{"as_of":"2026-08-09T10:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:848bacc217773e3c234f412599a777d22815df9c61076a374f1cc3a991eb7c27","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T19:25:52.686093Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.09291/citation-record","integrity":"/paper/2509.09291/integrity","json":"/paper/2509.09291/citation-record.json","paper":"/paper/2509.09291"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.457257Z","title":"Automatic fingerprinting of vulnerable BLE IoT devices with static UUIDs from mobile apps,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.457257Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:4e537a72979371286e5c7aa97c3101c06f03e36bb2280b53db30eefa6c47395b","observation_id":"c4120182-0710-492d-96ac-8291d574b565","resolution":{"observed_at":"2026-08-04T19:25:52.457257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.463720Z","title":"BLESS: A BLE application security scanning framework,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.463720Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:317d8ccbe2b509ddb04766c20592be5cf7603f8187a75f50fb373abb40a9cdb1","observation_id":"8318d800-5600-49be-8fff-1fad848fce8c","resolution":{"observed_at":"2026-08-04T19:25:52.463720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.468704Z","title":"BLESA: Spoofing attacks against reconnections in bluetooth low energy,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.468704Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:fb49f671d17a3777c44ff39a18f7ee6b5c4a278410d8feadfaf46e6ee2578423","observation_id":"96a18cbd-157a-414a-976e-57ba857003d9","resolution":{"observed_at":"2026-08-04T19:25:52.468704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.474234Z","title":"Breaking secure pairing of bluetooth low energy using downgrade attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.474234Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:8f709bc2ccdf62da43f1bcdfd81fae7ab0427f6af1b228bfdaaf2a5a148e18a9","observation_id":"bb3ae60c-cd3e-4508-a0bb-1f22afc2351b","resolution":{"observed_at":"2026-08-04T19:25:52.474234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.480466Z","title":"FirmXRay: Detecting bluetooth link layer vulnerabilities from bare-metal firmware,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.480466Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:70b679b0d481c48d8a541b054053db3b04a6b9eed12e1094dbac271045c2dd39","observation_id":"886f8697-fde8-4483-b6a6-dabbddc0bd06","resolution":{"observed_at":"2026-08-04T19:25:52.480466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.485273Z","title":"Bluetooth core specification v5. 1,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.485273Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:8909952d841af842bbc362b658c3a79c775307fb0c8afc50b65fac8d71937b47","observation_id":"9b24f59e-71e0-4580-860b-6653b626c7ff","resolution":{"observed_at":"2026-08-04T19:25:52.485273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.490903Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.490903Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:682ae04235d0f3a498ea472caed806ec4965e81fdde4fc899b30e1d8a66ec1a6","observation_id":"5eb33751-1dbb-4d36-9985-7c3893bb7d20","resolution":{"observed_at":"2026-08-04T19:25:52.490903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15288","last_updated":"2025-04-18T04:46:00Z","snapshot_observed_at":"2026-07-06T19:36:32.581033Z","submitted_at":"2024-10-20T05:02:18Z","title":"If LLMs Would Just Look: Simple Line-by-line Checking Improves Vulnerability Localization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15288","snapshot_observed_at":"2026-08-04T19:25:52.495927Z","title":"Attention is all you need for LLM-based code vulnerability localization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.495927Z"},"links":{"cited_paper":"/paper/2410.15288","citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:94687126243ca10a39a26a97c096e612e723e936bf3e3eff95be00ed55ab4fae","observation_id":"4b3d87e6-b035-4d1f-8a57-8b116ab4cfb5","resolution":{"observed_at":"2026-08-04T19:25:52.495927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.502176Z","title":"A survey on large language model (LLM) security and privacy: The good, the bad, and the ugly,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.502176Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:266d9f5d0495df2bfb2fc612d4d0e37e4a2fc09d4796e61ff48f5b938029679c","observation_id":"f23e1685-8a67-433f-abd9-e19afb17ba1c","resolution":{"observed_at":"2026-08-04T19:25:52.502176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.506998Z","title":"Llm- based test-driven interactive code generation: User study and empirical evaluation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.506998Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:c6a9e69e13719030d13b4aad4238b7ec25cda5a5d5f90fdcebead4d2e17aed9a","observation_id":"6e0182fa-3224-4db7-8b28-aa73467a5b05","resolution":{"observed_at":"2026-08-04T19:25:52.506998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.511931Z","title":"An