{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:ZMSFG7P6JYHNBW5OXMZ7RULFWM","short_pith_number":"pith:ZMSFG7P6","canonical_record":{"source":{"id":"2608.05108","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T17:44:09Z","cross_cats_sorted":[],"title_canon_sha256":"7cad548768a3d182a02e5a3a42cff9fd6e98c0d40eaa8b54cf412763d3fe469b","abstract_canon_sha256":"84082b361a89167f079fb5001941d14348c9ad6d437aad7d88159e1901037320"},"schema_version":"1.0"},"canonical_sha256":"cb24537dfe4e0ed0dbaebb33f8d165b31c0ddc2812b301d43d2079772c5639af","source":{"kind":"arxiv","id":"2608.05108","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05108","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05108v1","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05108","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"pith_short_12","alias_value":"ZMSFG7P6JYHN","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"pith_short_16","alias_value":"ZMSFG7P6JYHNBW5O","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"pith_short_8","alias_value":"ZMSFG7P6","created_at":"2026-08-06T01:49:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:ZMSFG7P6JYHNBW5OXMZ7RULFWM","target":"record","payload":{"canonical_record":{"source":{"id":"2608.05108","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T17:44:09Z","cross_cats_sorted":[],"title_canon_sha256":"7cad548768a3d182a02e5a3a42cff9fd6e98c0d40eaa8b54cf412763d3fe469b","abstract_canon_sha256":"84082b361a89167f079fb5001941d14348c9ad6d437aad7d88159e1901037320"},"schema_version":"1.0"},"canonical_sha256":"cb24537dfe4e0ed0dbaebb33f8d165b31c0ddc2812b301d43d2079772c5639af","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-06T01:49:12.881070Z","signature_b64":"NsjFRdo+wU3Hrxypnp5H42aYHJjx2lR+/qj27Ezo13UwS9eb7zRhBR/gr/Tv9BVEOokt35Lp2b7rcjzqf/+2Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cb24537dfe4e0ed0dbaebb33f8d165b31c0ddc2812b301d43d2079772c5639af","last_reissued_at":"2026-08-06T01:49:12.879398Z","signature_status":"signed_v1","first_computed_at":"2026-08-06T01:49:12.879398Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.05108","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:49:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AnRqxXDkkb8x9cmfKN0WRqGeOVif2OfBK302SnKgqrj67E8GhFiNbsZ0W4UraupKRtuXV+IQBXThAhNrDrkmDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:07:31.806120Z"},"content_sha256":"ccb3d93bfb2dbf934f5958daf1c0589327ef210d6c65548c60c8776d23f0858e","schema_version":"1.0","event_id":"sha256:ccb3d93bfb2dbf934f5958daf1c0589327ef210d6c65548c60c8776d23f0858e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:ZMSFG7P6JYHNBW5OXMZ7RULFWM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Agent Against Agent: An Agentic System for Automatic Prompt Injection Red Teaming","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chenlong Yin, Jinyuan Jia, Runpeng Geng, Yanting Wang","submitted_at":"2026-08-05T17:44:09Z","abstract_excerpt":"Prompt injection poses significant security risks to LLM agents. Efficient and effective red-teaming is therefore critical, both for evaluating these risks and for collecting training data to improve defenses. Existing state-of-the-art prompt injection red-teaming methods primarily rely on reinforcement learning (RL), producing attacker models that often generalize poorly to new target LLMs. In this work, we develop PIMiner, an agentic system for prompt injection red-teaming. During training, PIMiner is trained on a sequence of (dataset, target model) pairs and builds a strategy library from s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05108","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.05108/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:49:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zaAgQVaGlRBW4OXyzCvKYHwCMLAenZnPYgoidUNKBagYDdHBu787GMqlvIF7tbgC3bpsZaZD6Q1Ai8GPINmCDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:07:31.812714Z"},"content_sha256":"43f8bd7b239423ed29096ef38376f0f209146957898d20bb1fb3c54778a8f72c","schema_version":"1.0","event_id":"sha256:43f8bd7b239423ed29096ef38376f0f209146957898d20bb1fb3c54778a8f72c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZMSFG7P6JYHNBW5OXMZ7RULFWM/bundle.json","state_url":"https