{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:R33KB7PVKLIBXEJKDXX3TSRI5V","short_pith_number":"pith:R33KB7PV","canonical_record":{"source":{"id":"2608.00747","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.RO","submitted_at":"2026-08-01T16:31:00Z","cross_cats_sorted":["cs.AI","cs.CR","cs.MA"],"title_canon_sha256":"05ec38165baa894c93cfccdd3662268827e699429aaf73342b01b184e948e0ae","abstract_canon_sha256":"1cec1fd05025ca89227482b98c2478be49e89ba0af6c651d574d9e676410fe6a"},"schema_version":"1.0"},"canonical_sha256":"8ef6a0fdf552d01b912a1defb9ca28ed4f8c2c34fee3f489a324e97bbce6fa99","source":{"kind":"arxiv","id":"2608.00747","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.00747","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"arxiv_version","alias_value":"2608.00747v1","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.00747","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"pith_short_12","alias_value":"R33KB7PVKLIB","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"pith_short_16","alias_value":"R33KB7PVKLIBXEJK","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"pith_short_8","alias_value":"R33KB7PV","created_at":"2026-08-04T01:54:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:R33KB7PVKLIBXEJKDXX3TSRI5V","target":"record","payload":{"canonical_record":{"source":{"id":"2608.00747","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.RO","submitted_at":"2026-08-01T16:31:00Z","cross_cats_sorted":["cs.AI","cs.CR","cs.MA"],"title_canon_sha256":"05ec38165baa894c93cfccdd3662268827e699429aaf73342b01b184e948e0ae","abstract_canon_sha256":"1cec1fd05025ca89227482b98c2478be49e89ba0af6c651d574d9e676410fe6a"},"schema_version":"1.0"},"canonical_sha256":"8ef6a0fdf552d01b912a1defb9ca28ed4f8c2c34fee3f489a324e97bbce6fa99","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T01:54:51.970374Z","signature_b64":"Mu99InN8JbQDExZ7MEXoRL1IVRQLcCUnzXYA8pGR1Xs8g5cR008/A1UhfZf+4o8hklFGrDJg8gRQI8B7RmSKBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8ef6a0fdf552d01b912a1defb9ca28ed4f8c2c34fee3f489a324e97bbce6fa99","last_reissued_at":"2026-08-04T01:54:51.968545Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T01:54:51.968545Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.00747","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T01:54:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"np1SaeeQ+n5liyi1cUXgYQsKgpWVb5sJ105BH7eKCS9b3BGtP5a6iDbyff0AtMvNG+yNLl0hxUbqr5b7tN6dAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:35:17.316888Z"},"content_sha256":"32cb469f8a453006eae96f333c9a21539cbdb9ac2bd3b95818def3c3048e5349","schema_version":"1.0","event_id":"sha256:32cb469f8a453006eae96f333c9a21539cbdb9ac2bd3b95818def3c3048e5349"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:R33KB7PVKLIBXEJKDXX3TSRI5V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.MA"],"primary_cat":"cs.RO","authors_text":"Amisha Bagari, Hayretdin Bahsi, Neha Nagaraja","submitted_at":"2026-08-01T16:31:00Z","abstract_excerpt":"Large language models are increasingly integrated into autonomous robotic systems for task planning and control, but this integration exposes them to prompt injection attacks that can lead to unsafe decisions and physical harm. Multi-agent settings increase the risks through cross-agent contamination and broader attack surfaces. In this paper, we evaluate prompt injection attacks against an LLM-based multi-agent robotic system, considering both direct injections into task instructions and indirect injections through perception modules. In our experiments across varying attack-goal complexities"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.00747","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.00747/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T01:54:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UmGQxU61r4Zb52JykaDtSd5ZETfP7paM70j01Vf6LaRHd+TTC640SnfD2ocHLXgO+8RAmCR6HG8/q+DYI/qDAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:35:17.317396Z"},"content_sha256":"82928dd75dd30cfe6746306cdf510a7b0cd9508d6edf734ae376ee29e659e36f","schema_version":"1.0","event_id":"sha256:82928dd75dd30cfe6746306cdf510a7b0cd9508d6edf734ae376ee29e659e36f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R33KB7PVKLIBXEJKDXX3TSRI5V/bundle.json","state_url":"https://pith.science/pith/R33KB7PVKLIBXEJKDXX3TSRI5V