{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:WDL66Y4UVNCMT3A3K54MQIEOMX","short_pith_number":"pith:WDL66Y4U","canonical_record":{"source":{"id":"2608.06862","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T06:39:51Z","cross_cats_sorted":[],"title_canon_sha256":"6a365c379b107cc84d9a2eb534a72cc914aa4d0aa9d837b5c268dceccf08203f","abstract_canon_sha256":"d6815cfc1e7e3ce2bd85b8dbac4d3caaf6c27941eac072ecc5f2febcbe633e5a"},"schema_version":"1.0"},"canonical_sha256":"b0d7ef6394ab44c9ec1b5778c8208e65c1565b8281724732bc2562699c8893c4","source":{"kind":"arxiv","id":"2608.06862","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.06862","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"arxiv_version","alias_value":"2608.06862v1","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.06862","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"pith_short_12","alias_value":"WDL66Y4UVNCM","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"pith_short_16","alias_value":"WDL66Y4UVNCMT3A3","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"pith_short_8","alias_value":"WDL66Y4U","created_at":"2026-08-10T01:12:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:WDL66Y4UVNCMT3A3K54MQIEOMX","target":"record","payload":{"canonical_record":{"source":{"id":"2608.06862","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T06:39:51Z","cross_cats_sorted":[],"title_canon_sha256":"6a365c379b107cc84d9a2eb534a72cc914aa4d0aa9d837b5c268dceccf08203f","abstract_canon_sha256":"d6815cfc1e7e3ce2bd85b8dbac4d3caaf6c27941eac072ecc5f2febcbe633e5a"},"schema_version":"1.0"},"canonical_sha256":"b0d7ef6394ab44c9ec1b5778c8208e65c1565b8281724732bc2562699c8893c4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-10T01:12:19.596453Z","signature_b64":"OhcHUTmy/hXQiVIWlpkKJS6tKrEIvikgCkL76MsazTrUVdyG8TOd+f8uGlYXgb0Ximv9OwP8VzZOBwbxKN5OAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b0d7ef6394ab44c9ec1b5778c8208e65c1565b8281724732bc2562699c8893c4","last_reissued_at":"2026-08-10T01:12:19.593409Z","signature_status":"signed_v1","first_computed_at":"2026-08-10T01:12:19.593409Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.06862","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-10T01:12:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nB28uEwaGbWa/v/vkpHLSJ18LGdPjFSr6mci3TFZoBaKPIFfGIn4OV8VDyzKLp8Id5/oTBhainz5iuV4fPtiCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T16:13:27.316042Z"},"content_sha256":"f9a61c2025deb861557853a3b51969c40059331b3593f6997dc738dd5230a05e","schema_version":"1.0","event_id":"sha256:f9a61c2025deb861557853a3b51969c40059331b3593f6997dc738dd5230a05e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:WDL66Y4UVNCMT3A3K54MQIEOMX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SynChain: Inducing Computer-Use Agent Systems to Construct Their Own Attack Chains","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Blaise Delattre, Boyang Chen, Che Wang, Fuyao Zhang, Guowei Guan, Jiaming Zhang, Wei Yang Bryan Lim, Xiongtao Sun, Yang Cao, Yurong Hao","submitted_at":"2026-08-07T06:39:51Z","abstract_excerpt":"Computer-use agents~(CUAs) have transformed large language models into persistent execution systems capable of generating, storing, and reusing artifacts like skills and memory entries. However, existing security defenses largely treat attacks as externally triggered or temporally bounded, leaving a critical gap in addressing how compromise can propagate internally through an agent's own persistent state. We reveal that malicious influence can be covertly embedded into the structural redundancies of autonomously synthesized artifacts, allowing it to survive internal state updates and bypass st"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.06862","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.06862/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-10T01:12:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bZB7nGOycZTb0DiNIqfi1c+usCxPMoCCWrmPEDU+69TiPvGgYgBzd6AJBWVSAAhdoxLQcUfjU245wkCfC44XAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T16:13:27.316640Z"},"content_sha256":"8a2b9098132e311f76fd09f77dda8b3fee22c04f2f5665c609e64c180c4b98bd","schema_version":"1.0","event_id":"sha256:8a2b9098132e311f76fd09f77dda8b3fee22c04f2f5665c609e64c180c4b98bd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WDL66Y4UVNCMT3A3K54MQIEOMX/bundle.json","state