{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QHOLJPVLT2AHZ5X645MHG74DHQ","short_pith_number":"pith:QHOLJPVL","canonical_record":{"source":{"id":"2402.06363","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-09T12:15:51Z","cross_cats_sorted":[],"title_canon_sha256":"f3b2590dec92c3f08becba30f8b1d8ae343ab5871f021c5d9f89752049e79693","abstract_canon_sha256":"de66f95ea93c6469830ac8390ed1ca13ee6a7a1e744fbda09fe18edb4e9b72c7"},"schema_version":"1.0"},"canonical_sha256":"81dcb4beab9e807cf6fee758737f833c2cb0653bf356f5850694e305f25b8f7a","source":{"kind":"arxiv","id":"2402.06363","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.06363","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.06363v2","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.06363","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"pith_short_12","alias_value":"QHOLJPVLT2AH","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"pith_short_16","alias_value":"QHOLJPVLT2AHZ5X6","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"pith_short_8","alias_value":"QHOLJPVL","created_at":"2026-07-05T09:11:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QHOLJPVLT2AHZ5X645MHG74DHQ","target":"record","payload":{"canonical_record":{"source":{"id":"2402.06363","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-09T12:15:51Z","cross_cats_sorted":[],"title_canon_sha256":"f3b2590dec92c3f08becba30f8b1d8ae343ab5871f021c5d9f89752049e79693","abstract_canon_sha256":"de66f95ea93c6469830ac8390ed1ca13ee6a7a1e744fbda09fe18edb4e9b72c7"},"schema_version":"1.0"},"canonical_sha256":"81dcb4beab9e807cf6fee758737f833c2cb0653bf356f5850694e305f25b8f7a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:11:46.621747Z","signature_b64":"l9N4UyLp6Zauzl8p2oxfn9/f2OOoPuEfFjV/ljlPCm1/kBeooF0CfIe4pQ4gBDRIQUk1XKcDAZ52QZdZPLhmDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"81dcb4beab9e807cf6fee758737f833c2cb0653bf356f5850694e305f25b8f7a","last_reissued_at":"2026-07-05T09:11:46.621176Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:11:46.621176Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.06363","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fqY/Iv9lCTnYzAY/R8pn43HBI66CTcXV93s6Vm5107LOZOT03SYpJjatE3ZfItX4R2CxB9S6eER6RL0AP12cDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:36:18.662649Z"},"content_sha256":"82b1ef5c4d9ea91fe08bc2af9d359b31d498afdcc9bd6cad8e499c18445d94a9","schema_version":"1.0","event_id":"sha256:82b1ef5c4d9ea91fe08bc2af9d359b31d498afdcc9bd6cad8e499c18445d94a9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QHOLJPVLT2AHZ5X645MHG74DHQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"StruQ: Defending Against Prompt Injection with Structured Queries","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chawin Sitawarin, David Wagner, Julien Piet, Sizhe Chen","submitted_at":"2024-02-09T12:15:51Z","abstract_excerpt":"Recent advances in Large Language Models (LLMs) enable exciting LLM-integrated applications, which perform text-based tasks by utilizing their advanced language understanding capabilities. However, as LLMs have improved, so have the attacks against them. Prompt injection attacks are an important threat: they trick the model into deviating from the original application's instructions and instead follow user directives. These attacks rely on the LLM's ability to follow instructions and inability to separate prompts and user data. We introduce structured queries, a general approach to tackle