{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XITTF4EOM5EUKJEI4TGAQAXIJB","short_pith_number":"pith:XITTF4EO","canonical_record":{"source":{"id":"2403.04960","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T00:02:30Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"title_canon_sha256":"9b6b3293bc62713ff0eabe22dc0b8a2297bee3ee055ed63a113d0e9d70892588","abstract_canon_sha256":"94f4d12c2279ab35b77cfe9bace5791beebc7269b21c34f732ed05410ab6d2e7"},"schema_version":"1.0"},"canonical_sha256":"ba2732f08e6749452488e4cc0802e8484f94a976fa2aeac373cdfc2317210279","source":{"kind":"arxiv","id":"2403.04960","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.04960","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"arxiv_version","alias_value":"2403.04960v2","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.04960","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"pith_short_12","alias_value":"XITTF4EOM5EU","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"pith_short_16","alias_value":"XITTF4EOM5EUKJEI","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"pith_short_8","alias_value":"XITTF4EO","created_at":"2026-07-05T10:07:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XITTF4EOM5EUKJEI4TGAQAXIJB","target":"record","payload":{"canonical_record":{"source":{"id":"2403.04960","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T00:02:30Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"title_canon_sha256":"9b6b3293bc62713ff0eabe22dc0b8a2297bee3ee055ed63a113d0e9d70892588","abstract_canon_sha256":"94f4d12c2279ab35b77cfe9bace5791beebc7269b21c34f732ed05410ab6d2e7"},"schema_version":"1.0"},"canonical_sha256":"ba2732f08e6749452488e4cc0802e8484f94a976fa2aeac373cdfc2317210279","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:07:39.732358Z","signature_b64":"xhL12kEs82aPjmFTughmbDg3hkG8WrBe46eF9KUe8oWavzwib51BL2Tl5wQ+LlXPIxW6oGwP/nK9y1nUfAKUAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ba2732f08e6749452488e4cc0802e8484f94a976fa2aeac373cdfc2317210279","last_reissued_at":"2026-07-05T10:07:39.731866Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:07:39.731866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.04960","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:07:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y/yjtBORVR2k/mIFuTEJp6eH/aULoxYPLNLd0X4H2+2bmiDxZb1T46f4NKVCXKYK/PjjwPGTXXiBRm6Krs18CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:54:33.936086Z"},"content_sha256":"d58072c00dd428286d8ab4393b98933530381a06115822e76643d1981702b06c","schema_version":"1.0","event_id":"sha256:d58072c00dd428286d8ab4393b98933530381a06115822e76643d1981702b06c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XITTF4EOM5EUKJEI4TGAQAXIJB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CY","cs.LG"],"primary_cat":"cs.CR","authors_text":"Franziska Roesner, Ning Zhang, Tadayoshi Kohno, Umar Iqbal, Yuhao Wu","submitted_at":"2024-03-08T00:02:30Z","abstract_excerpt":"Large language models (LLMs) extended as systems, such as ChatGPT, have begun supporting third-party applications. These LLM apps leverage the de facto natural language-based automated execution paradigm of LLMs: that is, apps and their interactions are defined in natural language, provided access to user data, and allowed to freely interact with each other and the system. These LLM app ecosystems resemble the settings of earlier computing platforms, where there was insufficient isolation between apps and the system. Because third-party apps may not be trustworthy, and exacerbated by the impre"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.04960","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.04960/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:07:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eh9gV0P7AWyvjop9ajFICXSfqGPr/JR5s5weCAcsV/Pn21ZnM1HNgFGBI/PJKtfjmTtEK7x4sFxjXU0G6KU6Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:54:33.936600Z"},"content_sha256":"2e613ee3564443ac20e4d3fffb5ad5362d2917ad4ed6fd1e48f9bc1d77ea8b3a","schema_version":"1.0","event_id":"sha256:2e613ee3564443ac20e4d3fffb5ad5362d2917ad4ed6fd1e48f9bc1d77ea8b3a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XITTF4EOM5EUKJEI4TGAQAXIJB/bundle.json","