{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:22GIY4WNTMYC7GXWOYJMWZGO6M","short_pith_number":"pith:22GIY4WN","canonical_record":{"source":{"id":"2607.21957","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-24T04:10:12Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d9c8b40a8b06b6e31e695a3fe8977ea3dee59c8243fe6b492ef4b60a7c682199","abstract_canon_sha256":"53458cab515e03c21476a016c12bc4da6e5c3753ab525ade219d90b55e654ba5"},"schema_version":"1.0"},"canonical_sha256":"d68c8c72cd9b302f9af67612cb64cef31dace56078a31fa28c32ef28c05e94f8","source":{"kind":"arxiv","id":"2607.21957","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.21957","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"arxiv_version","alias_value":"2607.21957v1","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.21957","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_12","alias_value":"22GIY4WNTMYC","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_16","alias_value":"22GIY4WNTMYC7GXW","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_8","alias_value":"22GIY4WN","created_at":"2026-07-27T00:20:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:22GIY4WNTMYC7GXWOYJMWZGO6M","target":"record","payload":{"canonical_record":{"source":{"id":"2607.21957","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-24T04:10:12Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d9c8b40a8b06b6e31e695a3fe8977ea3dee59c8243fe6b492ef4b60a7c682199","abstract_canon_sha256":"53458cab515e03c21476a016c12bc4da6e5c3753ab525ade219d90b55e654ba5"},"schema_version":"1.0"},"canonical_sha256":"d68c8c72cd9b302f9af67612cb64cef31dace56078a31fa28c32ef28c05e94f8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-27T00:20:29.762764Z","signature_b64":"XBjfr9eMbV3j+9noDjuVuj9GPWniFtyW2nylVn/qVpu7R21USlOpC0zpSynQTzPq4NHMbxcV0NhH6vV06hUCDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d68c8c72cd9b302f9af67612cb64cef31dace56078a31fa28c32ef28c05e94f8","last_reissued_at":"2026-07-27T00:20:29.761934Z","signature_status":"signed_v1","first_computed_at":"2026-07-27T00:20:29.761934Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.21957","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-27T00:20:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oMUM0wNnc1nXBwzp0OXYIXJkOPVEr6K8SAjt76NMtDan0TekZCM24GP064O/csXJ3yw3lq0qp6rckgvCeEZgCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:10:02.094444Z"},"content_sha256":"bd201b592688c4d3f545498751d20d7b1173760fe1ce02a776f281cb8c905b26","schema_version":"1.0","event_id":"sha256:bd201b592688c4d3f545498751d20d7b1173760fe1ce02a776f281cb8c905b26"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:22GIY4WNTMYC7GXWOYJMWZGO6M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"KaPilot: LLM-Assisted Generation of Kani Specifications for Unsafe Rust Verification","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Lin Huang, Minghua Wang, Mingzhi Gao, Yuwei Liu, Yuxi Ling","submitted_at":"2026-07-24T04:10:12Z","abstract_excerpt":"Rust's ownership and type system provide strong memory safety guarantees, but unsafe code still presents memory safety risks. Formal verification is crucial for ensuring memory safety, but writing precise specifications for unsafe Rust is challenging and largely manual. Large language models (LLMs) have shown promise in generating formal specifications but are often code-centric, prone to inheriting implementation flaws, and lack systematic quality assessment.