{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XOJ42VNFIOXPGWPEO3RQQ5ZYDO","short_pith_number":"pith:XOJ42VNF","canonical_record":{"source":{"id":"2507.12872","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-07-17T07:45:53Z","cross_cats_sorted":["cs.CR","cs.HC"],"title_canon_sha256":"6286d0879bd589f424e32058cfd53bceaf029072c717e9fdfdf92422e3e24661","abstract_canon_sha256":"0a43f94d7738ca7515f3cf7fafe4ed096f3a89111ae8895872139083e16c51bb"},"schema_version":"1.0"},"canonical_sha256":"bb93cd55a543aef359e476e30877381bac16fc71c0401d0ae05c46d34f195439","source":{"kind":"arxiv","id":"2507.12872","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.12872","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"arxiv_version","alias_value":"2507.12872v1","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.12872","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"pith_short_12","alias_value":"XOJ42VNFIOXP","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"pith_short_16","alias_value":"XOJ42VNFIOXPGWPE","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"pith_short_8","alias_value":"XOJ42VNF","created_at":"2026-07-05T11:38:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XOJ42VNFIOXPGWPEO3RQQ5ZYDO","target":"record","payload":{"canonical_record":{"source":{"id":"2507.12872","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-07-17T07:45:53Z","cross_cats_sorted":["cs.CR","cs.HC"],"title_canon_sha256":"6286d0879bd589f424e32058cfd53bceaf029072c717e9fdfdf92422e3e24661","abstract_canon_sha256":"0a43f94d7738ca7515f3cf7fafe4ed096f3a89111ae8895872139083e16c51bb"},"schema_version":"1.0"},"canonical_sha256":"bb93cd55a543aef359e476e30877381bac16fc71c0401d0ae05c46d34f195439","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:38:40.598511Z","signature_b64":"Tg1JnjJQP3Gx3UzLTtIZSgkrDqm7C8uJVhVAGorQx+lgyDnYwlGQIcg4QFc55oNQk6JEtzzQx4VNjZF4VIfbAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb93cd55a543aef359e476e30877381bac16fc71c0401d0ae05c46d34f195439","last_reissued_at":"2026-07-05T11:38:40.598003Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:38:40.598003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.12872","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:38:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P438fPqA92KTd3K/8TCyhBgHa5Pfhhs/3/vENkSEYAJ5yJrv4CmsuITZallmkmoUkxYWyNmPiIs4QepnK7JxDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T11:50:11.650628Z"},"content_sha256":"29df89449f00e237635cc405e310cf79dc9013ff4e1c927807a25fe79db8aec3","schema_version":"1.0","event_id":"sha256:29df89449f00e237635cc405e310cf79dc9013ff4e1c927807a25fe79db8aec3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XOJ42VNFIOXPGWPEO3RQQ5ZYDO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Manipulation Attacks by Misaligned AI: Risk Analysis and Safety Case Framework","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.HC"],"primary_cat":"cs.AI","authors_text":"Edward James Young, James Walpole, Jason R. Brown, Lindley Lentati, Mario Demetroudi, Rishane Dassanayake","submitted_at":"2025-07-17T07:45:53Z","abstract_excerpt":"Frontier AI systems are rapidly advancing in their capabilities to persuade, deceive, and influence human behaviour, with current models already demonstrating human-level persuasion and strategic deception in specific contexts. Humans are often the weakest link in cybersecurity systems, and a misaligned AI system deployed internally within a frontier company may seek to undermine human oversight by manipulating employees. Despite this growing threat, manipulation attacks have received little attention, and no systematic framework exists for assessing and mitigating these risks. To address this"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.12872","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.12872/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:38:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+STv0VX+T0p2HyuPM9DyAlJ/m7KGqhQEjOTuYNJyrtAd4GXvG8G4kHt3N/zUSbXRbrskr9wMfCfJEZ4Cu1jrAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T11:50:11.651196Z"},"content_sha256":"ca8adc3e99a84cd7c0b029536c04b0c75059a1662a40a97dcdaa41e2bbd5e02c","schema_version":"1.0","event_id":"sha256:ca8adc3e99a84cd7c0b029536c04b0c75059a1662a40a97dcdaa41e2bbd5e02c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XOJ42VNFIOXPGWPEO3RQQ5ZYDO/bundle.json","state_url":"https://pith.science/