{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:3FFMBV5BTUPVLI7IYIVQKSNXSD","short_pith_number":"pith:3FFMBV5B","canonical_record":{"source":{"id":"2606.30602","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:40:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"100c4b24ea1f6f5ac2051eacf3a330a17b059525e1c62ba28daa1f7ea0c22cf4","abstract_canon_sha256":"1042bb18bfe5284969948d185f9b56074eb3183e4aaff0f0369aa8eed95beec8"},"schema_version":"1.0"},"canonical_sha256":"d94ac0d7a19d1f55a3e8c22b0549b790f9c386941de13ad28a3005b45e7849c9","source":{"kind":"arxiv","id":"2606.30602","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.30602","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"arxiv_version","alias_value":"2606.30602v1","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.30602","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"pith_short_12","alias_value":"3FFMBV5BTUPV","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"pith_short_16","alias_value":"3FFMBV5BTUPVLI7I","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"pith_short_8","alias_value":"3FFMBV5B","created_at":"2026-06-30T02:18:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:3FFMBV5BTUPVLI7IYIVQKSNXSD","target":"record","payload":{"canonical_record":{"source":{"id":"2606.30602","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:40:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"100c4b24ea1f6f5ac2051eacf3a330a17b059525e1c62ba28daa1f7ea0c22cf4","abstract_canon_sha256":"1042bb18bfe5284969948d185f9b56074eb3183e4aaff0f0369aa8eed95beec8"},"schema_version":"1.0"},"canonical_sha256":"d94ac0d7a19d1f55a3e8c22b0549b790f9c386941de13ad28a3005b45e7849c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-30T02:18:22.312440Z","signature_b64":"6owWIhJBM/dSXalqCm9gdX2dJCi10Htzj94QncvKYRL+a7gBTmDOe1TuhBR2dwNCVd34zIhR20mlK3o7cAwiCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d94ac0d7a19d1f55a3e8c22b0549b790f9c386941de13ad28a3005b45e7849c9","last_reissued_at":"2026-06-30T02:18:22.311839Z","signature_status":"signed_v1","first_computed_at":"2026-06-30T02:18:22.311839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.30602","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-30T02:18:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vuoZv2Zw3KflMMwaoht/GndUnDzinm8hNAqnLfJIJUaQVqbTviuyhRdgaLOm4S+RFdOz5J8lOCD3jG1RQa10DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-30T17:04:11.332735Z"},"content_sha256":"d54867de704259fcc123b84c942b3e8264b97a6f145b6fd7c7287c8132dd2d55","schema_version":"1.0","event_id":"sha256:d54867de704259fcc123b84c942b3e8264b97a6f145b6fd7c7287c8132dd2d55"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:3FFMBV5BTUPVLI7IYIVQKSNXSD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jonathan Gregory, Kunyang Li, Kyle Domico, Patrick McDaniel","submitted_at":"2026-06-29T17:40:45Z","abstract_excerpt":"Multi-agent systems (MAS) are increasingly used to automate complex, distributed workflows. However, their inter-agent communication channels introduce new attack surfaces that remain poorly understood and are difficult to defend against. In this paper, we address how defenders should prioritize limited security effort to protect vulnerable communication channels before attacks are observed. This is motivated by our observation that the channel-level attack impact is highly non-uniform: a single compromised edge can account for up to 75% of total attack success. We introduce Mesa, a label-free"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.30602","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.30602/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-30T02:18:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8k5uRe4sJcTdzGbK3xF1dhhJ3I3QThujF7+G19v0VHjcRF/OeUxLGh4eruMvbGoofyzfYBz6UYsl0AW1++3tCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-30T17:04:11.333109Z"},"content_sha256":"1152ca45b11987ed4e2d18f7a35be1d6011cd7efde322de12969a74f6cf4f599","schema_version":"1.0","event_id":"sha256:1152ca45b11987ed4e2d18f7a35be1d6011cd7efde322de12969a74f6cf4f599"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3FFMBV5BTUPVLI7IYIVQKSNXSD/bundle.json","state_url":"https://pith.science