efficient cryptographic protocol verifier based on prolog rules,","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.511931Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:0546daf1d0037716ea25970b73943bcf1ad0dab74d2c66b18bc130e352dee5ee","observation_id":"54f24f52-14be-414f-b28f-0c711e939c19","resolution":{"observed_at":"2026-08-04T19:25:52.511931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.516424Z","title":"Multitask-based evaluation of open- source LLM on software vulnerability,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.516424Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:4cd9b7dc9f6008a0a59a89d72773dbf10314ed460504daef9f5dd718168cb388","observation_id":"68dd644b-8600-4835-9354-a47ff4d4599b","resolution":{"observed_at":"2026-08-04T19:25:52.516424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17218","last_updated":"2025-01-07T21:57:38Z","snapshot_observed_at":"2026-07-06T17:50:35.159174Z","submitted_at":"2024-03-25T21:47:36Z","title":"To Err is Machine: Vulnerability Detection Challenges LLM Reasoning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17218","snapshot_observed_at":"2026-08-04T19:25:52.524061Z","title":"To Err is machine: Vulnerability detection challenges LLM reasoning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.524061Z"},"links":{"cited_paper":"/paper/2403.17218","citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:d3d8d41cec7d0d5df5e90e074dd61cdd62a019ee4b0f8c56c2e66627cb794d14","observation_id":"84f05787-da1b-4643-b415-e4d5a805d04e","resolution":{"observed_at":"2026-08-04T19:25:52.524061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.531069Z","title":"Vulnerability detection with code language models: How far are we?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.531069Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:971737a8a9c48b732bbdfe9ac979fe2bb3996f8c22676ee2fd56d8c7e0c15af5","observation_id":"6df943cb-c42f-48f4-9c14-975a3c5973de","resolution":{"observed_at":"2026-08-04T19:25:52.531069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.537040Z","title":"Androzoo: Collecting millions of android apps for the research community,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.537040Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:d7c0c9aec8c603405fb4b09d45b535b89a377b1b7ff41216d52851f1f6f75194","observation_id":"5bcef70e-3e69-430f-b53e-daf1799f5289","resolution":{"observed_at":"2026-08-04T19:25:52.537040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.541808Z","title":"A study of the feasibility of co- located app attacks against BLE and a Large-Scale analysis of the current Application-Layer security landscape,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.541808Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:7855ce9aa735245c4c366f8bd1073a752d198cc9b2a79f2d38d9142bdb396522","observation_id":"290450dd-c4f1-4ffb-b550-3ce0a6addba5","resolution":{"observed_at":"2026-08-04T19:25:52.541808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.547083Z","title":"SweynTooth: unleashing mayhem over bluetooth low energy,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.547083Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:214591eee3ddcbb20c198bd01584f6a68ec4932dddd6b980d5f790141b2e0a08","observation_id":"117b0f94-742f-411d-bf1c-9f2f5e92bdfb","resolution":{"observed_at":"2026-08-04T19:25:52.547083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.552263Z","title":"Finding traceability attacks in the bluetooth low energy specification and its im- plementations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.552263Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:fc879111e6c0a6be947694a3b17c2558ca3dd03a493ea315cbf076bd4518e9a8","observation_id":"199c6d85-16ae-4f70-83f9-7e7c10bf03a0","resolution":{"observed_at":"2026-08-04T19:25:52.552263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.559592Z","title":"Extrapolating formal analysis to uncover attacks in bluetooth passkey entry pairing","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.559592Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:043e5f89118924a39165f802b1245361d7adaa5db5113a6771edec9cbea9d58c","observation_id":"8abf8edc-b9be-4fe1-b94d-a0d739183666","resolution":{"observed_at":"2026-08-04T19:25:52.559592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.565391Z","title":"BlueSW AT: A lightweight state-aware security framework for bluetooth low energy,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.565391Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:b7a118dfa8e123d6f97bc1b4c688be1592c4607546227d04577baa61d7504b9b","observation_id":"2ccafd6b-8624-4e74-a638-c05f751ea754","resolution":{"observed_at":"2026-08-04T19:25:52.565391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.571159Z","title":"Eddystone- eid: Secure and private infrastructural protocol for ble