{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:YGBEBEDSPSGHGO2IFTLS2NNTZV","short_pith_number":"pith:YGBEBEDS","canonical_record":{"source":{"id":"2607.24625","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:19:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ca00aa45773dc4809a71f9896fc48478f8657827fa08fbc4e48c829a96056eaa","abstract_canon_sha256":"f2fcda85588115d64cc62071a1bf045b000b54d022db4a02055c09f4f26ee060"},"schema_version":"1.0"},"canonical_sha256":"c1824090727c8c733b482cd72d35b3cd4771d0705fb45d95299bef41298f442b","source":{"kind":"arxiv","id":"2607.24625","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.24625","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"arxiv_version","alias_value":"2607.24625v1","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.24625","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"pith_short_12","alias_value":"YGBEBEDSPSGH","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"pith_short_16","alias_value":"YGBEBEDSPSGHGO2I","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"pith_short_8","alias_value":"YGBEBEDS","created_at":"2026-07-28T02:24:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:YGBEBEDSPSGHGO2IFTLS2NNTZV","target":"record","payload":{"canonical_record":{"source":{"id":"2607.24625","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:19:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ca00aa45773dc4809a71f9896fc48478f8657827fa08fbc4e48c829a96056eaa","abstract_canon_sha256":"f2fcda85588115d64cc62071a1bf045b000b54d022db4a02055c09f4f26ee060"},"schema_version":"1.0"},"canonical_sha256":"c1824090727c8c733b482cd72d35b3cd4771d0705fb45d95299bef41298f442b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-28T02:24:13.563646Z","signature_b64":"zS1/mFKwyQjvZp6/lkSXrQUDnCki6DeH2QgAfZojwWg2u1GqUFR2KwO58+byLZH0QZv6HaAeqVrlP0Tv6XpFDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c1824090727c8c733b482cd72d35b3cd4771d0705fb45d95299bef41298f442b","last_reissued_at":"2026-07-28T02:24:13.562814Z","signature_status":"signed_v1","first_computed_at":"2026-07-28T02:24:13.562814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.24625","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T02:24:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lEFrEudzAZzBCNT2aVnNosvkD+s2szeKqIrAsHN1rjqJwXPcBFLOQlJTNlUsExz7s8p0UjqMaorR77kWVysWBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:01:27.569362Z"},"content_sha256":"4d653bf6733d583165b4c71fdb83d2fbbd1b7cd1ba4c01c752cf672eeabf6362","schema_version":"1.0","event_id":"sha256:4d653bf6733d583165b4c71fdb83d2fbbd1b7cd1ba4c01c752cf672eeabf6362"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:YGBEBEDSPSGHGO2IFTLS2NNTZV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Arseny Kravchenko, Ildar Iskhakov, Innokentii Konstantinov, Matvey Kukuy, Vadim Liventsev","submitted_at":"2026-07-27T16:19:45Z","abstract_excerpt":"Autonomous LLM agents processing mixed-confidentiality data face severe security risks from prompt injection attacks and reasoning errors. While dynamic Information Flow Control (IFC) provides structural security guarantees, traditional taint tracking permanently taints an agent's context upon reading unvetted data, severely restricting downstream utility. We present APPA (Agentic Permissions Policy Algebra), an IFC framework that resolves this usability bottleneck through engine-managed context branching and prospective acquisition enforcement. Before data acquisition occurs, APPA prospective"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.24625","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.24625/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T02:24:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"q4xUy/lm5mTyxd8lpSL1jHF+zAENdj/bK03uDefv8y78z5d4EQXgJUlsUXWV7QMbbgfBwokBAwBftdHlVFXFBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:01:27.569745Z"},"content_sha256":"78c38b1fced9d21477aa1371afea4f6df9dad23e22a776d237cd7782f77196f7","schema_version":"1.0","event_id":"sha256:78c38b1fced9d21477aa1371afea4f6df9dad23e22a776d237cd7782f77196f7"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:YGBEBEDSPSGHGO2IFTLS2NNTZV","target":"integrity","payload":{"note":"DOI is split by whitespace or line breaks in the printed bibliography. Reconstructed DOI 10.3233/JCS-2009-0352 resolves to 'Declassification: Dimensions and principles'. A reader following the printed text alone cannot reach it.","snippet":"Andrei Sabelfeld and David Sands. 