{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SGQOYMGNRPABYM2JKK2DGGNQGW","short_pith_number":"pith:SGQOYMGN","canonical_record":{"source":{"id":"2507.20526","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-07-28T05:13:04Z","cross_cats_sorted":["cs.CL","cs.CY"],"title_canon_sha256":"fd51307cd654cd6e7f810d0701d3eb3e0a30522d87f9356ce9a454d0bcbc34dd","abstract_canon_sha256":"447de1459a166d1c11b6f32f620e35d569ef23499f5aef939e0e560e4b46a6fd"},"schema_version":"1.0"},"canonical_sha256":"91a0ec30cd8bc01c334952b43319b035beb3d9ebefa5c007f9083982a6b18973","source":{"kind":"arxiv","id":"2507.20526","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.20526","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"arxiv_version","alias_value":"2507.20526v1","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.20526","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"pith_short_12","alias_value":"SGQOYMGNRPAB","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"pith_short_16","alias_value":"SGQOYMGNRPABYM2J","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"pith_short_8","alias_value":"SGQOYMGN","created_at":"2026-07-05T11:44:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SGQOYMGNRPABYM2JKK2DGGNQGW","target":"record","payload":{"canonical_record":{"source":{"id":"2507.20526","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-07-28T05:13:04Z","cross_cats_sorted":["cs.CL","cs.CY"],"title_canon_sha256":"fd51307cd654cd6e7f810d0701d3eb3e0a30522d87f9356ce9a454d0bcbc34dd","abstract_canon_sha256":"447de1459a166d1c11b6f32f620e35d569ef23499f5aef939e0e560e4b46a6fd"},"schema_version":"1.0"},"canonical_sha256":"91a0ec30cd8bc01c334952b43319b035beb3d9ebefa5c007f9083982a6b18973","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:44:21.078128Z","signature_b64":"GbNvI6bka1GG/Xh5er1NyIS2xabvUZz/Pdx9O04ST3ZsCAqctJUNBPaYd6NGK2MohOpW/OxhA/ma1eufKDEeCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"91a0ec30cd8bc01c334952b43319b035beb3d9ebefa5c007f9083982a6b18973","last_reissued_at":"2026-07-05T11:44:21.077635Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:44:21.077635Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.20526","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x3PjL4rbx72KYoaKbLU0xsVvZ9RkSTjhK/wld2/T7wE1sGwknZTiPVTHOiUDSvhis8nErfR4hZSLvsVW2b/WDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T23:01:48.374015Z"},"content_sha256":"ac6470ca832254e17ac947c4607eb0d8c3d96b69b38b5fdce782863ddbc52466","schema_version":"1.0","event_id":"sha256:ac6470ca832254e17ac947c4607eb0d8c3d96b69b38b5fdce782863ddbc52466"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SGQOYMGNRPABYM2JKK2DGGNQGW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CY"],"primary_cat":"cs.AI","authors_text":"Alexander Grattan, Andy Zou, Ayla Croft, Dan Hendrycks, Eliot Jones, Jai Patel, J. Zico Kolter, Mateusz Dziemian, Matt Fredrikson, Maxwell Lin, Micha Nowak, Nate Burnikell, Nick Winter, Robert Kirk, Valent Nathanael, Xander Davies, Yarin Gal","submitted_at":"2025-07-28T05:13:04Z","abstract_excerpt":"Recent advances have enabled LLM-powered AI agents to autonomously execute complex tasks by combining language model reasoning with tools, memory, and web access. But can these systems be trusted to follow deployment policies in realistic environments, especially under attack? To investigate, we ran the largest public red-teaming competition to date, targeting 22 frontier AI agents across 44 realistic deployment scenarios. Participants submitted 1.8 million prompt-injection attacks, with over 60,000 successfully eliciting policy violations such as unauthorized data access, illicit financial ac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.20526","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.20526/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"STcOpHyc3azZD85jVOGgvnDirTX3WQJxXPc+W6yqBmCrZDJQLsWutcAGxgx4GYspdmxcFqvO36+zBEI+RKU1Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T23:01:48.374537Z"},"content_sha256":"de6a05789188de9a6c9544c5b0d12469934390d5d163322ed75f75e74a20da72","schema_version":"1.0","event_id":"sha256:de6a05789188de9a6c9544c5b0d12469934390d5d163322ed75f75e74a20da72"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SGQOYMGNRPABYM2JKK2DGGNQGW/bundle.json","state_url":"https://pith.science/pith/SGQOYMGNRPABYM2JKK2DGGNQGW