{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:Q6SIJB674VFBQPAQ6N46UMETSM","short_pith_number":"pith:Q6SIJB67","canonical_record":{"source":{"id":"2607.26820","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-29T12:14:23Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"457d07179da477c904328ce8700b7a2728fb36f715bfb8136b3618ff731438e8","abstract_canon_sha256":"376898ead63c2437ea3027d8405da3fe7c7edaa2bfa3220139568b6c503c8e9a"},"schema_version":"1.0"},"canonical_sha256":"87a48487dfe54a183c10f379ea3093932451254e510786eb89f50c89d1324e80","source":{"kind":"arxiv","id":"2607.26820","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.26820","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"arxiv_version","alias_value":"2607.26820v1","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.26820","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"pith_short_12","alias_value":"Q6SIJB674VFB","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"pith_short_16","alias_value":"Q6SIJB674VFBQPAQ","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"pith_short_8","alias_value":"Q6SIJB67","created_at":"2026-07-30T01:22:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:Q6SIJB674VFBQPAQ6N46UMETSM","target":"record","payload":{"canonical_record":{"source":{"id":"2607.26820","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-29T12:14:23Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"457d07179da477c904328ce8700b7a2728fb36f715bfb8136b3618ff731438e8","abstract_canon_sha256":"376898ead63c2437ea3027d8405da3fe7c7edaa2bfa3220139568b6c503c8e9a"},"schema_version":"1.0"},"canonical_sha256":"87a48487dfe54a183c10f379ea3093932451254e510786eb89f50c89d1324e80","receipt":{"kind":"pith_receipt","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"87a48487dfe54a183c10f379ea3093932451254e510786eb89f50c89d1324e80","last_reissued_at":"2026-07-30T01:22:26.413220Z","signature_status":"unsigned_v0","first_computed_at":"2026-07-30T01:22:26.413220Z"},"source_kind":"arxiv","source_id":"2607.26820","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-30T01:22:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KOfDo3yujLxy98emFOCRWjNM1UNRVbR6tRpOZh+LtKzGrGIQwDBeRB/T8dGSXB8ag3bNVh8LRysmN4Ku4ZhNDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:39:18.029018Z"},"content_sha256":"2089581b9e69b30a415475f8c21e7dbba626f110035bc23a1d5c1c19f5525faf","schema_version":"1.0","event_id":"sha256:2089581b9e69b30a415475f8c21e7dbba626f110035bc23a1d5c1c19f5525faf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:Q6SIJB674VFBQPAQ6N46UMETSM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Chenpei Wang, Dezhang Kong, Dinghao Liu, Peng Qian, Renjie Sun, Shi Lin, Sifan Wu, Xun Wang","submitted_at":"2026-07-29T12:14:23Z","abstract_excerpt":"As large language models (LLMs) evolve from standalone assistants into autonomous agents, ensuring their safety requires shifting beyond pointwise risk assessment to understand how risks emerge and unfold over long-horizon trajectories. In multi-turn interactions, malicious intent can be decomposed across seemingly harmless turns and gradually reconstructed through interaction trajectories, eventually resulting in safety failures. Existing safeguards remain largely reactive, detecting manifested violations while lacking the ability to predict latent risk evolution and enable preemptive prevent"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.26820","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.26820/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-30T01:22:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TGzxfSV3RBQWXvVXv13xDaWNjDL+IcrixS0gDVMUYqStlQv9o49D7msbvB0omr5jQYeXgFQmuLKAoVey3AW6CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:39:18.030013Z"},"content_sha256":"a120c4bad2498d7aa48f4e585bf24e629f949cc4905a00c6fa453e41d18a7820","schema_version":"1.0","event_id":"sha256:a120c4bad2498d7aa48f4e585bf24e629f949cc4905a00c6fa453e41d18a7820"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q6SIJB674VFBQPAQ6N46UMETSM/bundle.json","state_url":"https://pith.science/pith/Q6SIJB674VFBQPAQ6N46UMETSM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q6SIJB674VFBQPAQ6N46UMETSM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T21:39:18Z","links":{"resolver":"https://pith.science/pith/Q6SIJB674VFBQPAQ6N46UMETSM","bundle":"https://pith.science/pith/Q6SIJB674VFBQPAQ6N46UMETSM/bundle.json","state":"https://pith.science/pith/Q6SIJB674VFBQPAQ6N46UMETSM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q6SIJB674VFBQPAQ6N46UMETSM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:Q6SIJB674VFBQPAQ6N46UMETSM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"376898ead63c2437ea3027d8405da3fe7c7edaa2bfa3220139568b6c503c8e9a","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-29T12:14:23Z","title_canon_sha256":"457d07179da477c904328ce8700b7a2728fb36f715bfb8136b3618ff731438e8"},"schema_version":"1.0","source":{"id":"2607.26820","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.26820","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"arxiv_version","alias_value":"2607.26820v1","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.26820","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"pith_short_12","alias_value":"Q6SIJB674VFB","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"pith_short_16","alias_value":"Q6SIJB674VFBQPAQ","created_at":"2026-07-30T01:22:26Z"},{"alias_kind":"pith_short_8","alias_value":"Q6SIJB67","created_at":"2026-07-30T01:22:26Z"}],"graph_snapshots":[{"event_id":"sha256:a120c4bad2498d7aa48f4e585bf24e629f949cc4905a00c6fa453e41d18a7820","target":"graph","created_at":"2026-07-30T01:22:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.26820/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As large language models (LLMs) evolve from standalone assistants into autonomous agents, ensuring their safety requires shifting beyond pointwise risk assessment to understand how risks emerge and unfold over long-horizon trajectories. In multi-turn interactions, malicious intent can be decomposed across seemingly harmless turns and gradually reconstructed through interaction trajectories, eventually resulting in safety failures. Existing safeguards remain largely reactive, detecting manifested violations while lacking the ability to predict latent risk evolution and enable preemptive prevent","authors_text":"Chenpei Wang, Dezhang Kong, Dinghao Liu, Peng Qian, Renjie Sun, Shi Lin, Sifan Wu, Xun Wang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.26820","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2089581b9e69b30a415475f8c21e7dbba626f110035bc23a1d5c1c19f5525faf","target":"record","created_at":"2026-07-30T01:22:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"376898ead63c2437ea3027d8405da3fe7c7edaa2bfa3220139568b6c503c8e9a","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-29T12:14:23Z","title_canon_sha256":"457d07179da477c904328ce8700b7a2728fb36f715bfb8136b3618ff731438e8"},"schema_version":"1.0","source":{"id":"2607.26820","kind":"arxiv","version":1}},"canonical_sha256":"87a48487dfe54a183c10f379ea3093932451254e510786eb89f50c89d1324e80","receipt":{"builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"87a48487dfe54a183c10f379ea3093932451254e510786eb89f50c89d1324e80","first_computed_at":"2026-07-30T01:22:26.413220Z","kind":"pith_receipt","last_reissued_at":"2026-07-30T01:22:26.413220Z","receipt_version":"0.3","signature_status":"unsigned_v0"},"source_id":"2607.26820","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2089581b9e69b30a415475f8c21e7dbba626f110035bc23a1d5c1c19f5525faf","sha256:a120c4bad2498d7aa48f4e585bf24e629f949cc4905a00c6fa453e41d18a7820"],"state_sha256":"3a4d33adde56caf7f24bbec6a2ec061e3fa91ec0910af6c1f1ac5fcd6ea9abae"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K8wATIxksiBcotkt2jM21L434UEbqoIMypXVG6kYoutL1sPwGjaD6lgWadiNdS5KwmTldpaPIv/KCdl9hyhvDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T21:39:18.035262Z","bundle_sha256":"0493e4f989ad1403c162d376e4fac33c3ee2d9f33a21e5f44a85fa69a9d6a758"}}