_url":"https://pith.science/pith/WDL66Y4UVNCMT3A3K54MQIEOMX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WDL66Y4UVNCMT3A3K54MQIEOMX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T16:13:27Z","links":{"resolver":"https://pith.science/pith/WDL66Y4UVNCMT3A3K54MQIEOMX","bundle":"https://pith.science/pith/WDL66Y4UVNCMT3A3K54MQIEOMX/bundle.json","state":"https://pith.science/pith/WDL66Y4UVNCMT3A3K54MQIEOMX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WDL66Y4UVNCMT3A3K54MQIEOMX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:WDL66Y4UVNCMT3A3K54MQIEOMX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d6815cfc1e7e3ce2bd85b8dbac4d3caaf6c27941eac072ecc5f2febcbe633e5a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T06:39:51Z","title_canon_sha256":"6a365c379b107cc84d9a2eb534a72cc914aa4d0aa9d837b5c268dceccf08203f"},"schema_version":"1.0","source":{"id":"2608.06862","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.06862","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"arxiv_version","alias_value":"2608.06862v1","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.06862","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"pith_short_12","alias_value":"WDL66Y4UVNCM","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"pith_short_16","alias_value":"WDL66Y4UVNCMT3A3","created_at":"2026-08-10T01:12:19Z"},{"alias_kind":"pith_short_8","alias_value":"WDL66Y4U","created_at":"2026-08-10T01:12:19Z"}],"graph_snapshots":[{"event_id":"sha256:8a2b9098132e311f76fd09f77dda8b3fee22c04f2f5665c609e64c180c4b98bd","target":"graph","created_at":"2026-08-10T01:12:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.06862/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Computer-use agents~(CUAs) have transformed large language models into persistent execution systems capable of generating, storing, and reusing artifacts like skills and memory entries. However, existing security defenses largely treat attacks as externally triggered or temporally bounded, leaving a critical gap in addressing how compromise can propagate internally through an agent's own persistent state. We reveal that malicious influence can be covertly embedded into the structural redundancies of autonomously synthesized artifacts, allowing it to survive internal state updates and bypass st","authors_text":"Blaise Delattre, Boyang Chen, Che Wang, Fuyao Zhang, Guowei Guan, Jiaming Zhang, Wei Yang Bryan Lim, Xiongtao Sun, Yang Cao, Yurong Hao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T06:39:51Z","title":"SynChain: Inducing Computer-Use Agent Systems to Construct Their Own Attack Chains"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.06862","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f9a61c2025deb861557853a3b51969c40059331b3593f6997dc738dd5230a05e","target":"record","created_at":"2026-08-10T01:12:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d6815cfc1e7e3ce2bd85b8dbac4d3caaf6c27941eac072ecc5f2febcbe633e5a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T06:39:51Z","title_canon_sha256":"6a365c379b107cc84d9a2eb534a72cc914aa4d0aa9d837b5c268dceccf08203f"},"schema_version":"1.0","source":{"id":"2608.06862","kind":"arxiv","version":1}},"canonical_sha256":"b0d7ef6394ab44c9ec1b5778c8208e65c1565b8281724732bc2562699c8893c4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b0d7ef6394ab44c9ec1b5778c8208e65c1565b8281724732bc2562699c8893c4","first_computed_at":"2026-08-10T01:12:19.593409Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-10T01:12:19.593409Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OhcHUTmy/hXQiVIWlpkKJS6tKrEIvikgCkL76MsazTrUVdyG8TOd+f8uGlYXgb0Ximv9OwP8VzZOBwbxKN5OAw==","signature_status":"signed_v1","signed_at":"2026-08-10T01:12:19.596453Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.06862","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f9a61c2025deb861557853a3b51969c40059331b3593f6997dc738dd5230a05e","sha256:8a2b9098132e311f76fd09f77dda8b3fee22c04f2f5665c609e64c180c4b98bd"],"state_sha256":"c9313dbd18f5fad21da57d72df0c01670217662393fa2dab9c8861a707234678"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yC3lKpJVAgHPShr5FU+Ij/pkCxEoD/IO7DCsaUiU8j0qGfL5nVH2C66bzbzXerSGLQWlvoEhUXXEuLl967yBAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T16:13:27.321371Z","bundle_sha256":"7ff717334dba7e5c5cf92259d500915717049987d2a5bf538edfcdb842643055"}}