{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QPFITWRWVSRTTMCTZYCEEPEHQC","short_pith_number":"pith:QPFITWRW","canonical_record":{"source":{"id":"2502.04951","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-07T14:15:46Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"dd3456c74669d178aa139605c70be93dfb8f199859c077c3f78ec775751a0f86","abstract_canon_sha256":"78dba2450ae5fad6f4c87f8210c97a509c6e3d35cf41c40fcee93c76b3a5c7af"},"schema_version":"1.0"},"canonical_sha256":"83ca89da36aca339b053ce04423c8780a98e35ca6aae459751083b10d98be0ab","source":{"kind":"arxiv","id":"2502.04951","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.04951","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"arxiv_version","alias_value":"2502.04951v3","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.04951","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"pith_short_12","alias_value":"QPFITWRWVSRT","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"pith_short_16","alias_value":"QPFITWRWVSRTTMCT","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"pith_short_8","alias_value":"QPFITWRW","created_at":"2026-07-05T11:20:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QPFITWRWVSRTTMCTZYCEEPEHQC","target":"record","payload":{"canonical_record":{"source":{"id":"2502.04951","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-07T14:15:46Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"dd3456c74669d178aa139605c70be93dfb8f199859c077c3f78ec775751a0f86","abstract_canon_sha256":"78dba2450ae5fad6f4c87f8210c97a509c6e3d35cf41c40fcee93c76b3a5c7af"},"schema_version":"1.0"},"canonical_sha256":"83ca89da36aca339b053ce04423c8780a98e35ca6aae459751083b10d98be0ab","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:20:50.418594Z","signature_b64":"xxLQ1E1gnJrR5dbU1kVnR4nQM6bYeEBzq8YBxsQrrxbbu/ceXDUO5xYU5yWWgVOhh7bJ4yYOr6jZRoBJ9AnTBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"83ca89da36aca339b053ce04423c8780a98e35ca6aae459751083b10d98be0ab","last_reissued_at":"2026-07-05T11:20:50.418171Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:20:50.418171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.04951","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XpAQHbFf7Dnq4W1ps+nReyjjaBBKdOOPF5SEwopLZYzIgwmDm7wd86rkpLGHG0drqbK0pNVihp+2O4Lp4tUMAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T11:18:39.323291Z"},"content_sha256":"e3d1f725add64c1cbc1d1dfb390d69a78c3f6bde76ee971dcf35682d7f0e8feb","schema_version":"1.0","event_id":"sha256:e3d1f725add64c1cbc1d1dfb390d69a78c3f6bde76ee971dcf35682d7f0e8feb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QPFITWRWVSRTTMCTZYCEEPEHQC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Jingyi Zheng, Mingchen Li, Xinlei He, Yule Liu, Zeren Luo, Zhen Sun, Zifan Peng","submitted_at":"2025-02-07T14:15:46Z","abstract_excerpt":"Recent advancements in Large Language Models (LLMs) have significantly enhanced the capabilities of AI-Powered Search Engines (AIPSEs), offering precise and efficient responses by integrating external databases with pre-existing knowledge. However, we observe that these AIPSEs raise risks such as quoting malicious content or citing malicious websites, leading to harmful or unverified information dissemination. In this study, we conduct the first safety risk quantification on seven production AIPSEs by systematically defining the threat model, risk type, and evaluating responses to various quer"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.04951","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.04951/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hPMMcfr1VWWfEJ/alHi32DvJWi8V9vfcAxPNXy30aD7OPZ9LJEw0hI7ziKSjqU0V4vyhwMtN96h/jPX8YmEOCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T11:18:39.323818Z"},"content_sha256":"7df2b1cebfc86b51900452f1556aef02dd7834703a741ea1102ececc54b6b74c","schema_version":"1.0","event_id":"sha256:7df2b1cebfc86b51900452f1556aef02dd7834703a741ea1102ececc54b6b74c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QPFITWRWVSRTTMCTZYCEEPEHQC/bundle.json","state_url":"https://pith.science/pith/QPFITWRWVSRTTMCTZYCEEPEHQC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