AgentPROV corpora: CC BY AgentDojo-format studies

Execution-provenance corpora built by AgentPROV v0.1.0 from AgentDojo-format run logs published under CC BY 4.0: each execution as an AgentPROV Execution Record, semantic annotations and W3C PROV bundles, validated and hash-chained. This deposit draft holds 5 AgentPROV corpus version(s), prepared offline by agentprov package --deposit for the release date 2026-10-30. Nothing has been uploaded or published. Corpus adprov-v1-release 0.1.0: AgentDojo-PROV v2.3 released transcripts, re-imported as AgentPROV Execution Records. 17656 execution records, of which 0 are outcome-only records. Licence class: CC-BY-4.0. Content digest sha256:ffcf9abd78fa5704a2a984cb38ff94e2ff674ec70e249cc21bf5b0e7f1b380de; root digest sha256:f90e6d33634da679ed4be35718f420b3ebae7d32887da970413d447a5cf514a1. Corpus ast-survey-agentdojo 0.1.0: Agent Security Tools Survey: the survey's own AgentDojo run logs (Forever-CodingNoob/agent-security-tools-survey). 3232 execution records, of which 0 are outcome-only records. Licence class: CC-BY-4.0. Content digest sha256:90e16d701292b7fd541243fdbb1dc1e6c9877a64b19be4a1ab9426acdc2ecf75; root digest sha256:b1f061bfbd0e6d7f438f13c55f2f27d3e8819f63112d8a4b5e9561c58e8f58a3. Corpus authority-caps-agentdojo 0.1.0: agent-authority-caps: AgentDojo 0.1.35 logs of GPT-6 Luna/Sol, Claude Haiku 4.5, gpt-4o-mini and gpt-3.5-turbo under enforced authority caps (Zenodo 23138310). 18734 execution records, of which 0 are outcome-only records. Licence class: CC-BY-4.0. Content digest sha256:0bcc3063becb662024cf576e40aedeca238ff3c5dd2cf9cbe2a61190a39e50ea; root digest sha256:2084b6f19bed52986d077d2b7dc91b77f5553f907f1f0abcfb2edd63f36e99d1. Corpus ipi-defenses-agentdojo 0.1.0: IPI defences replication package: AgentDojo 0.1.35 banking logs of gpt-5.4(-mini) and claude-sonnet-4-6 under AgentDojo's built-in defences (Zenodo 22011266). 3211 execution records, of which 0 are outcome-only records. Licence class: CC-BY-4.0. Content digest sha256:38a93296cb03d34c18eaabae78444995023798f7dbc6dd020e10eba697b5e173; root digest sha256:66cdddcd5d05a10d36f37f80d725e06c74244beb7d3580c0e115eec5670b5343. Corpus seagent-agentdojo 0.1.0: SEAgent artefact: AgentDojo 0.1.34 logs of deepseek-v3 under SEAgent, PVAgent, AgentSpec and no defence (Zenodo 23218779). 5331 execution records, of which 0 are outcome-only records. Licence class: CC-BY-4.0. Content digest sha256:769c01eb6208308a7e68201dd27308f8743c48ffba2c992b9ccf205f23903cb9; root digest sha256:0fd26a3e77f5a5af38f62df6b9dea1fe3f2b633de498d0ecb4a57f05e2ad2fe2. Counts are computed from each corpus manifest at sealing. Each DATASHEET states what the records do and do not establish; a statement about the data is scoped as it is there. To verify: compare each archive's sha256 or md5 with DEPOSIT-MANIFEST.json, run agentprov verify on the archives (archive mode, no extraction; H.5.5), and compare each root digest with the one published outside the deposit (the corpus tag annotation and the paper).