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R33KB7PVKLIBXEJKDXX3TSRI5V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T08:35:17Z","links":{"resolver":"https://pith.science/pith/R33KB7PVKLIBXEJKDXX3TSRI5V","bundle":"https://pith.science/pith/R33KB7PVKLIBXEJKDXX3TSRI5V/bundle.json","state":"https://pith.science/pith/R33KB7PVKLIBXEJKDXX3TSRI5V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R33KB7PVKLIBXEJKDXX3TSRI5V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:R33KB7PVKLIBXEJKDXX3TSRI5V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1cec1fd05025ca89227482b98c2478be49e89ba0af6c651d574d9e676410fe6a","cross_cats_sorted":["cs.AI","cs.CR","cs.MA"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.RO","submitted_at":"2026-08-01T16:31:00Z","title_canon_sha256":"05ec38165baa894c93cfccdd3662268827e699429aaf73342b01b184e948e0ae"},"schema_version":"1.0","source":{"id":"2608.00747","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.00747","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"arxiv_version","alias_value":"2608.00747v1","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.00747","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"pith_short_12","alias_value":"R33KB7PVKLIB","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"pith_short_16","alias_value":"R33KB7PVKLIBXEJK","created_at":"2026-08-04T01:54:51Z"},{"alias_kind":"pith_short_8","alias_value":"R33KB7PV","created_at":"2026-08-04T01:54:51Z"}],"graph_snapshots":[{"event_id":"sha256:82928dd75dd30cfe6746306cdf510a7b0cd9508d6edf734ae376ee29e659e36f","target":"graph","created_at":"2026-08-04T01:54:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.00747/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models are increasingly integrated into autonomous robotic systems for task planning and control, but this integration exposes them to prompt injection attacks that can lead to unsafe decisions and physical harm. Multi-agent settings increase the risks through cross-agent contamination and broader attack surfaces. In this paper, we evaluate prompt injection attacks against an LLM-based multi-agent robotic system, considering both direct injections into task instructions and indirect injections through perception modules. In our experiments across varying attack-goal complexities","authors_text":"Amisha Bagari, Hayretdin Bahsi, Neha Nagaraja","cross_cats":["cs.AI","cs.CR","cs.MA"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.RO","submitted_at":"2026-08-01T16:31:00Z","title":"When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.00747","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:32cb469f8a453006eae96f333c9a21539cbdb9ac2bd3b95818def3c3048e5349","target":"record","created_at":"2026-08-04T01:54:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1cec1fd05025ca89227482b98c2478be49e89ba0af6c651d574d9e676410fe6a","cross_cats_sorted":["cs.AI","cs.CR","cs.MA"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.RO","submitted_at":"2026-08-01T16:31:00Z","title_canon_sha256":"05ec38165baa894c93cfccdd3662268827e699429aaf73342b01b184e948e0ae"},"schema_version":"1.0","source":{"id":"2608.00747","kind":"arxiv","version":1}},"canonical_sha256":"8ef6a0fdf552d01b912a1defb9ca28ed4f8c2c34fee3f489a324e97bbce6fa99","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8ef6a0fdf552d01b912a1defb9ca28ed4f8c2c34fee3f489a324e97bbce6fa99","first_computed_at":"2026-08-04T01:54:51.968545Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T01:54:51.968545Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Mu99InN8JbQDExZ7MEXoRL1IVRQLcCUnzXYA8pGR1Xs8g5cR008/A1UhfZf+4o8hklFGrDJg8gRQI8B7RmSKBQ==","signature_status":"signed_v1","signed_at":"2026-08-04T01:54:51.970374Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.00747","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:32cb469f8a453006eae96f333c9a21539cbdb9ac2bd3b95818def3c3048e5349","sha256:82928dd75dd30cfe6746306cdf510a7b0cd9508d6edf734ae376ee29e659e36f"],"state_sha256":"00a546ef80fcda2c4bc07c5390fc810c7875f5721cb0f4a74cb4266d6b12fc08"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4TJOmPbK5lGkgglHmfNJbujXMnbVWZYno9AG4Rt+zbfsvSRojlXDHSykQXh/UBxVYcj8SQN3rK9E+D0Rk+FOAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T08:35:17.321058Z","bundle_sha256":"df65dcb8b5ca65422c10b81ed33116e6c4227c0f8f6d7b18c6375b217ccacf43"}}