{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RBNY55GUDFX6PNLXFXHCD4772Y","short_pith_number":"pith:RBNY55GU","canonical_record":{"source":{"id":"2412.16682","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-21T16:17:48Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"4ef12c5458911573176347da69b1d60c1823635bedd5248f870c06d48fd29499","abstract_canon_sha256":"460db1b50149a45b45a644dbd206a4c5b8c2aa2dbafe6f39ca08d188039bb907"},"schema_version":"1.0"},"canonical_sha256":"885b8ef4d4196fe7b5772dce21f3ffd60054789e81936d02ba186ed72df07a7b","source":{"kind":"arxiv","id":"2412.16682","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16682","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16682v1","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16682","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"pith_short_12","alias_value":"RBNY55GUDFX6","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"pith_short_16","alias_value":"RBNY55GUDFX6PNLX","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"pith_short_8","alias_value":"RBNY55GU","created_at":"2026-07-05T09:53:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RBNY55GUDFX6PNLXFXHCD4772Y","target":"record","payload":{"canonical_record":{"source":{"id":"2412.16682","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-21T16:17:48Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"4ef12c5458911573176347da69b1d60c1823635bedd5248f870c06d48fd29499","abstract_canon_sha256":"460db1b50149a45b45a644dbd206a4c5b8c2aa2dbafe6f39ca08d188039bb907"},"schema_version":"1.0"},"canonical_sha256":"885b8ef4d4196fe7b5772dce21f3ffd60054789e81936d02ba186ed72df07a7b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:53:11.443824Z","signature_b64":"Kz8nr1W31DrezaISZI6qE+nkSAnNhNq1y7j8NW6yPIQbtTV3yG/eqWWPspwu3VEKW+aVfkNM6sM6O1W7LQ25AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"885b8ef4d4196fe7b5772dce21f3ffd60054789e81936d02ba186ed72df07a7b","last_reissued_at":"2026-07-05T09:53:11.443370Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:53:11.443370Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.16682","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KbOGAkzn7dHhQnPxwScsMYDVIzA8PZWlJm/KWX7Mfh2NVjIlsHXtb6UYsw5ryfxHXVJ31UZjMFyW3w72yw/9CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:40:31.107161Z"},"content_sha256":"aa91f8e49e222d7508fb387ef9a49fdaea1b642a9d69bd56808fec2ec4bde769","schema_version":"1.0","event_id":"sha256:aa91f8e49e222d7508fb387ef9a49fdaea1b642a9d69bd56808fec2ec4bde769"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RBNY55GUDFX6PNLXFXHCD4772Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Anna Squicciarini, Feiran Jia, Tong Wu, Xin Qin","submitted_at":"2024-12-21T16:17:48Z","abstract_excerpt":"Large Language Model (LLM) agents are increasingly being deployed as conversational assistants capable of performing complex real-world tasks through tool integration. This enhanced ability to interact with external systems and process various data sources, while powerful, introduces significant security vulnerabilities. In particular, indirect prompt injection attacks pose a critical threat, where malicious instructions embedded within external data sources can manipulate agents to deviate from user intentions. While existing defenses based on rule constraints, source spotlighting, and authen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16682","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.16682/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TyejxcETXuqyth2QjugjTaxVhKtO90vSwsfyIw8IPMM0s8jNlJqKtVSjS+VsEZfud5DVBacqINvkttdNNV2SAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:40:31.108099Z"},"content_sha256":"7ee72d0e4e2fbd48c4d16ba27509518a4889cf9388642b7442fe97c6130537a0","schema_version":"1.0","event_id":"sha256:7ee72d0e4e2fbd48c4d16ba27509518a4889cf9388642b7442fe97c6130537a0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RBNY55GUDFX6PNLXFXHCD4772Y/bundle.json","state_url":"https://pith.science/pith/RBNY55GUDFX6PNLXFXHCD4772Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RBNY55GUDFX6PNLXFXHCD4772Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T20:40:31Z","links":{"resolver":"https://pith.science/pith/RBNY55GUDFX6PNLXFXHCD4772Y","bundle":"https://pith.science/pith/RBNY55GUDFX6PNLXFXHCD4772Y/bundle.json","state":"https://pith.science/pith/RBNY55GUDFX6PNLXFXHCD4772Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RBNY55GUDFX6PNLXFXHCD4772Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RBNY55GUDFX6PNLXFXHCD4772Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"460db1b50149a45b45a644dbd206a4c5b8c2aa2dbafe6f39ca08d188039bb907","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-21T16:17:48Z","title_canon_sha256":"4ef12c5458911573176347da69b1d60c1823635bedd5248f870c06d48fd29499"},"schema_version":"1.0","source":{"id":"2412.16682","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16682","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16682v1","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16682","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"pith_short_12","alias_value":"RBNY55GUDFX6","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"pith_short_16","alias_value":"RBNY55GUDFX6PNLX","created_at":"2026-07-05T09:53:11Z"},{"alias_kind":"pith_short_8","alias_value":"RBNY55GU","created_at":"2026-07-05T09:53:11Z"}],"graph_snapshots":[{"event_id":"sha256:7ee72d0e4e2fbd48c4d16ba27509518a4889cf9388642b7442fe97c6130537a0","target":"graph","created_at":"2026-07-05T09:53:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.16682/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model (LLM) agents are increasingly being deployed as conversational assistants capable of performing complex real-world tasks through tool integration. This enhanced ability to interact with external systems and process various data sources, while powerful, introduces significant security vulnerabilities. In particular, indirect prompt injection attacks pose a critical threat, where malicious instructions embedded within external data sources can manipulate agents to deviate from user intentions. While existing defenses based on rule constraints, source spotlighting, and authen","authors_text":"Anna Squicciarini, Feiran Jia, Tong Wu, Xin Qin","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-21T16:17:48Z","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16682","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aa91f8e49e222d7508fb387ef9a49fdaea1b642a9d69bd56808fec2ec4bde769","target":"record","created_at":"2026-07-05T09:53:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"460db1b50149a45b45a644dbd206a4c5b8c2aa2dbafe6f39ca08d188039bb907","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-21T16:17:48Z","title_canon_sha256":"4ef12c5458911573176347da69b1d60c1823635bedd5248f870c06d48fd29499"},"schema_version":"1.0","source":{"id":"2412.16682","kind":"arxiv","version":1}},"canonical_sha256":"885b8ef4d4196fe7b5772dce21f3ffd60054789e81936d02ba186ed72df07a7b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"885b8ef4d4196fe7b5772dce21f3ffd60054789e81936d02ba186ed72df07a7b","first_computed_at":"2026-07-05T09:53:11.443370Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:53:11.443370Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Kz8nr1W31DrezaISZI6qE+nkSAnNhNq1y7j8NW6yPIQbtTV3yG/eqWWPspwu3VEKW+aVfkNM6sM6O1W7LQ25AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:53:11.443824Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.16682","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aa91f8e49e222d7508fb387ef9a49fdaea1b642a9d69bd56808fec2ec4bde769","sha256:7ee72d0e4e2fbd48c4d16ba27509518a4889cf9388642b7442fe97c6130537a0"],"state_sha256":"d8f30f29bf55373170471f7659c42a5653d305768953897160570f1819854d09"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jsXouDdFE7VORhU1F0Rs2DTsN4mBkvCfYQjKp7wJ8hEzEXYrpWsGFWON7aLyN63yVeRmdF1I023zd5XBtkhIBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T20:40:31.124137Z","bundle_sha256":"a0ef0fcb57593dc631be9295872022905df819ba467dedd75dd56559c713851e"}}