{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:KM4MN2C75JUN3DYWQPVPS4UM4Z","short_pith_number":"pith:KM4MN2C7","canonical_record":{"source":{"id":"2608.07808","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T23:16:35Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7f8b73f36ad58ef1c66a32273169cfd4f46caa6890723c8e3fb8e25cad222916","abstract_canon_sha256":"2f87469e99e68aea87a7af7ea74890612d22ee8d6e8f377d077ed614fe3ea94a"},"schema_version":"1.0"},"canonical_sha256":"5338c6e85fea68dd8f1683eaf9728ce647cc6c19212fa9794c3862a519da0ef4","source":{"kind":"arxiv","id":"2608.07808","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.07808","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"arxiv_version","alias_value":"2608.07808v1","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.07808","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"pith_short_12","alias_value":"KM4MN2C75JUN","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"pith_short_16","alias_value":"KM4MN2C75JUN3DYW","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"pith_short_8","alias_value":"KM4MN2C7","created_at":"2026-08-11T01:18:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:KM4MN2C75JUN3DYWQPVPS4UM4Z","target":"record","payload":{"canonical_record":{"source":{"id":"2608.07808","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T23:16:35Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7f8b73f36ad58ef1c66a32273169cfd4f46caa6890723c8e3fb8e25cad222916","abstract_canon_sha256":"2f87469e99e68aea87a7af7ea74890612d22ee8d6e8f377d077ed614fe3ea94a"},"schema_version":"1.0"},"canonical_sha256":"5338c6e85fea68dd8f1683eaf9728ce647cc6c19212fa9794c3862a519da0ef4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-11T01:18:17.946750Z","signature_b64":"fR6cPiV+sb07BXYgm1Wr+DyVLxGIuf4ER6gCbp5xqDbJ/7AopxFTEEblMv7HbUgAznixphBeIOLzCPiUtTWNAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5338c6e85fea68dd8f1683eaf9728ce647cc6c19212fa9794c3862a519da0ef4","last_reissued_at":"2026-08-11T01:18:17.944002Z","signature_status":"signed_v1","first_computed_at":"2026-08-11T01:18:17.944002Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.07808","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T01:18:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1m9GyYge7kklyObcdj6KaKFzBT5l9+0428D4bN3r2M0vgl+wbfm/6WoS+Ry430JZR4qpQ6DBavfcR7KDIlfeAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:23:12.263119Z"},"content_sha256":"313c206c12e66a64df0285055e5e1be42273ca1a1ad71fb0c0ca3c8c146810f7","schema_version":"1.0","event_id":"sha256:313c206c12e66a64df0285055e5e1be42273ca1a1ad71fb0c0ca3c8c146810f7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:KM4MN2C75JUN3DYWQPVPS4UM4Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jeremy McHugh","submitted_at":"2026-08-07T23:16:35Z","abstract_excerpt":"Four years after prompt injection was first identified in 2022, attacks are still predominantly documented as verbatim strings rather than structured exploits, despite advancing agent capabilities and threat actors embedding injections to subvert AI-assisted security analysis. This paper formalizes the structure of prompt-injection artifacts, enabling defenders, red teamers, and cyber threat intelligence (CTI) teams to label, compare, and mutate attacks without relying on fragile string matching. Because large language models compile varied natural-language realizations into identical executab"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.07808","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.07808/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T01:18:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JEiy6R69IhwDiLv0FD0yawmT4ZgdS1wSqOyTWBp+t4f+yThaZSiMbGqZBo/5QsLNO40/NX3zdIU1fD/jcVCkCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:23:12.264062Z"},"content_sha256":"329f7221a904ef7ddbca1778f5c3b1eb17fdc7170415009f07da1df5242f56a0","schema_version":"1.0","event_id":"sha256:329f7221a904ef7ddbca1778f5c3b1eb17fdc7170415009f07da1df5242f56a0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KM4MN2C75JUN3DYWQPVPS4UM4Z/bundle.json