2009. Declassification: Dimensions and Principles.Journal of Computer Security17, 5 (2009), 517–548. doi:10.3233/JCS- 2009-0352","arxiv_id":"2607.24625","detector":"doi_compliance","evidence":{"ref_index":40,"verdict_class":"incontrovertible","resolved_title":"Declassification: Dimensions and principles","printed_excerpt":"10.3233/jcs-","reconstructed_doi":"10.3233/JCS-2009-0352"},"severity":"advisory","ref_index":40,"audited_at":"2026-07-31T10:31:48.716936Z","event_type":"pith.integrity.v1","detected_doi":"10.3233/JCS-2009-0352","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"41aa4bcc8997a011e8743b3bc10b5c2ea8e58994be59f51b04c40fdd5414eeb5","paper_version":1,"verdict_class":"incontrovertible","resolved_title":"Declassification: Dimensions and principles","detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":14309,"payload_sha256":"262e0c5ba6a11660721123dccd505df5179d67cae60079d82de0363c878c85f1","signature_b64":null,"signing_key_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-31T10:36:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YiuXsvddnABuVJmSvRgjgID1xMLPrp0MRkkIYeCA9KtwgsbNLExYBtw0y4F3rbacfPJBazuI/ST0AOjKKxHTAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:01:27.571937Z"},"content_sha256":"0573148f39d0698703c73c6d158181232f0448c5107fa1c68db1a268b82a7fd0","schema_version":"1.0","event_id":"sha256:0573148f39d0698703c73c6d158181232f0448c5107fa1c68db1a268b82a7fd0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YGBEBEDSPSGHGO2IFTLS2NNTZV/bundle.json","state_url":"https://pith.science/pith/YGBEBEDSPSGHGO2IFTLS2NNTZV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YGBEBEDSPSGHGO2IFTLS2NNTZV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T03:01:27Z","links":{"resolver":"https://pith.science/pith/YGBEBEDSPSGHGO2IFTLS2NNTZV","bundle":"https://pith.science/pith/YGBEBEDSPSGHGO2IFTLS2NNTZV/bundle.json","state":"https://pith.science/pith/YGBEBEDSPSGHGO2IFTLS2NNTZV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YGBEBEDSPSGHGO2IFTLS2NNTZV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:YGBEBEDSPSGHGO2IFTLS2NNTZV","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f2fcda85588115d64cc62071a1bf045b000b54d022db4a02055c09f4f26ee060","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:19:45Z","title_canon_sha256":"ca00aa45773dc4809a71f9896fc48478f8657827fa08fbc4e48c829a96056eaa"},"schema_version":"1.0","source":{"id":"2607.24625","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.24625","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"arxiv_version","alias_value":"2607.24625v1","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.24625","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"pith_short_12","alias_value":"YGBEBEDSPSGH","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"pith_short_16","alias_value":"YGBEBEDSPSGHGO2I","created_at":"2026-07-28T02:24:13Z"},{"alias_kind":"pith_short_8","alias_value":"YGBEBEDS","created_at":"2026-07-28T02:24:13Z"}],"graph_snapshots":[{"event_id":"sha256:78c38b1fced9d21477aa1371afea4f6df9dad23e22a776d237cd7782f77196f7","target":"graph","created_at":"2026-07-28T02:24:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.24625/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Autonomous LLM agents processing mixed-confidentiality data face severe security risks from prompt injection attacks and reasoning errors. While dynamic Information Flow Control (IFC) provides structural security guarantees, traditional taint tracking permanently taints an agent's context upon reading unvetted data, severely restricting downstream utility. We present APPA (Agentic Permissions Policy Algebra), an IFC framework that resolves this usability bottleneck through engine-managed context branching and prospective acquisition enforcement. Before data acquisition occurs, APPA prospective","authors_text":"Arseny Kravchenko, Ildar Iskhakov, Innokentii Konstantinov, Matvey Kukuy, Vadim Liventsev","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.24625","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4d653bf6733d583165b4c71fdb83d2fbbd1b7cd1ba4c01c752cf672eeabf6362","target":"record","created_at":"2026-07-28T02:24:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f2fcda85588115d64cc62071a1bf045b000b54d022db4a02055c09f4f26ee060","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:19:45Z","title_canon_sha256":"ca00aa45773dc4809a71f9896fc48478f8657827fa08fbc4e48c829a96056eaa"},"schema_version":"1.0","source":{"id":"2607.24625","kind":"arxiv","version":1}},"canonical_sha256":"c1824090727c8c733b482cd72d35b3cd4771d0705fb45d95299bef41298f442b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c1824090727c8c733b482cd72d35b3cd4771d0705fb45d95299bef41298f442b","first_computed_at":"2026-07-28T02:24:13.562814Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-28T02:24:13.562814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zS1/mFKwyQjvZp6/lkSXrQUDnCki6DeH2QgAfZojwWg2u1GqUFR2KwO58+byLZH0QZv6HaAeqVrlP0Tv6XpFDg==","signature_status":"signed_v1","signed_at":"2026-07-28T02:24:13.563646Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.24625","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4d653bf6733d583165b4c71fdb83d2fbbd1b7cd1ba4c01c752cf672eeabf6362","sha256:78c38b1fced9d21477aa1371afea4f6df9dad23e22a776d237cd7782f77196f7","sha256:0573148f39d0698703c73c6d158181232f0448c5107fa1c68db1a268b82a7fd0"],"state_sha256":"d0435bea452196c75523d0ad9e09033741f2e9502712ce83079c8b788ce9eb7d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B6SNJzLD9D8CtSf/DudGFuZp2F8O3/UaAiHF1p6P4DOFA66GhSG42Qw6C80IkEPcYyfp14Tu/CqWzBgcKkZgCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T03:01:27.573474Z","bundle_sha256":"17acccc27d0960601322502938e020fc3762d4616020ba418a4692568a107c99"}}