{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WXQSAGIJAGWKX4XO5GUIWLAEFI","short_pith_number":"pith:WXQSAGIJ","canonical_record":{"source":{"id":"2505.24019","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-29T21:39:08Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"457252fa3fa8e31ee251e066883cc42e7df39c278a19d21adab0d8cfa24e5fc7","abstract_canon_sha256":"343a73bbb99496a85563795b534250f311cfc2ab44572e99ddc4104e9154c861"},"schema_version":"1.0"},"canonical_sha256":"b5e120190901acabf2eee9a88b2c042a2606ce353f2450870a6158ab10c6d7e4","source":{"kind":"arxiv","id":"2505.24019","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.24019","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"arxiv_version","alias_value":"2505.24019v1","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24019","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"pith_short_12","alias_value":"WXQSAGIJAGWK","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"pith_short_16","alias_value":"WXQSAGIJAGWKX4XO","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"pith_short_8","alias_value":"WXQSAGIJ","created_at":"2026-07-05T11:12:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WXQSAGIJAGWKX4XO5GUIWLAEFI","target":"record","payload":{"canonical_record":{"source":{"id":"2505.24019","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-29T21:39:08Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"457252fa3fa8e31ee251e066883cc42e7df39c278a19d21adab0d8cfa24e5fc7","abstract_canon_sha256":"343a73bbb99496a85563795b534250f311cfc2ab44572e99ddc4104e9154c861"},"schema_version":"1.0"},"canonical_sha256":"b5e120190901acabf2eee9a88b2c042a2606ce353f2450870a6158ab10c6d7e4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:40.234943Z","signature_b64":"zv7jt/lrSTuElSJyauElKHL9WNN4erqjxB3d/DeCDsGVc8VjqxxftSyu6iUn3GmWb6zctQ4Ps73iGzGVtEcFDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b5e120190901acabf2eee9a88b2c042a2606ce353f2450870a6158ab10c6d7e4","last_reissued_at":"2026-07-05T11:12:40.234392Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:40.234392Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.24019","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7wNVghnAFkuSyfmfkU1M2/PDnnxRVaNVF4Owgbb7iFDJ7cWFIQeiVJd8/c6NzDtPcZtB7NPKVFzbd+7IJM21CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T02:31:27.588385Z"},"content_sha256":"7de40f6e69b7d26c06068194cb5eba4406d6e6433b24d4c101a12f56f65bccfd","schema_version":"1.0","event_id":"sha256:7de40f6e69b7d26c06068194cb5eba4406d6e6433b24d4c101a12f56f65bccfd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WXQSAGIJAGWKX4XO5GUIWLAEFI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM Agents Should Employ Security Principles","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Elisa Bertino, Kaiyuan Zhang, Ninghui Li, Pin-Yu Chen, Xiangyu Zhang, Zian Su","submitted_at":"2025-05-29T21:39:08Z","abstract_excerpt":"Large Language Model (LLM) agents show considerable promise for automating complex tasks using contextual reasoning; however, interactions involving multiple agents and the system's susceptibility to prompt injection and other forms of context manipulation introduce new vulnerabilities related to privacy leakage and system exploitation. This position paper argues that the well-established design principles in information security, which are commonly referred to as security principles, should be employed when deploying LLM agents at scale. Design principles such as defense-in-depth, least privi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24019","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.24019/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2qoSjmSuRkSJemFZXhh4mwijkUukeFGHg7uenNAQ8d+jGvAzdYA2vEG4vNnUJ0VeqrWgiYcHB1QwmMcPm/+vAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T02:31:27.588889Z"},"content_sha256":"3a3586365f3ade7b6006aca48ba4d65fcd2bd49f21aa6a8ad19fe71abc881fcf","schema_version":"1.0","event_id":"sha256:3a3586365f3ade7b6006aca48ba4d65fcd2bd49f21aa6a8ad19fe71abc881fcf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WXQSAGIJAGWKX4XO5GUIWLAEFI/bundle.json","state