{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:UULTNMJ4X5SGPFZGNJMCRUMXBZ","short_pith_number":"pith:UULTNMJ4","canonical_record":{"source":{"id":"2608.12977","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T08:57:04Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"acaf38f008c8f0bd7549676a47f93947e9938fbf66c79b6a2c457bf9b344d8f0","abstract_canon_sha256":"6972e9ca82565dde56e9f0b68375d5a756e67433778fcd2a5f747588e9eda3cb"},"schema_version":"1.0"},"canonical_sha256":"a51736b13cbf646797266a5828d1970e5c45584437c33c0931716bc32514e4ec","source":{"kind":"arxiv","id":"2608.12977","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12977","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12977v1","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12977","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"pith_short_12","alias_value":"UULTNMJ4X5SG","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"pith_short_16","alias_value":"UULTNMJ4X5SGPFZG","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"pith_short_8","alias_value":"UULTNMJ4","created_at":"2026-08-14T01:00:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:UULTNMJ4X5SGPFZGNJMCRUMXBZ","target":"record","payload":{"canonical_record":{"source":{"id":"2608.12977","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T08:57:04Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"acaf38f008c8f0bd7549676a47f93947e9938fbf66c79b6a2c457bf9b344d8f0","abstract_canon_sha256":"6972e9ca82565dde56e9f0b68375d5a756e67433778fcd2a5f747588e9eda3cb"},"schema_version":"1.0"},"canonical_sha256":"a51736b13cbf646797266a5828d1970e5c45584437c33c0931716bc32514e4ec","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-14T01:00:03.429283Z","signature_b64":"cyeYAxdXyuGJcebIR8QyDkFb8oto8MyD2qdPspVVSzA1hwE6plRM00oCRRthQRChIXQsGM4fZXav8HxtWxPlCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a51736b13cbf646797266a5828d1970e5c45584437c33c0931716bc32514e4ec","last_reissued_at":"2026-08-14T01:00:03.427213Z","signature_status":"signed_v1","first_computed_at":"2026-08-14T01:00:03.427213Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.12977","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T01:00:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HWZ+/au1ESXuU+NSRxAXffoRlXqxh+4mYFstL+cc5UaJKJdIOxl3/i8mcw0KJJv3VrIkUhIzCkq9rZsJX4bdBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T11:26:11.151706Z"},"content_sha256":"b38c2192f0c90672dbe159d4a22c7240f4d1527149c8bafc2e7b0ceaa215f384","schema_version":"1.0","event_id":"sha256:b38c2192f0c90672dbe159d4a22c7240f4d1527149c8bafc2e7b0ceaa215f384"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:UULTNMJ4X5SGPFZGNJMCRUMXBZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chao Feng, Fengting Li, Jiajun Ruan, Peiyang Li, Yukun Chen","submitted_at":"2026-08-13T08:57:04Z","abstract_excerpt":"The expanding operational capabilities of large language model (LLM) agents introduce sophisticated security threats. Runtime defenses have emerged as an effective approach to mitigating these risks by integrating security mechanisms into the agent execution loop. However, existing runtime defenses rely heavily on manually designed interventions and lack a principled framework for their construction and maintenance. In this work, we first develop a harness-level formulation of runtime defense that systematically characterizes how harness mechanisms enable defense construction and provides a un"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12977","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.12977/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T01:00:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XVh++QYhIHHdiksYn3EeAfTSTbrzwGjExtddQ5CM+s0pVWHHxW/9TzwGSZXS/k7vXBRPM0W+0XHIl6RNiZqLDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T11:26:11.152315Z"},"content_sha256":"97949e20e1eb2b6737a79056533266a0c942947d0c6b826d296eb9c92aa7be2c","schema_version":"1.0","event_id":"sha256:97949e20e1eb2b6737a79056533266a0c942947d0c6b826d296eb9c92aa7be2c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UULTNMJ4X5SGPFZGNJMCRUMXBZ/bundle.json