{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:RFLUO4JFZ6KPEL7CADWSKISVPE","short_pith_number":"pith:RFLUO4JF","canonical_record":{"source":{"id":"2607.18847","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-21T08:35:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6e7ef3ecd87faa5fba43494b840ab728650b8d42a78b3f9445979289c4507c21","abstract_canon_sha256":"ff9dc8c3afcaf63c59fd451ded1342217e3e110ce139a17fe68fe7de05221235"},"schema_version":"1.0"},"canonical_sha256":"8957477125cf94f22fe200ed252255790bba92b62426884afc085a345948f2c0","source":{"kind":"arxiv","id":"2607.18847","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.18847","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"arxiv_version","alias_value":"2607.18847v1","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.18847","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"pith_short_12","alias_value":"RFLUO4JFZ6KP","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"pith_short_16","alias_value":"RFLUO4JFZ6KPEL7C","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"pith_short_8","alias_value":"RFLUO4JF","created_at":"2026-07-22T01:23:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:RFLUO4JFZ6KPEL7CADWSKISVPE","target":"record","payload":{"canonical_record":{"source":{"id":"2607.18847","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-21T08:35:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6e7ef3ecd87faa5fba43494b840ab728650b8d42a78b3f9445979289c4507c21","abstract_canon_sha256":"ff9dc8c3afcaf63c59fd451ded1342217e3e110ce139a17fe68fe7de05221235"},"schema_version":"1.0"},"canonical_sha256":"8957477125cf94f22fe200ed252255790bba92b62426884afc085a345948f2c0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-22T01:23:15.715244Z","signature_b64":"SpEgckYo8JTNTqYrxiezX3F4MCuv7AZ+O7zBDPirWhzjlgSnSTV+0+Yv+afMDKfZDHOhoCzm1MOJPtT+IpsqDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8957477125cf94f22fe200ed252255790bba92b62426884afc085a345948f2c0","last_reissued_at":"2026-07-22T01:23:15.714310Z","signature_status":"signed_v1","first_computed_at":"2026-07-22T01:23:15.714310Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.18847","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-22T01:23:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EQdE+Lmkp+EU6AJKC0ggJ1+r18ntdU43AMa4IVrFebhxBOD0AFp6tAmaOvdTL2ZnSNn/mde4e0oTpT0ij8XrAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T10:12:43.741437Z"},"content_sha256":"288f4c88e90b6ddc7974c75791695ba1f9f0459f37128043a6c9d5bb642edd1d","schema_version":"1.0","event_id":"sha256:288f4c88e90b6ddc7974c75791695ba1f9f0459f37128043a6c9d5bb642edd1d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:RFLUO4JFZ6KPEL7CADWSKISVPE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Data Leakage Prevention in Agentic Applications via Preemptive Hardening","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Akansha Shukla, Asaf Shabtai, Emily Bellov, Parth Atulbhai Gandhi, Yuval Elovici","submitted_at":"2026-07-21T08:35:22Z","abstract_excerpt":"Agentic systems integrate LLM driven planning with interfaces to external tools, making data leakage and tool misuse feasible via instruction/data boundary failures and prompt injection attacks. Enforcing required controls consistently is particularly challenging in workflows spanning many codebases and heterogeneous agents. To address this challenge in multi agentic systems, we present a pre-deployment pipeline for scanning, hardening, and validation of agentic applications. The pipeline analyzes prompt templates, tool interfaces, and tool-invocation code to identify leakage-enabling patterns"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.18847","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.18847/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-22T01:23:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N/IpezEwB166z9b5olMvgEBOSsfZb9MlDm+sgFBpzSQjWjExsuB3oNOu8Y8vY8kZyOJtd7gZBq6YMgQG+ACgAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T10:12:43.741820Z"},"content_sha256":"ed483a06f46165ab09c43143dd3a2b502268c790eaafa297f28c9fed19fdd16f","schema_version":"1.0","event_id":"sha256:ed483a06f46165ab09c43143dd3a2b502268c790eaafa297f28c9fed19fdd16f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RFLUO4JFZ6KPEL7CADWSKISVPE/bundle.json","state