_url":"https://pith.science/pith/WXQSAGIJAGWKX4XO5GUIWLAEFI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WXQSAGIJAGWKX4XO5GUIWLAEFI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T02:31:27Z","links":{"resolver":"https://pith.science/pith/WXQSAGIJAGWKX4XO5GUIWLAEFI","bundle":"https://pith.science/pith/WXQSAGIJAGWKX4XO5GUIWLAEFI/bundle.json","state":"https://pith.science/pith/WXQSAGIJAGWKX4XO5GUIWLAEFI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WXQSAGIJAGWKX4XO5GUIWLAEFI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WXQSAGIJAGWKX4XO5GUIWLAEFI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"343a73bbb99496a85563795b534250f311cfc2ab44572e99ddc4104e9154c861","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-29T21:39:08Z","title_canon_sha256":"457252fa3fa8e31ee251e066883cc42e7df39c278a19d21adab0d8cfa24e5fc7"},"schema_version":"1.0","source":{"id":"2505.24019","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.24019","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"arxiv_version","alias_value":"2505.24019v1","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24019","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"pith_short_12","alias_value":"WXQSAGIJAGWK","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"pith_short_16","alias_value":"WXQSAGIJAGWKX4XO","created_at":"2026-07-05T11:12:40Z"},{"alias_kind":"pith_short_8","alias_value":"WXQSAGIJ","created_at":"2026-07-05T11:12:40Z"}],"graph_snapshots":[{"event_id":"sha256:3a3586365f3ade7b6006aca48ba4d65fcd2bd49f21aa6a8ad19fe71abc881fcf","target":"graph","created_at":"2026-07-05T11:12:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.24019/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model (LLM) agents show considerable promise for automating complex tasks using contextual reasoning; however, interactions involving multiple agents and the system's susceptibility to prompt injection and other forms of context manipulation introduce new vulnerabilities related to privacy leakage and system exploitation. This position paper argues that the well-established design principles in information security, which are commonly referred to as security principles, should be employed when deploying LLM agents at scale. Design principles such as defense-in-depth, least privi","authors_text":"Elisa Bertino, Kaiyuan Zhang, Ninghui Li, Pin-Yu Chen, Xiangyu Zhang, Zian Su","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24019","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7de40f6e69b7d26c06068194cb5eba4406d6e6433b24d4c101a12f56f65bccfd","target":"record","created_at":"2026-07-05T11:12:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"343a73bbb99496a85563795b534250f311cfc2ab44572e99ddc4104e9154c861","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-29T21:39:08Z","title_canon_sha256":"457252fa3fa8e31ee251e066883cc42e7df39c278a19d21adab0d8cfa24e5fc7"},"schema_version":"1.0","source":{"id":"2505.24019","kind":"arxiv","version":1}},"canonical_sha256":"b5e120190901acabf2eee9a88b2c042a2606ce353f2450870a6158ab10c6d7e4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b5e120190901acabf2eee9a88b2c042a2606ce353f2450870a6158ab10c6d7e4","first_computed_at":"2026-07-05T11:12:40.234392Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:40.234392Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zv7jt/lrSTuElSJyauElKHL9WNN4erqjxB3d/DeCDsGVc8VjqxxftSyu6iUn3GmWb6zctQ4Ps73iGzGVtEcFDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:40.234943Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.24019","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7de40f6e69b7d26c06068194cb5eba4406d6e6433b24d4c101a12f56f65bccfd","sha256:3a3586365f3ade7b6006aca48ba4d65fcd2bd49f21aa6a8ad19fe71abc881fcf"],"state_sha256":"219db32bcf5387c04f3ede163b994100009c7d89bf69d7fb377eb4a272463235"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z2W7Wj4Yn9FVn4VgrjaMdwHg1pNZmWYuD50+4zKnwXPobddF/u/cYohmtTpmUYYZrnQFO3BfKXhGCGUrDy3rAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T02:31:27.592232Z","bundle_sha256":"4e6bfa458083ab7333736e8f2b0e26c2c306a0df44990e2e39871e4ede8e5e37"}}