{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:Z44SPWRIEWJ6S7PGMADR5WAZCV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c274c176caaf500f5df9ceb9994da13496a7b3ad1500c8e220d67f9afddf23e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-23T00:36:48Z","title_canon_sha256":"df0f6b353bfe4d639fe5c34289ddd76f395fee9a5797712359cc386041656ef9"},"schema_version":"1.0","source":{"id":"2605.24309","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.24309","created_at":"2026-05-26T01:02:59Z"},{"alias_kind":"arxiv_version","alias_value":"2605.24309v1","created_at":"2026-05-26T01:02:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.24309","created_at":"2026-05-26T01:02:59Z"},{"alias_kind":"pith_short_12","alias_value":"Z44SPWRIEWJ6","created_at":"2026-05-26T01:02:59Z"},{"alias_kind":"pith_short_16","alias_value":"Z44SPWRIEWJ6S7PG","created_at":"2026-05-26T01:02:59Z"},{"alias_kind":"pith_short_8","alias_value":"Z44SPWRI","created_at":"2026-05-26T01:02:59Z"}],"graph_snapshots":[{"event_id":"sha256:342ff2961e4281dda3775f3392884c5610d0ede7cf4e75a80cac55efdb536727","target":"graph","created_at":"2026-05-26T01:02:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.24309/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We argue that LLM agent security is fundamentally an agent-human interaction (AHI) problem, not a purely algorithmic one. To substantiate this position, we conduct a systematic analysis of 59 academic papers, 21 production agent systems, and 26 security plugins as of April 2026. Our analysis reveals a striking pattern: the three widely deployed human-centric security mechanisms (policy specification, runtime approval, and scope configuration) dominate industry practice, each adopted by at least 14 of 21 systems (14, 15, and 16, respectively), while the categories most heavily studied in academ","authors_text":"Peiran Wang, Ying Li, Yuan Tian","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-23T00:36:48Z","title":"Reframing LLM Agent Security as an Agent-Human Interaction Problem"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.24309","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e130a217741970ca6fba835b10a38895d7814211293e9c9a2ed6b97e562c5d8e","target":"record","created_at":"2026-05-26T01:02:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c274c176caaf500f5df9ceb9994da13496a7b3ad1500c8e220d67f9afddf23e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-23T00:36:48Z","title_canon_sha256":"df0f6b353bfe4d639fe5c34289ddd76f395fee9a5797712359cc386041656ef9"},"schema_version":"1.0","source":{"id":"2605.24309","kind":"arxiv","version":1}},"canonical_sha256":"cf3927da282593e97de660071ed819154d01ede91f58bd58d4914dcee04b11d4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cf3927da282593e97de660071ed819154d01ede91f58bd58d4914dcee04b11d4","first_computed_at":"2026-05-26T01:02:59.068904Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-26T01:02:59.068904Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RGF7yW9kGnmhUUiZFHa1wiJ5vlmXqpCxltCOuOG5Z5dFKMsV9b609wWHe3mJd6b+drBHedpaQBgB68F+0ygrDw==","signature_status":"signed_v1","signed_at":"2026-05-26T01:02:59.071068Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.24309","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e130a217741970ca6fba835b10a38895d7814211293e9c9a2ed6b97e562c5d8e","sha256:342ff2961e4281dda3775f3392884c5610d0ede7cf4e75a80cac55efdb536727"],"state_sha256":"9721352a62ce550607b4457dd91ab482f3fdddbd59e9e9e86fed2e7479ba63a6"}