_url":"https://pith.science/pith/RFLUO4JFZ6KPEL7CADWSKISVPE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RFLUO4JFZ6KPEL7CADWSKISVPE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T10:12:43Z","links":{"resolver":"https://pith.science/pith/RFLUO4JFZ6KPEL7CADWSKISVPE","bundle":"https://pith.science/pith/RFLUO4JFZ6KPEL7CADWSKISVPE/bundle.json","state":"https://pith.science/pith/RFLUO4JFZ6KPEL7CADWSKISVPE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RFLUO4JFZ6KPEL7CADWSKISVPE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:RFLUO4JFZ6KPEL7CADWSKISVPE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ff9dc8c3afcaf63c59fd451ded1342217e3e110ce139a17fe68fe7de05221235","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-21T08:35:22Z","title_canon_sha256":"6e7ef3ecd87faa5fba43494b840ab728650b8d42a78b3f9445979289c4507c21"},"schema_version":"1.0","source":{"id":"2607.18847","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.18847","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"arxiv_version","alias_value":"2607.18847v1","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.18847","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"pith_short_12","alias_value":"RFLUO4JFZ6KP","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"pith_short_16","alias_value":"RFLUO4JFZ6KPEL7C","created_at":"2026-07-22T01:23:15Z"},{"alias_kind":"pith_short_8","alias_value":"RFLUO4JF","created_at":"2026-07-22T01:23:15Z"}],"graph_snapshots":[{"event_id":"sha256:ed483a06f46165ab09c43143dd3a2b502268c790eaafa297f28c9fed19fdd16f","target":"graph","created_at":"2026-07-22T01:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.18847/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Agentic systems integrate LLM driven planning with interfaces to external tools, making data leakage and tool misuse feasible via instruction/data boundary failures and prompt injection attacks. Enforcing required controls consistently is particularly challenging in workflows spanning many codebases and heterogeneous agents. To address this challenge in multi agentic systems, we present a pre-deployment pipeline for scanning, hardening, and validation of agentic applications. The pipeline analyzes prompt templates, tool interfaces, and tool-invocation code to identify leakage-enabling patterns","authors_text":"Akansha Shukla, Asaf Shabtai, Emily Bellov, Parth Atulbhai Gandhi, Yuval Elovici","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-21T08:35:22Z","title":"Data Leakage Prevention in Agentic Applications via Preemptive Hardening"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.18847","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:288f4c88e90b6ddc7974c75791695ba1f9f0459f37128043a6c9d5bb642edd1d","target":"record","created_at":"2026-07-22T01:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ff9dc8c3afcaf63c59fd451ded1342217e3e110ce139a17fe68fe7de05221235","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-21T08:35:22Z","title_canon_sha256":"6e7ef3ecd87faa5fba43494b840ab728650b8d42a78b3f9445979289c4507c21"},"schema_version":"1.0","source":{"id":"2607.18847","kind":"arxiv","version":1}},"canonical_sha256":"8957477125cf94f22fe200ed252255790bba92b62426884afc085a345948f2c0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8957477125cf94f22fe200ed252255790bba92b62426884afc085a345948f2c0","first_computed_at":"2026-07-22T01:23:15.714310Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-22T01:23:15.714310Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SpEgckYo8JTNTqYrxiezX3F4MCuv7AZ+O7zBDPirWhzjlgSnSTV+0+Yv+afMDKfZDHOhoCzm1MOJPtT+IpsqDA==","signature_status":"signed_v1","signed_at":"2026-07-22T01:23:15.715244Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.18847","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:288f4c88e90b6ddc7974c75791695ba1f9f0459f37128043a6c9d5bb642edd1d","sha256:ed483a06f46165ab09c43143dd3a2b502268c790eaafa297f28c9fed19fdd16f"],"state_sha256":"f87e6c24852c76825c423758ed96c299aff0df8958e4aee68f825fa4905aff67"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8ew7GxUAvMv9V5fC/DBPt0mJs0SR0git1apBivYhsjjC9/u/QSvQpimGEUN+NJ9IxkeRbZfn0e8kQLUAcmUVBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T10:12:43.744245Z","bundle_sha256":"7d26c1cb7031b4be246724ba380acf1cd7da1f3e4da7e49b1d14a36675a5e8bc"}}