this"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.06363","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.06363/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jhIJhWxGKc2/IA2lxzXTjLIjM9q9a3jbFov4tdry89g/ZXTqSweh17sQkIna/J3DGnVgMVFj1afYonemSSGaAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:36:18.663222Z"},"content_sha256":"96aa8f8e7a0e53d29048ae6bbcc2077ea2157d99ad2540a3cbe0bfe215f38134","schema_version":"1.0","event_id":"sha256:96aa8f8e7a0e53d29048ae6bbcc2077ea2157d99ad2540a3cbe0bfe215f38134"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QHOLJPVLT2AHZ5X645MHG74DHQ/bundle.json","state_url":"https://pith.science/pith/QHOLJPVLT2AHZ5X645MHG74DHQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QHOLJPVLT2AHZ5X645MHG74DHQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:36:18Z","links":{"resolver":"https://pith.science/pith/QHOLJPVLT2AHZ5X645MHG74DHQ","bundle":"https://pith.science/pith/QHOLJPVLT2AHZ5X645MHG74DHQ/bundle.json","state":"https://pith.science/pith/QHOLJPVLT2AHZ5X645MHG74DHQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QHOLJPVLT2AHZ5X645MHG74DHQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QHOLJPVLT2AHZ5X645MHG74DHQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"de66f95ea93c6469830ac8390ed1ca13ee6a7a1e744fbda09fe18edb4e9b72c7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-09T12:15:51Z","title_canon_sha256":"f3b2590dec92c3f08becba30f8b1d8ae343ab5871f021c5d9f89752049e79693"},"schema_version":"1.0","source":{"id":"2402.06363","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.06363","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.06363v2","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.06363","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"pith_short_12","alias_value":"QHOLJPVLT2AH","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"pith_short_16","alias_value":"QHOLJPVLT2AHZ5X6","created_at":"2026-07-05T09:11:46Z"},{"alias_kind":"pith_short_8","alias_value":"QHOLJPVL","created_at":"2026-07-05T09:11:46Z"}],"graph_snapshots":[{"event_id":"sha256:96aa8f8e7a0e53d29048ae6bbcc2077ea2157d99ad2540a3cbe0bfe215f38134","target":"graph","created_at":"2026-07-05T09:11:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.06363/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in Large Language Models (LLMs) enable exciting LLM-integrated applications, which perform text-based tasks by utilizing their advanced language understanding capabilities. However, as LLMs have improved, so have the attacks against them. Prompt injection attacks are an important threat: they trick the model into deviating from the original application's instructions and instead follow user directives. These attacks rely on the LLM's ability to follow instructions and inability to separate prompts and user data. We introduce structured queries, a general approach to tackle this","authors_text":"Chawin Sitawarin, David Wagner, Julien Piet, Sizhe Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.06363","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:82b1ef5c4d9ea91fe08bc2af9d359b31d498afdcc9bd6cad8e499c18445d94a9","target":"record","created_at":"2026-07-05T09:11:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"de66f95ea93c6469830ac8390ed1ca13ee6a7a1e744fbda09fe18edb4e9b72c7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-09T12:15:51Z","title_canon_sha256":"f3b2590dec92c3f08becba30f8b1d8ae343ab5871f021c5d9f89752049e79693"},"schema_version":"1.0","source":{"id":"2402.06363","kind":"arxiv","version":2}},"canonical_sha256":"81dcb4beab9e807cf6fee758737f833c2cb0653bf356f5850694e305f25b8f7a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"81dcb4beab9e807cf6fee758737f833c2cb0653bf356f5850694e305f25b8f7a","first_computed_at":"2026-07-05T09:11:46.621176Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:11:46.621176Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"l9N4UyLp6Zauzl8p2oxfn9/f2OOoPuEfFjV/ljlPCm1/kBeooF0CfIe4pQ4gBDRIQUk1XKcDAZ52QZdZPLhmDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:11:46.621747Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.06363","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:82b1ef5c4d9ea91fe08bc2af9d359b31d498afdcc9bd6cad8e499c18445d94a9","sha256:96aa8f8e7a0e53d29048ae6bbcc2077ea2157d99ad2540a3cbe0bfe215f38134"],"state_sha256":"b36be6c912fe878539551af6cad7a66f2d738643e746c20a3c503ae33ccc8542"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rMmqnk0W/w8sXwntPOW/6VfTq9oUI/1l1jthDU3LdPxi2IIVo6Q3pycW1xH1J+DcmK6qZVrul11O4ZtlB4TKAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:36:18.667242Z","bundle_sha256":"e66bec779f354be15a20355f33045fa5891de1e20f7265e4ca3e81b08939ad4b"}}