/pith/3FFMBV5BTUPVLI7IYIVQKSNXSD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3FFMBV5BTUPVLI7IYIVQKSNXSD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-30T17:04:11Z","links":{"resolver":"https://pith.science/pith/3FFMBV5BTUPVLI7IYIVQKSNXSD","bundle":"https://pith.science/pith/3FFMBV5BTUPVLI7IYIVQKSNXSD/bundle.json","state":"https://pith.science/pith/3FFMBV5BTUPVLI7IYIVQKSNXSD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3FFMBV5BTUPVLI7IYIVQKSNXSD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:3FFMBV5BTUPVLI7IYIVQKSNXSD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1042bb18bfe5284969948d185f9b56074eb3183e4aaff0f0369aa8eed95beec8","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:40:45Z","title_canon_sha256":"100c4b24ea1f6f5ac2051eacf3a330a17b059525e1c62ba28daa1f7ea0c22cf4"},"schema_version":"1.0","source":{"id":"2606.30602","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.30602","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"arxiv_version","alias_value":"2606.30602v1","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.30602","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"pith_short_12","alias_value":"3FFMBV5BTUPV","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"pith_short_16","alias_value":"3FFMBV5BTUPVLI7I","created_at":"2026-06-30T02:18:22Z"},{"alias_kind":"pith_short_8","alias_value":"3FFMBV5B","created_at":"2026-06-30T02:18:22Z"}],"graph_snapshots":[{"event_id":"sha256:1152ca45b11987ed4e2d18f7a35be1d6011cd7efde322de12969a74f6cf4f599","target":"graph","created_at":"2026-06-30T02:18:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.30602/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-agent systems (MAS) are increasingly used to automate complex, distributed workflows. However, their inter-agent communication channels introduce new attack surfaces that remain poorly understood and are difficult to defend against. In this paper, we address how defenders should prioritize limited security effort to protect vulnerable communication channels before attacks are observed. This is motivated by our observation that the channel-level attack impact is highly non-uniform: a single compromised edge can account for up to 75% of total attack success. We introduce Mesa, a label-free","authors_text":"Jonathan Gregory, Kunyang Li, Kyle Domico, Patrick McDaniel","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:40:45Z","title":"MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.30602","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d54867de704259fcc123b84c942b3e8264b97a6f145b6fd7c7287c8132dd2d55","target":"record","created_at":"2026-06-30T02:18:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1042bb18bfe5284969948d185f9b56074eb3183e4aaff0f0369aa8eed95beec8","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:40:45Z","title_canon_sha256":"100c4b24ea1f6f5ac2051eacf3a330a17b059525e1c62ba28daa1f7ea0c22cf4"},"schema_version":"1.0","source":{"id":"2606.30602","kind":"arxiv","version":1}},"canonical_sha256":"d94ac0d7a19d1f55a3e8c22b0549b790f9c386941de13ad28a3005b45e7849c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d94ac0d7a19d1f55a3e8c22b0549b790f9c386941de13ad28a3005b45e7849c9","first_computed_at":"2026-06-30T02:18:22.311839Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-30T02:18:22.311839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6owWIhJBM/dSXalqCm9gdX2dJCi10Htzj94QncvKYRL+a7gBTmDOe1TuhBR2dwNCVd34zIhR20mlK3o7cAwiCA==","signature_status":"signed_v1","signed_at":"2026-06-30T02:18:22.312440Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.30602","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d54867de704259fcc123b84c942b3e8264b97a6f145b6fd7c7287c8132dd2d55","sha256:1152ca45b11987ed4e2d18f7a35be1d6011cd7efde322de12969a74f6cf4f599"],"state_sha256":"fa7849afa5f1d896d0c788c4541e8df0392f914cfc8bcd082d7440fcd01efb06"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YRI/yn0oJx2D8CmSCFIGSrsR1wiUgxbsDwUen4wwRqlAuQIxSOvO1aImw8eyTueg2bEAqpMXavcfwpTBT39ZDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-30T17:04:11.335087Z","bundle_sha256":"dfc9fcf8b94e0c993a2353815a1af52557fc8119f97000adf1db966d1a6582e1"}}