{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:PIIVE3AMMWBNHOCEZO4AD2M3KB","short_pith_number":"pith:PIIVE3AM","canonical_record":{"source":{"id":"2606.05805","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-04T07:34:35Z","cross_cats_sorted":[],"title_canon_sha256":"2e4c6c55bbcd4e3f9d3bdc40ceea054b44936767ccf9285a346675feb9617aa7","abstract_canon_sha256":"1f28b92888faad46ee215b7056b903b8b4ffe3d5637cd713e164f7f2193b438b"},"schema_version":"1.0"},"canonical_sha256":"7a11526c0c6582d3b844cbb801e99b5078ac50271234ab5c7f6fa229d3fd2553","source":{"kind":"arxiv","id":"2606.05805","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.05805","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"arxiv_version","alias_value":"2606.05805v1","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.05805","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"pith_short_12","alias_value":"PIIVE3AMMWBN","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"pith_short_16","alias_value":"PIIVE3AMMWBNHOCE","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"pith_short_8","alias_value":"PIIVE3AM","created_at":"2026-06-05T01:15:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:PIIVE3AMMWBNHOCEZO4AD2M3KB","target":"record","payload":{"canonical_record":{"source":{"id":"2606.05805","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-04T07:34:35Z","cross_cats_sorted":[],"title_canon_sha256":"2e4c6c55bbcd4e3f9d3bdc40ceea054b44936767ccf9285a346675feb9617aa7","abstract_canon_sha256":"1f28b92888faad46ee215b7056b903b8b4ffe3d5637cd713e164f7f2193b438b"},"schema_version":"1.0"},"canonical_sha256":"7a11526c0c6582d3b844cbb801e99b5078ac50271234ab5c7f6fa229d3fd2553","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-05T01:15:03.925749Z","signature_b64":"yIW5LZvJWzAi4v+cLT8GTUgI+1jhSBy/Dm9hYoQLAheFaRbE3j/rQkhPdMPQYP4Aw+3+PQ9jd6RB3ZP8tu0gDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7a11526c0c6582d3b844cbb801e99b5078ac50271234ab5c7f6fa229d3fd2553","last_reissued_at":"2026-06-05T01:15:03.925275Z","signature_status":"signed_v1","first_computed_at":"2026-06-05T01:15:03.925275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.05805","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-05T01:15:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2wYhZXm+Nh3r0Ylk7lbp1n6oxHhGRPsWNgR7pC7K2zYwCmlI2njOEiosNI3fcNEy/w/7F3lJLY7afYicB4zRDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:01:01.771843Z"},"content_sha256":"82809a058f3e49a4be4eba814d96538b80b266d3121023c0d537a768af2f3fbc","schema_version":"1.0","event_id":"sha256:82809a058f3e49a4be4eba814d96538b80b266d3121023c0d537a768af2f3fbc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:PIIVE3AMMWBNHOCEZO4AD2M3KB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Feng Liu, Jiacheng Zhang, Shaanan Cohney, Xingliang Yuan, Yuhao Sun, Zhexin Zhang","submitted_at":"2026-06-04T07:34:35Z","abstract_excerpt":"LLM-based guardrails typically safeguard agents by evaluating proposed actions or inputs before execution, producing safety signals such as binary allow/deny decisions, risk categories, and/or explanatory rationales about potential policy violations. However, agent risks often arise when otherwise benign tasks are contaminated by untrusted external content, unsafe instructions, or risky tool use. Existing guardrails often flag the entire task uniformly as unsafe, thereby blocking the threat but sacrificing the benign part. Moreover, existing work largely evaluates guardrails in isolation, leav"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.05805","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.05805/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-05T01:15:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EKr/5RsI0z/hDuE1loboadCY6j2GKP5WGnjGrcoUAD6Z2G5aaoncZCoVNq1/wVFYuuqJ3QnVy/OtcMcdVowwCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:01:01.772368Z"},"content_sha256":"433d3f6e3de321dbb1f1b64a418f84faca74845b397e714decf2801cc2aa1662","schema_version":"1.0","event_id":"sha256:433d3f6e3de321dbb1f1b64a418f84faca74845b397e714decf2801cc2aa1662"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PIIVE3AMMWBNHOCEZO4AD2M3KB/bundle.json","state_url":"https://pith.science