{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:YGMYR4RAHRPCZFNBRWWTJDPZHV","short_pith_number":"pith:YGMYR4RA","canonical_record":{"source":{"id":"2406.00799","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-02T16:53:21Z","cross_cats_sorted":["cs.CL","cs.CY"],"title_canon_sha256":"77c52ef8662b47631a5908e596563af99b51f81e56b1e896abc6c7e6b62e4868","abstract_canon_sha256":"c3794f471e498d1c54c56236121f9495edb7ad5a772801385ed35363bbb0abc3"},"schema_version":"1.0"},"canonical_sha256":"c19988f2203c5e2c95a18dad348df93d6d5c4b02a180b9dbcbba4dfecb5875fe","source":{"kind":"arxiv","id":"2406.00799","version":6},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.00799","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"arxiv_version","alias_value":"2406.00799v6","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.00799","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"pith_short_12","alias_value":"YGMYR4RAHRPC","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"pith_short_16","alias_value":"YGMYR4RAHRPCZFNB","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"pith_short_8","alias_value":"YGMYR4RA","created_at":"2026-07-05T10:25:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:YGMYR4RAHRPCZFNBRWWTJDPZHV","target":"record","payload":{"canonical_record":{"source":{"id":"2406.00799","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-02T16:53:21Z","cross_cats_sorted":["cs.CL","cs.CY"],"title_canon_sha256":"77c52ef8662b47631a5908e596563af99b51f81e56b1e896abc6c7e6b62e4868","abstract_canon_sha256":"c3794f471e498d1c54c56236121f9495edb7ad5a772801385ed35363bbb0abc3"},"schema_version":"1.0"},"canonical_sha256":"c19988f2203c5e2c95a18dad348df93d6d5c4b02a180b9dbcbba4dfecb5875fe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:25:06.913004Z","signature_b64":"MoY+qXy1FgWuVjRj1ZWOuXMoB3QGLE080d6CvQB6VQ9gEbQ12McuxCxZXLmG+hswyvnpfU42Vk3iGPhv3iweBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c19988f2203c5e2c95a18dad348df93d6d5c4b02a180b9dbcbba4dfecb5875fe","last_reissued_at":"2026-07-05T10:25:06.912479Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:25:06.912479Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.00799","source_version":6,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:25:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wToFPsugFkttS2O8m0R8K1Tl2qMckI9R9+ZIhbDaNn+YMKHg5UjisvStOIsUxr0HgaIhogBK1i5MbvsmNGjMCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:09:43.837666Z"},"content_sha256":"8cc6b4ab87a790f7bcf58756b1776b69ffe53c487d0e71bd63b3a47b843fb60f","schema_version":"1.0","event_id":"sha256:8cc6b4ab87a790f7bcf58756b1776b69ffe53c487d0e71bd63b3a47b843fb60f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:YGMYR4RAHRPCZFNBRWWTJDPZHV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Get my drift? Catching LLM Task Drift with Activation Deltas","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CY"],"primary_cat":"cs.CR","authors_text":"Ahmed Salem, Aideen Fay, Andrew Paverd, Giovanni Cherubin, Mario Fritz, Sahar Abdelnabi","submitted_at":"2024-06-02T16:53:21Z","abstract_excerpt":"LLMs are commonly used in retrieval-augmented applications to execute user instructions based on data from external sources. For example, modern search engines use LLMs to answer queries based on relevant search results; email plugins summarize emails by processing their content through an LLM. However, the potentially untrusted provenance of these data sources can lead to prompt injection attacks, where the LLM is manipulated by natural language instructions embedded in the external data, causing it to deviate from the user's original instruction(s). We define this deviation as task