QPFITWRWVSRTTMCTZYCEEPEHQC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T11:18:39Z","links":{"resolver":"https://pith.science/pith/QPFITWRWVSRTTMCTZYCEEPEHQC","bundle":"https://pith.science/pith/QPFITWRWVSRTTMCTZYCEEPEHQC/bundle.json","state":"https://pith.science/pith/QPFITWRWVSRTTMCTZYCEEPEHQC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QPFITWRWVSRTTMCTZYCEEPEHQC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QPFITWRWVSRTTMCTZYCEEPEHQC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78dba2450ae5fad6f4c87f8210c97a509c6e3d35cf41c40fcee93c76b3a5c7af","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-07T14:15:46Z","title_canon_sha256":"dd3456c74669d178aa139605c70be93dfb8f199859c077c3f78ec775751a0f86"},"schema_version":"1.0","source":{"id":"2502.04951","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.04951","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"arxiv_version","alias_value":"2502.04951v3","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.04951","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"pith_short_12","alias_value":"QPFITWRWVSRT","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"pith_short_16","alias_value":"QPFITWRWVSRTTMCT","created_at":"2026-07-05T11:20:50Z"},{"alias_kind":"pith_short_8","alias_value":"QPFITWRW","created_at":"2026-07-05T11:20:50Z"}],"graph_snapshots":[{"event_id":"sha256:7df2b1cebfc86b51900452f1556aef02dd7834703a741ea1102ececc54b6b74c","target":"graph","created_at":"2026-07-05T11:20:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.04951/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advancements in Large Language Models (LLMs) have significantly enhanced the capabilities of AI-Powered Search Engines (AIPSEs), offering precise and efficient responses by integrating external databases with pre-existing knowledge. However, we observe that these AIPSEs raise risks such as quoting malicious content or citing malicious websites, leading to harmful or unverified information dissemination. In this study, we conduct the first safety risk quantification on seven production AIPSEs by systematically defining the threat model, risk type, and evaluating responses to various quer","authors_text":"Jingyi Zheng, Mingchen Li, Xinlei He, Yule Liu, Zeren Luo, Zhen Sun, Zifan Peng","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-07T14:15:46Z","title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.04951","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e3d1f725add64c1cbc1d1dfb390d69a78c3f6bde76ee971dcf35682d7f0e8feb","target":"record","created_at":"2026-07-05T11:20:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78dba2450ae5fad6f4c87f8210c97a509c6e3d35cf41c40fcee93c76b3a5c7af","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-07T14:15:46Z","title_canon_sha256":"dd3456c74669d178aa139605c70be93dfb8f199859c077c3f78ec775751a0f86"},"schema_version":"1.0","source":{"id":"2502.04951","kind":"arxiv","version":3}},"canonical_sha256":"83ca89da36aca339b053ce04423c8780a98e35ca6aae459751083b10d98be0ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"83ca89da36aca339b053ce04423c8780a98e35ca6aae459751083b10d98be0ab","first_computed_at":"2026-07-05T11:20:50.418171Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:20:50.418171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xxLQ1E1gnJrR5dbU1kVnR4nQM6bYeEBzq8YBxsQrrxbbu/ceXDUO5xYU5yWWgVOhh7bJ4yYOr6jZRoBJ9AnTBw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:20:50.418594Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.04951","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e3d1f725add64c1cbc1d1dfb390d69a78c3f6bde76ee971dcf35682d7f0e8feb","sha256:7df2b1cebfc86b51900452f1556aef02dd7834703a741ea1102ececc54b6b74c"],"state_sha256":"35c6b54b6b8ebd37bfc931036340c1914a29ee74cc80415bbf5392352f647627"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pwKeOpHwOvXRlNaqBZfW1e3j0/lH1M1k6voM+GCf0VCTycfJRv075dl0TpaQuY5VKw9g7C7WJTBWOqQ0bg7/Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T11:18:39.328945Z","bundle_sha256":"00f249c0fcd6358cd4fcd7368bec9d3d83482d6f9b6d7dd575c7ee8e6cf5a24c"}}