8e16c2566d8f061d97fda639"},"schema_version":"1.0"},"canonical_sha256":"7f888a52eb81825b1bef72569d72fdfb69a83f434065f6ecea6ab598492baa45","source":{"kind":"arxiv","id":"2606.28356","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.28356","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"arxiv_version","alias_value":"2606.28356v1","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.28356","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"pith_short_12","alias_value":"P6EIUUXLQGBF","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"pith_short_16","alias_value":"P6EIUUXLQGBFWG7P","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"pith_short_8","alias_value":"P6EIUUXL","created_at":"2026-06-30T00:15:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:P6EIUUXLQGBFWG7POJLJ24X57N","target":"record","payload":{"canonical_record":{"source":{"id":"2606.28356","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-06-08T22:40:08Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7eaa7975e1588e2f9a04453163b5a5170427067ce5def367ef35383f12ce8c54","abstract_canon_sha256":"fe7a8af84772111cf2d1a60e33d2e210819ac19a8e16c2566d8f061d97fda639"},"schema_version":"1.0"},"canonical_sha256":"7f888a52eb81825b1bef72569d72fdfb69a83f434065f6ecea6ab598492baa45","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-30T00:15:11.826602Z","signature_b64":"u9nIQnADbeKT1iL05LWrdCeQxSZcwnW7rKsPWlGQGNVGMmmlkJhbSIiFaeTwl+AbjdsVUnzDDEa8jrG23MsXCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7f888a52eb81825b1bef72569d72fdfb69a83f434065f6ecea6ab598492baa45","last_reissued_at":"2026-06-30T00:15:11.826210Z","signature_status":"signed_v1","first_computed_at":"2026-06-30T00:15:11.826210Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.28356","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-30T00:15:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q//9VeflkaAuc4XJSYQ7LADgo5N2iwgLJC9cLmZjPAzK6Fd/GpZbD98MZ3PnN0jEGJCRvG6eMWVfQOcrnS85Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T01:56:41.300800Z"},"content_sha256":"bd5fcfbc893082c029dfd3e27a1cef0d91d686e1fdd345bb81055186cef61e9a","schema_version":"1.0","event_id":"sha256:bd5fcfbc893082c029dfd3e27a1cef0d91d686e1fdd345bb81055186cef61e9a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:P6EIUUXLQGBFWG7POJLJ24X57N","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SafeGEO: Understanding Generative Engine Optimization Risks in Recommendation Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.IR","authors_text":"Blair Yang, Difan Jiao, Junda Wu, Qianfeng Wen, Xin Liu, Yifan Simon Liu, Zhenwei Tang","submitted_at":"2026-06-08T22:40:08Z","abstract_excerpt":"Generative Engine Optimization (GEO) lets content owners rewrite web content to increase their visibility in generative systems. In recommendation agents, this creates a risk that seller-controlled sources make flawed products appear better supported than they are. We study this risk by asking whether recommendation agents preserve utility-aligned decisions when seller-controlled sources are rewritten for GEO. To make this question measurable, we construct SafeGEO, an evaluation suite with 22 GEO attack variants across 600 recommendation cases. We empirically show that GEO attacks can promote "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.28356","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.28356/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-30T00:15:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FvNkst8ZGSnRn9e49rLWCJISwO1JT2bl2u7C8h0qyqQkwpdjvsMYcz5NkqSm/zAhgoLnBfyfDWWfsiYB0sG2Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T01:56:41.301190Z"},"content_sha256":"aea274b828a5f2ed1f3ded007d4df6cd546cf8eca2bacb9bfbf795fa444496d2","schema_version":"1.0","event_id":"sha256:aea274b828a5f2ed1f3ded007d4df6cd546cf8eca2bacb9bfbf795fa444496d2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P6EIUUXLQGBFWG7POJLJ24X57N/bundle.json","state_url":"https://pith.science/pith/P6EIUUXLQGBFWG7POJLJ24X57N/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P6EIUUXLQGBFWG7POJLJ24X57N/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-03T01:56:41Z