/pith/PIIVE3AMMWBNHOCEZO4AD2M3KB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PIIVE3AMMWBNHOCEZO4AD2M3KB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T05:01:01Z","links":{"resolver":"https://pith.science/pith/PIIVE3AMMWBNHOCEZO4AD2M3KB","bundle":"https://pith.science/pith/PIIVE3AMMWBNHOCEZO4AD2M3KB/bundle.json","state":"https://pith.science/pith/PIIVE3AMMWBNHOCEZO4AD2M3KB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PIIVE3AMMWBNHOCEZO4AD2M3KB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:PIIVE3AMMWBNHOCEZO4AD2M3KB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f28b92888faad46ee215b7056b903b8b4ffe3d5637cd713e164f7f2193b438b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-04T07:34:35Z","title_canon_sha256":"2e4c6c55bbcd4e3f9d3bdc40ceea054b44936767ccf9285a346675feb9617aa7"},"schema_version":"1.0","source":{"id":"2606.05805","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.05805","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"arxiv_version","alias_value":"2606.05805v1","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.05805","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"pith_short_12","alias_value":"PIIVE3AMMWBN","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"pith_short_16","alias_value":"PIIVE3AMMWBNHOCE","created_at":"2026-06-05T01:15:03Z"},{"alias_kind":"pith_short_8","alias_value":"PIIVE3AM","created_at":"2026-06-05T01:15:03Z"}],"graph_snapshots":[{"event_id":"sha256:433d3f6e3de321dbb1f1b64a418f84faca74845b397e714decf2801cc2aa1662","target":"graph","created_at":"2026-06-05T01:15:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.05805/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM-based guardrails typically safeguard agents by evaluating proposed actions or inputs before execution, producing safety signals such as binary allow/deny decisions, risk categories, and/or explanatory rationales about potential policy violations. However, agent risks often arise when otherwise benign tasks are contaminated by untrusted external content, unsafe instructions, or risky tool use. Existing guardrails often flag the entire task uniformly as unsafe, thereby blocking the threat but sacrificing the benign part. Moreover, existing work largely evaluates guardrails in isolation, leav","authors_text":"Feng Liu, Jiacheng Zhang, Shaanan Cohney, Xingliang Yuan, Yuhao Sun, Zhexin Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-04T07:34:35Z","title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.05805","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:82809a058f3e49a4be4eba814d96538b80b266d3121023c0d537a768af2f3fbc","target":"record","created_at":"2026-06-05T01:15:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f28b92888faad46ee215b7056b903b8b4ffe3d5637cd713e164f7f2193b438b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-04T07:34:35Z","title_canon_sha256":"2e4c6c55bbcd4e3f9d3bdc40ceea054b44936767ccf9285a346675feb9617aa7"},"schema_version":"1.0","source":{"id":"2606.05805","kind":"arxiv","version":1}},"canonical_sha256":"7a11526c0c6582d3b844cbb801e99b5078ac50271234ab5c7f6fa229d3fd2553","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7a11526c0c6582d3b844cbb801e99b5078ac50271234ab5c7f6fa229d3fd2553","first_computed_at":"2026-06-05T01:15:03.925275Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-05T01:15:03.925275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yIW5LZvJWzAi4v+cLT8GTUgI+1jhSBy/Dm9hYoQLAheFaRbE3j/rQkhPdMPQYP4Aw+3+PQ9jd6RB3ZP8tu0gDg==","signature_status":"signed_v1","signed_at":"2026-06-05T01:15:03.925749Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.05805","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:82809a058f3e49a4be4eba814d96538b80b266d3121023c0d537a768af2f3fbc","sha256:433d3f6e3de321dbb1f1b64a418f84faca74845b397e714decf2801cc2aa1662"],"state_sha256":"e08669d1eac488974b5a519ed09c7a881cb5b6602a4dd428dde40783a86814fe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J6JIVow2zun6NXqlW8O1wpTcmCars7MVI1x7BoLidUDP4ka3KlcBvDhJ92nBEVwOVxVDNwKVa1Hml/6v7nU6Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T05:01:01.777621Z","bundle_sha256":"9d1b761b25593842a96a5f8523c240a5707db5fb60d17c986dae8b44883d0482"}}