pith/XOJ42VNFIOXPGWPEO3RQQ5ZYDO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XOJ42VNFIOXPGWPEO3RQQ5ZYDO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T11:50:11Z","links":{"resolver":"https://pith.science/pith/XOJ42VNFIOXPGWPEO3RQQ5ZYDO","bundle":"https://pith.science/pith/XOJ42VNFIOXPGWPEO3RQQ5ZYDO/bundle.json","state":"https://pith.science/pith/XOJ42VNFIOXPGWPEO3RQQ5ZYDO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XOJ42VNFIOXPGWPEO3RQQ5ZYDO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XOJ42VNFIOXPGWPEO3RQQ5ZYDO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0a43f94d7738ca7515f3cf7fafe4ed096f3a89111ae8895872139083e16c51bb","cross_cats_sorted":["cs.CR","cs.HC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-07-17T07:45:53Z","title_canon_sha256":"6286d0879bd589f424e32058cfd53bceaf029072c717e9fdfdf92422e3e24661"},"schema_version":"1.0","source":{"id":"2507.12872","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.12872","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"arxiv_version","alias_value":"2507.12872v1","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.12872","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"pith_short_12","alias_value":"XOJ42VNFIOXP","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"pith_short_16","alias_value":"XOJ42VNFIOXPGWPE","created_at":"2026-07-05T11:38:40Z"},{"alias_kind":"pith_short_8","alias_value":"XOJ42VNF","created_at":"2026-07-05T11:38:40Z"}],"graph_snapshots":[{"event_id":"sha256:ca8adc3e99a84cd7c0b029536c04b0c75059a1662a40a97dcdaa41e2bbd5e02c","target":"graph","created_at":"2026-07-05T11:38:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.12872/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Frontier AI systems are rapidly advancing in their capabilities to persuade, deceive, and influence human behaviour, with current models already demonstrating human-level persuasion and strategic deception in specific contexts. Humans are often the weakest link in cybersecurity systems, and a misaligned AI system deployed internally within a frontier company may seek to undermine human oversight by manipulating employees. Despite this growing threat, manipulation attacks have received little attention, and no systematic framework exists for assessing and mitigating these risks. To address this","authors_text":"Edward James Young, James Walpole, Jason R. Brown, Lindley Lentati, Mario Demetroudi, Rishane Dassanayake","cross_cats":["cs.CR","cs.HC"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-07-17T07:45:53Z","title":"Manipulation Attacks by Misaligned AI: Risk Analysis and Safety Case Framework"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.12872","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:29df89449f00e237635cc405e310cf79dc9013ff4e1c927807a25fe79db8aec3","target":"record","created_at":"2026-07-05T11:38:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0a43f94d7738ca7515f3cf7fafe4ed096f3a89111ae8895872139083e16c51bb","cross_cats_sorted":["cs.CR","cs.HC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-07-17T07:45:53Z","title_canon_sha256":"6286d0879bd589f424e32058cfd53bceaf029072c717e9fdfdf92422e3e24661"},"schema_version":"1.0","source":{"id":"2507.12872","kind":"arxiv","version":1}},"canonical_sha256":"bb93cd55a543aef359e476e30877381bac16fc71c0401d0ae05c46d34f195439","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bb93cd55a543aef359e476e30877381bac16fc71c0401d0ae05c46d34f195439","first_computed_at":"2026-07-05T11:38:40.598003Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:38:40.598003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Tg1JnjJQP3Gx3UzLTtIZSgkrDqm7C8uJVhVAGorQx+lgyDnYwlGQIcg4QFc55oNQk6JEtzzQx4VNjZF4VIfbAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:38:40.598511Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.12872","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:29df89449f00e237635cc405e310cf79dc9013ff4e1c927807a25fe79db8aec3","sha256:ca8adc3e99a84cd7c0b029536c04b0c75059a1662a40a97dcdaa41e2bbd5e02c"],"state_sha256":"cf98a996d58ae452d414cdf97610d1f034aebd7b2924cb23af6028932d634746"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j63b6m1wE76aCgpJHn8KQvRSDc7URxM58FMWcEHlINtZaqwZpNilTlWSr/uVSa+tBAYKxj6kxGTzFaDo5yHLCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T11:50:11.655508Z","bundle_sha256":"bf93cc7120cf21f8d649002082ea28876ad2b6f0a1ede4707c1f34467d9a947d"}}