","links":{"resolver":"https://pith.science/pith/P6EIUUXLQGBFWG7POJLJ24X57N","bundle":"https://pith.science/pith/P6EIUUXLQGBFWG7POJLJ24X57N/bundle.json","state":"https://pith.science/pith/P6EIUUXLQGBFWG7POJLJ24X57N/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P6EIUUXLQGBFWG7POJLJ24X57N/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:P6EIUUXLQGBFWG7POJLJ24X57N","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fe7a8af84772111cf2d1a60e33d2e210819ac19a8e16c2566d8f061d97fda639","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-06-08T22:40:08Z","title_canon_sha256":"7eaa7975e1588e2f9a04453163b5a5170427067ce5def367ef35383f12ce8c54"},"schema_version":"1.0","source":{"id":"2606.28356","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.28356","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"arxiv_version","alias_value":"2606.28356v1","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.28356","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"pith_short_12","alias_value":"P6EIUUXLQGBF","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"pith_short_16","alias_value":"P6EIUUXLQGBFWG7P","created_at":"2026-06-30T00:15:11Z"},{"alias_kind":"pith_short_8","alias_value":"P6EIUUXL","created_at":"2026-06-30T00:15:11Z"}],"graph_snapshots":[{"event_id":"sha256:aea274b828a5f2ed1f3ded007d4df6cd546cf8eca2bacb9bfbf795fa444496d2","target":"graph","created_at":"2026-06-30T00:15:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.28356/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Generative Engine Optimization (GEO) lets content owners rewrite web content to increase their visibility in generative systems. In recommendation agents, this creates a risk that seller-controlled sources make flawed products appear better supported than they are. We study this risk by asking whether recommendation agents preserve utility-aligned decisions when seller-controlled sources are rewritten for GEO. To make this question measurable, we construct SafeGEO, an evaluation suite with 22 GEO attack variants across 600 recommendation cases. We empirically show that GEO attacks can promote ","authors_text":"Blair Yang, Difan Jiao, Junda Wu, Qianfeng Wen, Xin Liu, Yifan Simon Liu, Zhenwei Tang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-06-08T22:40:08Z","title":"SafeGEO: Understanding Generative Engine Optimization Risks in Recommendation Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.28356","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bd5fcfbc893082c029dfd3e27a1cef0d91d686e1fdd345bb81055186cef61e9a","target":"record","created_at":"2026-06-30T00:15:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fe7a8af84772111cf2d1a60e33d2e210819ac19a8e16c2566d8f061d97fda639","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-06-08T22:40:08Z","title_canon_sha256":"7eaa7975e1588e2f9a04453163b5a5170427067ce5def367ef35383f12ce8c54"},"schema_version":"1.0","source":{"id":"2606.28356","kind":"arxiv","version":1}},"canonical_sha256":"7f888a52eb81825b1bef72569d72fdfb69a83f434065f6ecea6ab598492baa45","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7f888a52eb81825b1bef72569d72fdfb69a83f434065f6ecea6ab598492baa45","first_computed_at":"2026-06-30T00:15:11.826210Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-30T00:15:11.826210Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"u9nIQnADbeKT1iL05LWrdCeQxSZcwnW7rKsPWlGQGNVGMmmlkJhbSIiFaeTwl+AbjdsVUnzDDEa8jrG23MsXCg==","signature_status":"signed_v1","signed_at":"2026-06-30T00:15:11.826602Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.28356","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bd5fcfbc893082c029dfd3e27a1cef0d91d686e1fdd345bb81055186cef61e9a","sha256:aea274b828a5f2ed1f3ded007d4df6cd546cf8eca2bacb9bfbf795fa444496d2"],"state_sha256":"a97a5b6b1c3237c6a1b2d22a279ca1e134915d159547f4b2c70f4098da9dd0c5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0GRd6c14aeWFNd6fAHg7VNsIpMW1Fd73jMRsTwgRex0cpQkg+IjzujQAzBEsZZNd9TNAmWvcADs/t5fHZDBfBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-03T01:56:41.303305Z","bundle_sha256":"87d3d45be208f96ada9a66249c8f137d73154e43620cff795d05541d9321d07c"}}