beacons,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.571159Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:5ecafc7cf1827958841c75fdb98382b34d1f2ccfa699de9851f4186f22db8439","observation_id":"bc57a07a-3f0f-42f9-bedc-56cddeabea8b","resolution":{"observed_at":"2026-08-04T19:25:52.571159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.577161Z","title":"MiniBLE: Exploring insecure BLE API usages in mini-programs,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.577161Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:1193f2b548c48c2284c2b53c6ccd0757a35029d5b77aa190eb0bf663c17176ee","observation_id":"fb080a56-5e9b-4593-8b56-f1dae7bf53de","resolution":{"observed_at":"2026-08-04T19:25:52.577161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.582400Z","title":"Vul-RAG: Enhancing LLM-based vulnerability detection via knowledge-level RAG,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.582400Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:cbf46a73eb4f79cabf8820f7d0b27a83189f8f02418a10fbda319fc38677dc9b","observation_id":"05d45fb7-d9d9-4857-a671-4106d7d3bb6e","resolution":{"observed_at":"2026-08-04T19:25:52.582400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.589003Z","title":"On hardware security bug code fixes by prompting large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.589003Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:eeea3c16c27bf1fc9fd87da7446c2526ca2bb0c0d622c36083a7223cf8f5387c","observation_id":"a95a7975-1992-4db7-8413-5318869550b5","resolution":{"observed_at":"2026-08-04T19:25:52.589003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.594296Z","title":"Transformer-based language models for software vulnera- bility detection,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.594296Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:94ffe5411306e498ca182e77885e43215e9072e169ae3a252c7425de4ac7681c","observation_id":"98820469-28cc-416b-ba2f-8eb104ef2059","resolution":{"observed_at":"2026-08-04T19:25:52.594296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.600031Z","title":"Software vul- nerability detection using large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.600031Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:5b44231c9d248e20d9db6ea7eefd8c502ed095271d97e82830bcad137069a4a2","observation_id":"2aa75e9c-02a4-4557-bdb9-ff6780cfa5c4","resolution":{"observed_at":"2026-08-04T19:25:52.600031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.604730Z","title":"DrAttack: Prompt decomposition and reconstruction makes powerful LLMs jailbreakers,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.604730Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:8c3839c6159f24108dcf24f39b0d7abc017e283bbe1ed996e97b6a66f56ac988","observation_id":"4d98dbeb-7e96-4337-8b47-eff40b6ce4d1","resolution":{"observed_at":"2026-08-04T19:25:52.604730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.609245Z","title":"COLD-attack: Jailbreaking LLMs with stealthiness and controllability,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.609245Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:c4dc9da385f10d81443c84098d1d774e9ae480b5f86c845efff9fe6fb16a9901","observation_id":"f32d4043-e7f0-4355-8943-f07a0a2df8fb","resolution":{"observed_at":"2026-08-04T19:25:52.609245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.615025Z","title":"DeepInception: Hypnotize large language model to be jailbreaker,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.615025Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:7d614f17abcca031af1425c8affdf4b5ec8c48985467f0028b5706c022b13102","observation_id":"57a90d98-905b-422e-af2e-3e29d6647873","resolution":{"observed_at":"2026-08-04T19:25:52.615025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.619804Z","title":"Can large language models provide security & privacy advice? measuring the ability of llms to refute misconceptions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.619804Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:043ad4f22db330f5aaad225cf98323cc41c58e9b4a68139f2c8bfb3ae875a04c","observation_id":"e250a2a3-b243-4b35-8981-9abf74f066f6","resolution":{"observed_at":"2026-08-04T19:25:52.619804Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.624672Z","title":"Examining zero-shot vulnerability repair with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.624672Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:54720d66923c580254a0352034101a0696b5d5fdd8d5ee26fd5e36880a563c1e","observation_id":"bd46c3cc-7f5b-43a4-bff9-ae916fb05e43","resolution":{"observed_at":"2026-08-04T19:25:52.624672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.629253Z","title":"On protecting the data privacy of large language models (LLMs) and LLM agents: A literature review,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.629253Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:b11f0694cc1f4b91517a304eb6ab11d25034fd02b7d1216485d9f139443ff425","observation_id":"373a6e38-f342-43d2-9606-195e5ae26a56","resolution":{"observed_at":"2026-08-04T19:25:52.629253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.635109Z","title":"LLM-guided formal verification coupled with mutation testing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.635109Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:740af350ad3fc75043d952462396f6319947eb72854110392541b687ee90a76e","observation_id":"086910a0-0916-4bb2-abd6-74e85e514e33","resolution":{"observed_at":"2026-08-04T19:25:52.635109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.639824Z","title":"SecureFalcon: Are we there yet in automated software vulnerability detection with LLMs?