{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SGMOKGMSJ6GGOAEKRAAJORDLX6","short_pith_number":"pith:SGMOKGMS","canonical_record":{"source":{"id":"2402.00898","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-31T19:52:00Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"4fb60857dfa75f0c80bb55767c0bcce3f2f1ebbc1f413a4b9c19b849c9ce530b","abstract_canon_sha256":"06a85644eca3c85e9b73f1267bcf82ff3a8a00af3905c568bf9709f7469f68d3"},"schema_version":"1.0"},"canonical_sha256":"9198e519924f8c67008a880097446bbf804c336b27c6afd526c35147e2ca57c0","source":{"kind":"arxiv","id":"2402.00898","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.00898","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"arxiv_version","alias_value":"2402.00898v1","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.00898","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"pith_short_12","alias_value":"SGMOKGMSJ6GG","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"pith_short_16","alias_value":"SGMOKGMSJ6GGOAEK","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"pith_short_8","alias_value":"SGMOKGMS","created_at":"2026-07-05T07:40:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SGMOKGMSJ6GGOAEKRAAJORDLX6","target":"record","payload":{"canonical_record":{"source":{"id":"2402.00898","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-31T19:52:00Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"4fb60857dfa75f0c80bb55767c0bcce3f2f1ebbc1f413a4b9c19b849c9ce530b","abstract_canon_sha256":"06a85644eca3c85e9b73f1267bcf82ff3a8a00af3905c568bf9709f7469f68d3"},"schema_version":"1.0"},"canonical_sha256":"9198e519924f8c67008a880097446bbf804c336b27c6afd526c35147e2ca57c0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:40:27.768163Z","signature_b64":"22cz5qpj6lGKnTBMOSFrJGpxHEoMP81qaw87Sw3xjO9bFcUGPCZ1Q/lQu/zKC2pppBqyCpGgZeV6yRNS28WDDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9198e519924f8c67008a880097446bbf804c336b27c6afd526c35147e2ca57c0","last_reissued_at":"2026-07-05T07:40:27.767632Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:40:27.767632Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.00898","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:40:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Hv62ifXwok2KtLVylDSbR8SxA7E1UhK/FvBP0W+AiwKY8o9MkGQHXxtQejt3M8+qvhu/eIJkZHCA72zjuLhIDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:30:07.680705Z"},"content_sha256":"908e07116665cb62917246b6149877a5c1f0051e3a5c5dcce510b65e5029ca1a","schema_version":"1.0","event_id":"sha256:908e07116665cb62917246b6149877a5c1f0051e3a5c5dcce510b65e5029ca1a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SGMOKGMSJ6GGOAEKRAAJORDLX6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Alisia Marianne Michel, Jason Bennett Thatcher, Raghava Rao Mukkamala, Sippo Rossi","submitted_at":"2024-01-31T19:52:00Z","abstract_excerpt":"Large language models and AI chatbots have been at the forefront of democratizing artificial intelligence. However, the releases of ChatGPT and other similar tools have been followed by growing concerns regarding the difficulty of controlling large language models and their outputs. Currently, we are witnessing a cat-and-mouse game where users attempt to misuse the models with a novel attack called prompt injections. In contrast, the developers attempt to discover the vulnerabilities and block the attacks simultaneously. In this paper, we provide an overview of these emergent threats and prese"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.00898","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.00898/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:40:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3dvwGKuG6pgEmkxV/foXDWysc67b1NMm6ssbbREJ+ANLQq5TMPf79GQs4l2l2T5y6qiuYUZMZsvSBq4AYDo8Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:30:07.681293Z"},"content_sha256":"18e320ede4852cb1fe8ce8e8afce6ae18f018e3cf112a76a9b30785a25ed3b26","schema_version":"1.0","event_id":"sha256:18e320ede4852cb1fe8ce8e8afce6ae18f018e3cf112a76a9b30785a25ed3b26"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SGMOKGMSJ6GGOAEKRAAJORDLX6/bundle.json","state_url":"https://pith.science/pith/SGMOKGMSJ6GGOAEKRAAJORDLX6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SGMOKGMSJ6GGOAEKRAAJORDLX6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T20:30:07Z","links":{"resolver":"https://pith.science/pith/SGMOKGMSJ6GGOAEKRAAJORDLX6","bundle":"https://pith.science/pith/SGMOKGMSJ6GGOAEKRAAJORDLX6/bundle.json","state":"https://pith.science/pith/SGMOKGMSJ6GGOAEKRAAJORDLX6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SGMOKGMSJ6GGOAEKRAAJORDLX6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SGMOKGMSJ6GGOAEKRAAJORDLX6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"06a85644eca3c85e9b73f1267bcf82ff3a8a00af3905c568bf9709f7469f68d3","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-31T19:52:00Z","title_canon_sha256":"4fb60857dfa75f0c80bb55767c0bcce3f2f1ebbc1f413a4b9c19b849c9ce530b"},"schema_version":"1.0","source":{"id":"2402.00898","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.00898","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"arxiv_version","alias_value":"2402.00898v1","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.00898","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"pith_short_12","alias_value":"SGMOKGMSJ6GG","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"pith_short_16","alias_value":"SGMOKGMSJ6GGOAEK","created_at":"2026-07-05T07:40:27Z"},{"alias_kind":"pith_short_8","alias_value":"SGMOKGMS","created_at":"2026-07-05T07:40:27Z"}],"graph_snapshots":[{"event_id":"sha256:18e320ede4852cb1fe8ce8e8afce6ae18f018e3cf112a76a9b30785a25ed3b26","target":"graph","created_at":"2026-07-05T07:40:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.00898/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models and AI chatbots have been at the forefront of democratizing artificial intelligence. However, the releases of ChatGPT and other similar tools have been followed by growing concerns regarding the difficulty of controlling large language models and their outputs. Currently, we are witnessing a cat-and-mouse game where users attempt to misuse the models with a novel attack called prompt injections. In contrast, the developers attempt to discover the vulnerabilities and block the attacks simultaneously. In this paper, we provide an overview of these emergent threats and prese","authors_text":"Alisia Marianne Michel, Jason Bennett Thatcher, Raghava Rao Mukkamala, Sippo Rossi","cross_cats":["cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-31T19:52:00Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.00898","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:908e07116665cb62917246b6149877a5c1f0051e3a5c5dcce510b65e5029ca1a","target":"record","created_at":"2026-07-05T07:40:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"06a85644eca3c85e9b73f1267bcf82ff3a8a00af3905c568bf9709f7469f68d3","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-31T19:52:00Z","title_canon_sha256":"4fb60857dfa75f0c80bb55767c0bcce3f2f1ebbc1f413a4b9c19b849c9ce530b"},"schema_version":"1.0","source":{"id":"2402.00898","kind":"arxiv","version":1}},"canonical_sha256":"9198e519924f8c67008a880097446bbf804c336b27c6afd526c35147e2ca57c0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9198e519924f8c67008a880097446bbf804c336b27c6afd526c35147e2ca57c0","first_computed_at":"2026-07-05T07:40:27.767632Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:40:27.767632Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"22cz5qpj6lGKnTBMOSFrJGpxHEoMP81qaw87Sw3xjO9bFcUGPCZ1Q/lQu/zKC2pppBqyCpGgZeV6yRNS28WDDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:40:27.768163Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.00898","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:908e07116665cb62917246b6149877a5c1f0051e3a5c5dcce510b65e5029ca1a","sha256:18e320ede4852cb1fe8ce8e8afce6ae18f018e3cf112a76a9b30785a25ed3b26"],"state_sha256":"c3ea8206218509416a0ce40cee396a4630743377015ae160fd9fbb023776025a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VYkT/6so+asRQk41jfYiYf0NP8u/yEZ79b8gWF6WLfbPRMQXAhhKDIhnbWgdFIkbgR6PpSoa4XN29AGX5TipDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T20:30:07.685483Z","bundle_sha256":"65fa4923dd8a6b0aeb660230a100bf22dfe634d5f3a40c20ce4d84f52bd62e16"}}