://pith.science/pith/ZMSFG7P6JYHNBW5OXMZ7RULFWM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZMSFG7P6JYHNBW5OXMZ7RULFWM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T12:07:31Z","links":{"resolver":"https://pith.science/pith/ZMSFG7P6JYHNBW5OXMZ7RULFWM","bundle":"https://pith.science/pith/ZMSFG7P6JYHNBW5OXMZ7RULFWM/bundle.json","state":"https://pith.science/pith/ZMSFG7P6JYHNBW5OXMZ7RULFWM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZMSFG7P6JYHNBW5OXMZ7RULFWM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:ZMSFG7P6JYHNBW5OXMZ7RULFWM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"84082b361a89167f079fb5001941d14348c9ad6d437aad7d88159e1901037320","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T17:44:09Z","title_canon_sha256":"7cad548768a3d182a02e5a3a42cff9fd6e98c0d40eaa8b54cf412763d3fe469b"},"schema_version":"1.0","source":{"id":"2608.05108","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05108","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05108v1","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05108","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"pith_short_12","alias_value":"ZMSFG7P6JYHN","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"pith_short_16","alias_value":"ZMSFG7P6JYHNBW5O","created_at":"2026-08-06T01:49:12Z"},{"alias_kind":"pith_short_8","alias_value":"ZMSFG7P6","created_at":"2026-08-06T01:49:12Z"}],"graph_snapshots":[{"event_id":"sha256:43f8bd7b239423ed29096ef38376f0f209146957898d20bb1fb3c54778a8f72c","target":"graph","created_at":"2026-08-06T01:49:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.05108/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Prompt injection poses significant security risks to LLM agents. Efficient and effective red-teaming is therefore critical, both for evaluating these risks and for collecting training data to improve defenses. Existing state-of-the-art prompt injection red-teaming methods primarily rely on reinforcement learning (RL), producing attacker models that often generalize poorly to new target LLMs. In this work, we develop PIMiner, an agentic system for prompt injection red-teaming. During training, PIMiner is trained on a sequence of (dataset, target model) pairs and builds a strategy library from s","authors_text":"Chenlong Yin, Jinyuan Jia, Runpeng Geng, Yanting Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T17:44:09Z","title":"Agent Against Agent: An Agentic System for Automatic Prompt Injection Red Teaming"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05108","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ccb3d93bfb2dbf934f5958daf1c0589327ef210d6c65548c60c8776d23f0858e","target":"record","created_at":"2026-08-06T01:49:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"84082b361a89167f079fb5001941d14348c9ad6d437aad7d88159e1901037320","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T17:44:09Z","title_canon_sha256":"7cad548768a3d182a02e5a3a42cff9fd6e98c0d40eaa8b54cf412763d3fe469b"},"schema_version":"1.0","source":{"id":"2608.05108","kind":"arxiv","version":1}},"canonical_sha256":"cb24537dfe4e0ed0dbaebb33f8d165b31c0ddc2812b301d43d2079772c5639af","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cb24537dfe4e0ed0dbaebb33f8d165b31c0ddc2812b301d43d2079772c5639af","first_computed_at":"2026-08-06T01:49:12.879398Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-06T01:49:12.879398Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NsjFRdo+wU3Hrxypnp5H42aYHJjx2lR+/qj27Ezo13UwS9eb7zRhBR/gr/Tv9BVEOokt35Lp2b7rcjzqf/+2Dw==","signature_status":"signed_v1","signed_at":"2026-08-06T01:49:12.881070Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.05108","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ccb3d93bfb2dbf934f5958daf1c0589327ef210d6c65548c60c8776d23f0858e","sha256:43f8bd7b239423ed29096ef38376f0f209146957898d20bb1fb3c54778a8f72c"],"state_sha256":"5f334e509802a5168e699a8247254b37c78607abe58738fb653c59d931f9dbc2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aFk6NDc+LMDjlMArJNy6FJuuH/4vlrl6rqvi0cE3tASjwJUfq2Rjf6GxUSPNAV0yXFXrukTzlnUNfp6d9KVDCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T12:07:31.820423Z","bundle_sha256":"867799a6a183a220475c475b07f13268ff5d5e318b8deef4e991acb387aa6551"}}