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.639824Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:b8d4f5b9e5c3fa830a54cf097bb1f5363c6d6a369e9442e124b2704f66777a5e","observation_id":"6b199154-fcfd-4294-854d-3e01943c00f5","resolution":{"observed_at":"2026-08-04T19:25:52.639824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.649000Z","title":"Effectiveness of large language models to generate formally verified C code,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.649000Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:cfd53319025772d593d80f030d5d374e3d04346ccc6df1882957d6de5a3519df","observation_id":"8c0045ce-d124-4136-b3d3-c50d7abf8c98","resolution":{"observed_at":"2026-08-04T19:25:52.649000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.654073Z","title":"Domain- adapted LLMs for VLSI design and verification: A case study on formal verification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.654073Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:deadaf960714823232a6e1be0a683fe446bdc42e6e6f1e4d06309aa733b540c1","observation_id":"75017214-bdaa-483b-a705-8edcbe10eae6","resolution":{"observed_at":"2026-08-04T19:25:52.654073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.659063Z","title":"Generative AI augmented induction-based formal verification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.659063Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:0dfad2ffe9431adfdcac885ae64d2b905aa32c59a8830769d94070582ba626f0","observation_id":"a4e95339-6073-46d2-affe-ada1c8bb6a71","resolution":{"observed_at":"2026-08-04T19:25:52.659063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.663774Z","title":"(Security) assertions by large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.663774Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:a51b28d39bd8960cff62a131848cad77f86f434127980a6684f28c2dff9e1fd0","observation_id":"ea23dd1c-61af-492e-9786-b58650e20ec3","resolution":{"observed_at":"2026-08-04T19:25:52.663774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.668613Z","title":"Don’t trust: Verify-grounding LLM quantitative reasoning with autoformalization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.668613Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:ae9d171a4c17b2bb9744cfab50a055f91f067ecb9f6c6e6265982146736f8bb4","observation_id":"fe53e082-26a4-48a4-b19b-3ec2c3f13591","resolution":{"observed_at":"2026-08-04T19:25:52.668613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.672884Z","title":"VeriPlan: Integrating formal verification and LLMs into end-user planning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.672884Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:3bb03edcba51946e5771ab7e479e9bd97975d4a6e3f17fcd35b57c48ed1b639e","observation_id":"f1a8193c-5e3b-40b3-83db-17b528187155","resolution":{"observed_at":"2026-08-04T19:25:52.672884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.677591Z","title":"Formal-LLM: Integrating formal language and natural language for controllable LLM- based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.677591Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:4805c2bb4a1ddca301fa96caab940daffece9ee97537c80c4f3d1e359adc26e5","observation_id":"f0382076-1f89-4f7a-b192-df0362bd8c00","resolution":{"observed_at":"2026-08-04T19:25:52.677591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.681797Z","title":"FVEL: Interactive formal verification environment with large language models via theorem proving,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.681797Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:a6901f3ac3ad9b14bfbe5ebb5958b7abaf229af250c9485fc6857236e13848ac","observation_id":"7be0b5d8-f23b-4ce1-aef8-536a8999c021","resolution":{"observed_at":"2026-08-04T19:25:52.681797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T19:25:52.686093Z","title":"CryptoFormalEval: Integrating large language models and formal verification for automated crypto- graphic protocol vulnerability detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T19:25:52.686093Z"},"links":{"citing_paper":"/paper/2509.09291"},"observation_digest":"sha256:948542e901e0fd034cf96dea1df5edcc166eeb34d1f5d861d962b4d2e44f4928","observation_id":"28842885-112d-4e50-9b49-29dac31d6427","resolution":{"observed_at":"2026-08-04T19:25:52.686093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.09291","last_updated":"2025-09-11T09:27:37Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-04T19:25:51.643324Z","submitted_at":"2025-09-11T09:27:37Z","title":"What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":43,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2509.09291."}