","state_url":"https://pith.science/pith/KM4MN2C75JUN3DYWQPVPS4UM4Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KM4MN2C75JUN3DYWQPVPS4UM4Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T12:23:12Z","links":{"resolver":"https://pith.science/pith/KM4MN2C75JUN3DYWQPVPS4UM4Z","bundle":"https://pith.science/pith/KM4MN2C75JUN3DYWQPVPS4UM4Z/bundle.json","state":"https://pith.science/pith/KM4MN2C75JUN3DYWQPVPS4UM4Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KM4MN2C75JUN3DYWQPVPS4UM4Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:KM4MN2C75JUN3DYWQPVPS4UM4Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2f87469e99e68aea87a7af7ea74890612d22ee8d6e8f377d077ed614fe3ea94a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T23:16:35Z","title_canon_sha256":"7f8b73f36ad58ef1c66a32273169cfd4f46caa6890723c8e3fb8e25cad222916"},"schema_version":"1.0","source":{"id":"2608.07808","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.07808","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"arxiv_version","alias_value":"2608.07808v1","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.07808","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"pith_short_12","alias_value":"KM4MN2C75JUN","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"pith_short_16","alias_value":"KM4MN2C75JUN3DYW","created_at":"2026-08-11T01:18:17Z"},{"alias_kind":"pith_short_8","alias_value":"KM4MN2C7","created_at":"2026-08-11T01:18:17Z"}],"graph_snapshots":[{"event_id":"sha256:329f7221a904ef7ddbca1778f5c3b1eb17fdc7170415009f07da1df5242f56a0","target":"graph","created_at":"2026-08-11T01:18:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.07808/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Four years after prompt injection was first identified in 2022, attacks are still predominantly documented as verbatim strings rather than structured exploits, despite advancing agent capabilities and threat actors embedding injections to subvert AI-assisted security analysis. This paper formalizes the structure of prompt-injection artifacts, enabling defenders, red teamers, and cyber threat intelligence (CTI) teams to label, compare, and mutate attacks without relying on fragile string matching. Because large language models compile varied natural-language realizations into identical executab","authors_text":"Jeremy McHugh","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.07808","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:313c206c12e66a64df0285055e5e1be42273ca1a1ad71fb0c0ca3c8c146810f7","target":"record","created_at":"2026-08-11T01:18:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2f87469e99e68aea87a7af7ea74890612d22ee8d6e8f377d077ed614fe3ea94a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-07T23:16:35Z","title_canon_sha256":"7f8b73f36ad58ef1c66a32273169cfd4f46caa6890723c8e3fb8e25cad222916"},"schema_version":"1.0","source":{"id":"2608.07808","kind":"arxiv","version":1}},"canonical_sha256":"5338c6e85fea68dd8f1683eaf9728ce647cc6c19212fa9794c3862a519da0ef4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5338c6e85fea68dd8f1683eaf9728ce647cc6c19212fa9794c3862a519da0ef4","first_computed_at":"2026-08-11T01:18:17.944002Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-11T01:18:17.944002Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fR6cPiV+sb07BXYgm1Wr+DyVLxGIuf4ER6gCbp5xqDbJ/7AopxFTEEblMv7HbUgAznixphBeIOLzCPiUtTWNAA==","signature_status":"signed_v1","signed_at":"2026-08-11T01:18:17.946750Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.07808","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:313c206c12e66a64df0285055e5e1be42273ca1a1ad71fb0c0ca3c8c146810f7","sha256:329f7221a904ef7ddbca1778f5c3b1eb17fdc7170415009f07da1df5242f56a0"],"state_sha256":"f7af5c6d5165c0a8be807ee30777b08bc91cf07a7e4ffe01fd086dd25f30a53d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ldkNTUKuZL3IDFic2iMLBOivlKFhlSjeBZZyVwJFRgKjuM7sZyGO9gcV7gay316WsiNAPLy160GO0xxppP4pDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T12:23:12.272030Z","bundle_sha256":"fab75c0d14c1bc9ea4f8ffddf93f03e85a817393957af5d45740c236462f6649"}}