","state_url":"https://pith.science/pith/UULTNMJ4X5SGPFZGNJMCRUMXBZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UULTNMJ4X5SGPFZGNJMCRUMXBZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T11:26:11Z","links":{"resolver":"https://pith.science/pith/UULTNMJ4X5SGPFZGNJMCRUMXBZ","bundle":"https://pith.science/pith/UULTNMJ4X5SGPFZGNJMCRUMXBZ/bundle.json","state":"https://pith.science/pith/UULTNMJ4X5SGPFZGNJMCRUMXBZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UULTNMJ4X5SGPFZGNJMCRUMXBZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:UULTNMJ4X5SGPFZGNJMCRUMXBZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6972e9ca82565dde56e9f0b68375d5a756e67433778fcd2a5f747588e9eda3cb","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T08:57:04Z","title_canon_sha256":"acaf38f008c8f0bd7549676a47f93947e9938fbf66c79b6a2c457bf9b344d8f0"},"schema_version":"1.0","source":{"id":"2608.12977","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12977","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12977v1","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12977","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"pith_short_12","alias_value":"UULTNMJ4X5SG","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"pith_short_16","alias_value":"UULTNMJ4X5SGPFZG","created_at":"2026-08-14T01:00:03Z"},{"alias_kind":"pith_short_8","alias_value":"UULTNMJ4","created_at":"2026-08-14T01:00:03Z"}],"graph_snapshots":[{"event_id":"sha256:97949e20e1eb2b6737a79056533266a0c942947d0c6b826d296eb9c92aa7be2c","target":"graph","created_at":"2026-08-14T01:00:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.12977/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The expanding operational capabilities of large language model (LLM) agents introduce sophisticated security threats. Runtime defenses have emerged as an effective approach to mitigating these risks by integrating security mechanisms into the agent execution loop. However, existing runtime defenses rely heavily on manually designed interventions and lack a principled framework for their construction and maintenance. In this work, we first develop a harness-level formulation of runtime defense that systematically characterizes how harness mechanisms enable defense construction and provides a un","authors_text":"Chao Feng, Fengting Li, Jiajun Ruan, Peiyang Li, Yukun Chen","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12977","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b38c2192f0c90672dbe159d4a22c7240f4d1527149c8bafc2e7b0ceaa215f384","target":"record","created_at":"2026-08-14T01:00:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6972e9ca82565dde56e9f0b68375d5a756e67433778fcd2a5f747588e9eda3cb","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T08:57:04Z","title_canon_sha256":"acaf38f008c8f0bd7549676a47f93947e9938fbf66c79b6a2c457bf9b344d8f0"},"schema_version":"1.0","source":{"id":"2608.12977","kind":"arxiv","version":1}},"canonical_sha256":"a51736b13cbf646797266a5828d1970e5c45584437c33c0931716bc32514e4ec","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a51736b13cbf646797266a5828d1970e5c45584437c33c0931716bc32514e4ec","first_computed_at":"2026-08-14T01:00:03.427213Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-14T01:00:03.427213Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cyeYAxdXyuGJcebIR8QyDkFb8oto8MyD2qdPspVVSzA1hwE6plRM00oCRRthQRChIXQsGM4fZXav8HxtWxPlCQ==","signature_status":"signed_v1","signed_at":"2026-08-14T01:00:03.429283Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.12977","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b38c2192f0c90672dbe159d4a22c7240f4d1527149c8bafc2e7b0ceaa215f384","sha256:97949e20e1eb2b6737a79056533266a0c942947d0c6b826d296eb9c92aa7be2c"],"state_sha256":"5e254c1338b2f401172ad171696e0c12a7e1e091260a658cf9305e67c7dee7e5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tARBQ8If/0NmR/yyuRDZ75zVxpUN+kqP4XlkxuH7k0xJlhNGvZYYyDUUnXp9c0zVZnAhoL23FUBzdFeCUvsFBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T11:26:11.156785Z","bundle_sha256":"79d09d17feff2cdee5371aae699b2caf24fd26dc85432051f2e0af6f1d61df3e"}}