drift. Ta"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.00799","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.00799/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:25:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uhnT94e53RMa7VTI4Hgrv89icqDVgkIirzhPstt4eeFFOB923BS5FbVBqc8qvJ3fKpWiTCRKKUvRbtdvlxyoAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:09:43.838913Z"},"content_sha256":"a10667fd090eb8b99ae49bbe3f7ac05cdb340fa90c32a5684fd1e6f9374fee32","schema_version":"1.0","event_id":"sha256:a10667fd090eb8b99ae49bbe3f7ac05cdb340fa90c32a5684fd1e6f9374fee32"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YGMYR4RAHRPCZFNBRWWTJDPZHV/bundle.json","state_url":"https://pith.science/pith/YGMYR4RAHRPCZFNBRWWTJDPZHV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YGMYR4RAHRPCZFNBRWWTJDPZHV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:09:43Z","links":{"resolver":"https://pith.science/pith/YGMYR4RAHRPCZFNBRWWTJDPZHV","bundle":"https://pith.science/pith/YGMYR4RAHRPCZFNBRWWTJDPZHV/bundle.json","state":"https://pith.science/pith/YGMYR4RAHRPCZFNBRWWTJDPZHV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YGMYR4RAHRPCZFNBRWWTJDPZHV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:YGMYR4RAHRPCZFNBRWWTJDPZHV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c3794f471e498d1c54c56236121f9495edb7ad5a772801385ed35363bbb0abc3","cross_cats_sorted":["cs.CL","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-02T16:53:21Z","title_canon_sha256":"77c52ef8662b47631a5908e596563af99b51f81e56b1e896abc6c7e6b62e4868"},"schema_version":"1.0","source":{"id":"2406.00799","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.00799","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"arxiv_version","alias_value":"2406.00799v6","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.00799","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"pith_short_12","alias_value":"YGMYR4RAHRPC","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"pith_short_16","alias_value":"YGMYR4RAHRPCZFNB","created_at":"2026-07-05T10:25:06Z"},{"alias_kind":"pith_short_8","alias_value":"YGMYR4RA","created_at":"2026-07-05T10:25:06Z"}],"graph_snapshots":[{"event_id":"sha256:a10667fd090eb8b99ae49bbe3f7ac05cdb340fa90c32a5684fd1e6f9374fee32","target":"graph","created_at":"2026-07-05T10:25:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.00799/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLMs are commonly used in retrieval-augmented applications to execute user instructions based on data from external sources. For example, modern search engines use LLMs to answer queries based on relevant search results; email plugins summarize emails by processing their content through an LLM. However, the potentially untrusted provenance of these data sources can lead to prompt injection attacks, where the LLM is manipulated by natural language instructions embedded in the external data, causing it to deviate from the user's original instruction(s). We define this deviation as task drift. Ta","authors_text":"Ahmed Salem, Aideen Fay, Andrew Paverd, Giovanni Cherubin, Mario Fritz, Sahar Abdelnabi","cross_cats":["cs.CL","cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.00799","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8cc6b4ab87a790f7bcf58756b1776b69ffe53c487d0e71bd63b3a47b843fb60f","target":"record","created_at":"2026-07-05T10:25:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c3794f471e498d1c54c56236121f9495edb7ad5a772801385ed35363bbb0abc3","cross_cats_sorted":["cs.CL","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-02T16:53:21Z","title_canon_sha256":"77c52ef8662b47631a5908e596563af99b51f81e56b1e896abc6c7e6b62e4868"},"schema_version":"1.0","source":{"id":"2406.00799","kind":"arxiv","version":6}},"canonical_sha256":"c19988f2203c5e2c95a18dad348df93d6d5c4b02a180b9dbcbba4dfecb5875fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c19988f2203c5e2c95a18dad348df93d6d5c4b02a180b9dbcbba4dfecb5875fe","first_computed_at":"2026-07-05T10:25:06.912479Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:25:06.912479Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MoY+qXy1FgWuVjRj1ZWOuXMoB3QGLE080d6CvQB6VQ9gEbQ12McuxCxZXLmG+hswyvnpfU42Vk3iGPhv3iweBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:25:06.913004Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.00799","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8cc6b4ab87a790f7bcf58756b1776b69ffe53c487d0e71bd63b3a47b843fb60f","sha256:a10667fd090eb8b99ae49bbe3f7ac05cdb340fa90c32a5684fd1e6f9374fee32"],"state_sha256":"192fd4306de8d3f333cd46fd739fd2452a9180636e15df3e0c3b010dca09cad4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lsnYCe+5vSLZtZbK0jdurghF8bWYg6sda8+C2aZgMDkFidw44ZHs4EhDtXZEFjD/8+ht+GJ/MTsTyUb3AmlIDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:09:43.846051Z","bundle_sha256":"33f837243b6b4ba3f812bc9342053479c7279bbf0eb55a70978def91d6d8649a"}}