state_url":"https://pith.science/pith/XITTF4EOM5EUKJEI4TGAQAXIJB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XITTF4EOM5EUKJEI4TGAQAXIJB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T18:54:33Z","links":{"resolver":"https://pith.science/pith/XITTF4EOM5EUKJEI4TGAQAXIJB","bundle":"https://pith.science/pith/XITTF4EOM5EUKJEI4TGAQAXIJB/bundle.json","state":"https://pith.science/pith/XITTF4EOM5EUKJEI4TGAQAXIJB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XITTF4EOM5EUKJEI4TGAQAXIJB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XITTF4EOM5EUKJEI4TGAQAXIJB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"94f4d12c2279ab35b77cfe9bace5791beebc7269b21c34f732ed05410ab6d2e7","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T00:02:30Z","title_canon_sha256":"9b6b3293bc62713ff0eabe22dc0b8a2297bee3ee055ed63a113d0e9d70892588"},"schema_version":"1.0","source":{"id":"2403.04960","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.04960","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"arxiv_version","alias_value":"2403.04960v2","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.04960","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"pith_short_12","alias_value":"XITTF4EOM5EU","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"pith_short_16","alias_value":"XITTF4EOM5EUKJEI","created_at":"2026-07-05T10:07:39Z"},{"alias_kind":"pith_short_8","alias_value":"XITTF4EO","created_at":"2026-07-05T10:07:39Z"}],"graph_snapshots":[{"event_id":"sha256:2e613ee3564443ac20e4d3fffb5ad5362d2917ad4ed6fd1e48f9bc1d77ea8b3a","target":"graph","created_at":"2026-07-05T10:07:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.04960/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) extended as systems, such as ChatGPT, have begun supporting third-party applications. These LLM apps leverage the de facto natural language-based automated execution paradigm of LLMs: that is, apps and their interactions are defined in natural language, provided access to user data, and allowed to freely interact with each other and the system. These LLM app ecosystems resemble the settings of earlier computing platforms, where there was insufficient isolation between apps and the system. Because third-party apps may not be trustworthy, and exacerbated by the impre","authors_text":"Franziska Roesner, Ning Zhang, Tadayoshi Kohno, Umar Iqbal, Yuhao Wu","cross_cats":["cs.AI","cs.CL","cs.CY","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T00:02:30Z","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.04960","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d58072c00dd428286d8ab4393b98933530381a06115822e76643d1981702b06c","target":"record","created_at":"2026-07-05T10:07:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"94f4d12c2279ab35b77cfe9bace5791beebc7269b21c34f732ed05410ab6d2e7","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T00:02:30Z","title_canon_sha256":"9b6b3293bc62713ff0eabe22dc0b8a2297bee3ee055ed63a113d0e9d70892588"},"schema_version":"1.0","source":{"id":"2403.04960","kind":"arxiv","version":2}},"canonical_sha256":"ba2732f08e6749452488e4cc0802e8484f94a976fa2aeac373cdfc2317210279","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ba2732f08e6749452488e4cc0802e8484f94a976fa2aeac373cdfc2317210279","first_computed_at":"2026-07-05T10:07:39.731866Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:07:39.731866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xhL12kEs82aPjmFTughmbDg3hkG8WrBe46eF9KUe8oWavzwib51BL2Tl5wQ+LlXPIxW6oGwP/nK9y1nUfAKUAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:07:39.732358Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.04960","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d58072c00dd428286d8ab4393b98933530381a06115822e76643d1981702b06c","sha256:2e613ee3564443ac20e4d3fffb5ad5362d2917ad4ed6fd1e48f9bc1d77ea8b3a"],"state_sha256":"3c449abd1f881bf7a103fc51840b08c6dc5130e3bf4e78639ffecfe0a46669df"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FJbnyLe7zbvRkDTW1IKJzc3MVRfd7Z8UkKN68ZKomB50f9U0Npbtl5WLlzeiBL2yUnv5+54XuH+N2iSo+QHhAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T18:54:33.941570Z","bundle_sha256":"f9e2d2738c3d5cf07062cf17e5d47b92e4ea9954ecb4ab9df52b60798080b74a"}}