{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:Q55TJKGT2CDWGYDCG5BLCEWZ3Z","short_pith_number":"pith:Q55TJKGT","canonical_record":{"source":{"id":"2506.05739","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T04:50:57Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dda6a7afb38d511870e517acaf760e36d567359c06d46bd40bab8c8c0a94acb1","abstract_canon_sha256":"7451df0d3e57379e2a1c15049637e165175a5eb5847996bdf60b709c86a29113"},"schema_version":"1.0"},"canonical_sha256":"877b34a8d3d0876360623742b112d9de5f50e5f89793233e5f9a5cf212c9f611","source":{"kind":"arxiv","id":"2506.05739","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.05739","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"arxiv_version","alias_value":"2506.05739v1","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.05739","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"pith_short_12","alias_value":"Q55TJKGT2CDW","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"pith_short_16","alias_value":"Q55TJKGT2CDWGYDC","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"pith_short_8","alias_value":"Q55TJKGT","created_at":"2026-07-05T11:17:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:Q55TJKGT2CDWGYDCG5BLCEWZ3Z","target":"record","payload":{"canonical_record":{"source":{"id":"2506.05739","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T04:50:57Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dda6a7afb38d511870e517acaf760e36d567359c06d46bd40bab8c8c0a94acb1","abstract_canon_sha256":"7451df0d3e57379e2a1c15049637e165175a5eb5847996bdf60b709c86a29113"},"schema_version":"1.0"},"canonical_sha256":"877b34a8d3d0876360623742b112d9de5f50e5f89793233e5f9a5cf212c9f611","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:17:08.878233Z","signature_b64":"IX9U0z8k/LCsixuXlROSYfzb5dt2Ij2xHtrRmnPAT/dTRj927XTL09iBxNdk0wbVgGZCU8EbidHL6MR+TyJYBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"877b34a8d3d0876360623742b112d9de5f50e5f89793233e5f9a5cf212c9f611","last_reissued_at":"2026-07-05T11:17:08.877732Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:17:08.877732Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.05739","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+zjjN6VCXj6vIHBwpW0pStIR/nvred6eFYQ9lYpJnCvrKuWfgvfRUyHbnhsFbDWFX2OAY9NW6Mt4tTvp4ErRDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:03:52.485545Z"},"content_sha256":"adc4558b29915dbde0cddfb1865a3ac8b53618b8e05baef6c4155b3130c73a55","schema_version":"1.0","event_id":"sha256:adc4558b29915dbde0cddfb1865a3ac8b53618b8e05baef6c4155b3130c73a55"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:Q55TJKGT2CDWGYDCG5BLCEWZ3Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hayretdin Bahsi, Lan Zhang, Neha Nagaraja, Pawan Patil, Peng Liu, Zhilong Wang","submitted_at":"2025-06-06T04:50:57Z","abstract_excerpt":"LLM agents are widely used as agents for customer support, content generation, and code assistance. However, they are vulnerable to prompt injection attacks, where adversarial inputs manipulate the model's behavior. Traditional defenses like input sanitization, guard models, and guardrails are either cumbersome or ineffective. In this paper, we propose a novel, lightweight defense mechanism called Polymorphic Prompt Assembling (PPA), which protects against prompt injection with near-zero overhead. The approach is based on the insight that prompt injection requires guessing and breaking the str"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.05739","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.05739/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BGt3iwhWs+h2j36Vcjiz+j+GFAp8V4wAssp7FITfoV9lbV7j9+gAzgoMTibmCOm8F8ziuSj+KERzl1W4mFQ+BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:03:52.486045Z"},"content_sha256":"9c1378fb769278aff3f7de6ec8dacfd299727956686278a55f611f3023b0484a","schema_version":"1.0","event_id":"sha256:9c1378fb769278aff3f7de6ec8dacfd299727956686278a55f611f3023b0484a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q55TJKGT2CDWGYDCG5BLCEWZ3Z/bundle.json","state_url":"https://pith.science/pith/Q55TJKGT2CDWGYDCG5BLCEWZ3Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q55TJKGT2CDWGYDCG5BLCEWZ3Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T04:03:52Z","links":{"resolver":"https://pith.science/pith/Q55TJKGT2CDWGYDCG5BLCEWZ3Z","bundle":"https://pith.science/pith/Q55TJKGT2CDWGYDCG5BLCEWZ3Z/bundle.json","state":"https://pith.science/pith/Q55TJKGT2CDWGYDCG5BLCEWZ3Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q55TJKGT2CDWGYDCG5BLCEWZ3Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:Q55TJKGT2CDWGYDCG5BLCEWZ3Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7451df0d3e57379e2a1c15049637e165175a5eb5847996bdf60b709c86a29113","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T04:50:57Z","title_canon_sha256":"dda6a7afb38d511870e517acaf760e36d567359c06d46bd40bab8c8c0a94acb1"},"schema_version":"1.0","source":{"id":"2506.05739","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.05739","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"arxiv_version","alias_value":"2506.05739v1","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.05739","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"pith_short_12","alias_value":"Q55TJKGT2CDW","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"pith_short_16","alias_value":"Q55TJKGT2CDWGYDC","created_at":"2026-07-05T11:17:08Z"},{"alias_kind":"pith_short_8","alias_value":"Q55TJKGT","created_at":"2026-07-05T11:17:08Z"}],"graph_snapshots":[{"event_id":"sha256:9c1378fb769278aff3f7de6ec8dacfd299727956686278a55f611f3023b0484a","target":"graph","created_at":"2026-07-05T11:17:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.05739/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM agents are widely used as agents for customer support, content generation, and code assistance. However, they are vulnerable to prompt injection attacks, where adversarial inputs manipulate the model's behavior. Traditional defenses like input sanitization, guard models, and guardrails are either cumbersome or ineffective. In this paper, we propose a novel, lightweight defense mechanism called Polymorphic Prompt Assembling (PPA), which protects against prompt injection with near-zero overhead. The approach is based on the insight that prompt injection requires guessing and breaking the str","authors_text":"Hayretdin Bahsi, Lan Zhang, Neha Nagaraja, Pawan Patil, Peng Liu, Zhilong Wang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.05739","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:adc4558b29915dbde0cddfb1865a3ac8b53618b8e05baef6c4155b3130c73a55","target":"record","created_at":"2026-07-05T11:17:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7451df0d3e57379e2a1c15049637e165175a5eb5847996bdf60b709c86a29113","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T04:50:57Z","title_canon_sha256":"dda6a7afb38d511870e517acaf760e36d567359c06d46bd40bab8c8c0a94acb1"},"schema_version":"1.0","source":{"id":"2506.05739","kind":"arxiv","version":1}},"canonical_sha256":"877b34a8d3d0876360623742b112d9de5f50e5f89793233e5f9a5cf212c9f611","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"877b34a8d3d0876360623742b112d9de5f50e5f89793233e5f9a5cf212c9f611","first_computed_at":"2026-07-05T11:17:08.877732Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:17:08.877732Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IX9U0z8k/LCsixuXlROSYfzb5dt2Ij2xHtrRmnPAT/dTRj927XTL09iBxNdk0wbVgGZCU8EbidHL6MR+TyJYBw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:17:08.878233Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.05739","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:adc4558b29915dbde0cddfb1865a3ac8b53618b8e05baef6c4155b3130c73a55","sha256:9c1378fb769278aff3f7de6ec8dacfd299727956686278a55f611f3023b0484a"],"state_sha256":"4fdc5c80217b8ac40924ad79a251bee4b1709f63a061127103e7c99705f385e0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xWFGabXNLtV7J2n9fohPniH4uRpzTHVEQDoqPOuFfoquxtEFYt/5nu4H/w85D15gbrIJa/VTpjOxgs5iFkNwCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T04:03:52.489801Z","bundle_sha256":"c8cf8f47d15bb1003c6d305691d8aed688b8f71f526fc6eabb52e3fe7769f888"}}