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SGQOYMGNRPABYM2JKK2DGGNQGW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T23:01:48Z","links":{"resolver":"https://pith.science/pith/SGQOYMGNRPABYM2JKK2DGGNQGW","bundle":"https://pith.science/pith/SGQOYMGNRPABYM2JKK2DGGNQGW/bundle.json","state":"https://pith.science/pith/SGQOYMGNRPABYM2JKK2DGGNQGW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SGQOYMGNRPABYM2JKK2DGGNQGW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SGQOYMGNRPABYM2JKK2DGGNQGW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"447de1459a166d1c11b6f32f620e35d569ef23499f5aef939e0e560e4b46a6fd","cross_cats_sorted":["cs.CL","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-07-28T05:13:04Z","title_canon_sha256":"fd51307cd654cd6e7f810d0701d3eb3e0a30522d87f9356ce9a454d0bcbc34dd"},"schema_version":"1.0","source":{"id":"2507.20526","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.20526","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"arxiv_version","alias_value":"2507.20526v1","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.20526","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"pith_short_12","alias_value":"SGQOYMGNRPAB","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"pith_short_16","alias_value":"SGQOYMGNRPABYM2J","created_at":"2026-07-05T11:44:21Z"},{"alias_kind":"pith_short_8","alias_value":"SGQOYMGN","created_at":"2026-07-05T11:44:21Z"}],"graph_snapshots":[{"event_id":"sha256:de6a05789188de9a6c9544c5b0d12469934390d5d163322ed75f75e74a20da72","target":"graph","created_at":"2026-07-05T11:44:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.20526/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances have enabled LLM-powered AI agents to autonomously execute complex tasks by combining language model reasoning with tools, memory, and web access. But can these systems be trusted to follow deployment policies in realistic environments, especially under attack? To investigate, we ran the largest public red-teaming competition to date, targeting 22 frontier AI agents across 44 realistic deployment scenarios. Participants submitted 1.8 million prompt-injection attacks, with over 60,000 successfully eliciting policy violations such as unauthorized data access, illicit financial ac","authors_text":"Alexander Grattan, Andy Zou, Ayla Croft, Dan Hendrycks, Eliot Jones, Jai Patel, J. Zico Kolter, Mateusz Dziemian, Matt Fredrikson, Maxwell Lin, Micha Nowak, Nate Burnikell, Nick Winter, Robert Kirk, Valent Nathanael, Xander Davies, Yarin Gal","cross_cats":["cs.CL","cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.20526","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ac6470ca832254e17ac947c4607eb0d8c3d96b69b38b5fdce782863ddbc52466","target":"record","created_at":"2026-07-05T11:44:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"447de1459a166d1c11b6f32f620e35d569ef23499f5aef939e0e560e4b46a6fd","cross_cats_sorted":["cs.CL","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-07-28T05:13:04Z","title_canon_sha256":"fd51307cd654cd6e7f810d0701d3eb3e0a30522d87f9356ce9a454d0bcbc34dd"},"schema_version":"1.0","source":{"id":"2507.20526","kind":"arxiv","version":1}},"canonical_sha256":"91a0ec30cd8bc01c334952b43319b035beb3d9ebefa5c007f9083982a6b18973","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"91a0ec30cd8bc01c334952b43319b035beb3d9ebefa5c007f9083982a6b18973","first_computed_at":"2026-07-05T11:44:21.077635Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:44:21.077635Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GbNvI6bka1GG/Xh5er1NyIS2xabvUZz/Pdx9O04ST3ZsCAqctJUNBPaYd6NGK2MohOpW/OxhA/ma1eufKDEeCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:44:21.078128Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.20526","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ac6470ca832254e17ac947c4607eb0d8c3d96b69b38b5fdce782863ddbc52466","sha256:de6a05789188de9a6c9544c5b0d12469934390d5d163322ed75f75e74a20da72"],"state_sha256":"25139bf44de28c32c1dcedcdeb890f6b91aab3c63d2b0ef16b9989a1900b2e29"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uuPDJY9SZnuqllNm/e0l9Z0a35vtE88VHbZyYDvCRdhcjO/MnZJkA5K2q+oE4PC1jma1fVmJwhtEi5xrilzOCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T23:01:48.381815Z","bundle_sha256":"2eb5caeadd6e895fad127045c683ef97c8a6860ee0b10fac0a499ee36548485e"}}