SP27 Artifact

Artifact Package This directory is the submission artifact assembled for review. It contains data, rendered views, extracted text, representative PDFs, and LLM interaction logs. It intentionally excludes proof-of-concept PDF generation code, PDF builders, runners, API wrappers, and other automation that could be used to mass-generate attack documents. Disclosure Boundary This is an attack-adjacent paper. Several vendors have been notified, but the 90-day coordination window has not completed. For that reason, this artifact is limited to reproducibility data and a small set of representative PDFs. If the paper is accepted and disclosure coordination has matured, the full codebase can be released separately. Directory Layout Directory Contents 00_gray_zone_mining/ Gray-zone mining intermediate JSON/JSONL/CSV/Markdown outputs. No mining/generation code is included. 01_main_gap_png_txt/ Rendered PNGs and extracted TXT outputs for the 25 main extraction-gap canaries. 02_llm_sample_png_txt/ Rendered PNGs and multi-extractor TXT outputs for the 36 LLM-facing samples: 25 manual main samples plus 11 QA-adapted samples. It also includes three excluded QA candidates for manifest completeness. 03_representative_samples/ One representative main-gap PDF and one corresponding LLM-facing PDF per family. 04_llm_interaction_json/ Official 7-model 10x LLM result tables and raw JSON outputs for summary and QA experiments. Representative PDF Selection The representative PDFs are chosen to cover all four families while prioritizing high downstream exposure in the official 7-model 10x results: Family Representative EG Rationale Semantic Override EG001 Combined summary/QA exposure reaches all 7 official API platforms. Hidden Semantic Injection EG004 A PDF-specific no-paint carrier with combined exposure across all 7 platforms. Reading-Order Split EG016 Two-column row/order split; tied for the largest family exposure and the clearest paper-facing example. Font-Decoding Split EG023 CID descendant-font metadata fallback; tied for the largest family exposure. Counting Notes The main 25 canaries are the paper-facing extraction gaps EG001 to EG025. The 36 LLM-facing samples are 25 manually curated main samples and 11 clean QA-adapted samples. LLM JSON results use the latest official 7-model 10x accounting recorded in 04_llm_interaction_json/latest_10x_results_by_channel.md.