\n  In this paper, we present KaPilot, a multi-agent framework for automatically generating specifications to verify unsafe Rust memory s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.21957","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.21957/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-27T00:20:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fY7jPKWj8SYkpO/5dBVhykERnmrIepKkW6yHIWNc38LvqVE15aNVgMvjwEbN+S6Q6JMhTwr/MNHZnCdI9hP2AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:10:02.095418Z"},"content_sha256":"6c9eef90b7241a6ed87d139cf90eac24bb3fcc84df2f39ccab5e37f53d64fc43","schema_version":"1.0","event_id":"sha256:6c9eef90b7241a6ed87d139cf90eac24bb3fcc84df2f39ccab5e37f53d64fc43"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:22GIY4WNTMYC7GXWOYJMWZGO6M","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.34727/2024/ISBN.978-3-85448-065-5_19) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Shuvendu K. Lahiri. 2024. Evaluating LLM-driven User-Intent Formalization for Verification-Aware Languages. doi:10.34727/2024/ISBN. 978-3-85448-065-5_19","arxiv_id":"2607.21957","detector":"doi_compliance","evidence":{"ref_index":18,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.34727/2024/isbn","reconstructed_doi":"10.34727/2024/ISBN.978-3-85448-065-5_19"},"severity":"advisory","ref_index":18,"audited_at":"2026-08-01T06:28:53.814388Z","event_type":"pith.integrity.v1","detected_doi":"10.34727/2024/ISBN.978-3-85448-065-5_19","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"158bd18ca44f042f08e190b35259679142c8715540e5e465ada96b6baf0d840c","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":15268,"payload_sha256":"f526bfc3477e8d94db699d8b9e945c7d87ec4261248078906eeadbb66a9052ca","signature_b64":"jEUdPAT2B4PVBlAd85zjL4509zceE3GyfWzHGAERBTjNQRgRrl4HwsC6KBlaAF7SUy2BehS8t3iaoDq+kb+ZAw==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T06:33:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E9d+UNyvU5qsn5PCP4QsBThiJJxWpaHJf1VaRxi/L1ij+zFaEX4H/eUxgcsd8Gk/FnJ8e4zf131mE+37buMIAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:10:02.100405Z"},"content_sha256":"fadc5e23a7b029def8e3f71e544a138f54c6b891bc059baf4e3f266831a4e301","schema_version":"1.0","event_id":"sha256:fadc5e23a7b029def8e3f71e544a138f54c6b891bc059baf4e3f266831a4e301"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:22GIY4WNTMYC7GXWOYJMWZGO6M","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.1007/978-3-662-46681-0_41) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Arie Gurfinkel, Temesghen Kahsai, and Jorge A Navas. 2015. SeaHorn: A framework for verifying C programs (competition contribution). InInternational Conference on Tools and Algorithms for the Construction and Analysis of Systems. Springer, ","arxiv_id":"2607.21957","detector":"doi_compliance","evidence":{"ref_index":15,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.1007/978-3-","reconstructed_doi":"10.1007/978-3-662-46681-0_41"},"severity":"advisory","ref_index":15,"audited_at":"2026-08-01T06:28:53.814388Z","event_type":"pith.integrity.v1","detected_doi":"10.1007/978-3-662-46681-0_41","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"158d8d338468529abc06ad9a2694d3d820e15b76e2a6560da6e313fd0fdc2403","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":15267,"payload_sha256":"79115cc6c9e3b96004aa3277f9540052f4342949c7af311afb8b0aacdd8d38d2","signature_b64":"F0MmKrtD1GHJphRJF3hqaSFY3b+gW1dw1B+Ay8Atchm54gNUl1xB2+xH3U976Rse8OlBa2zZWE30VLzZBqYNBA==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T06:33:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w+yw59R33A3PuKCkE+bEClw78fd8vR9HF1Ta0Z21N5fojGThSbNXKxcrQ0xB5odGfmH/9aoUwmN4AtWV5ujWDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:10:02.101232Z"},"content_sha256":"a51b268204bdcabb1afacea7f2e3ce6d7ba5e6ecd1960c85fb2ee192d7a02c23","schema_version":"1.0","event_id":"sha256:a51b268204bdcabb1afacea7f2e3ce6d7ba5e6ecd1960c85fb2ee192d7a02c23"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/22GIY4WNTMYC7GXWOYJMWZGO6M/bundle.json","state_url":"https://pith.science/pith/22GIY4WNTMYC7GXWOYJMWZGO6M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/22GIY4WNTMYC7GXWOYJMWZGO6M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T18:10:02Z","links":{"resolver":"https://pith.science/pith/22GIY4WNTMYC7GXWOYJMWZGO6M","bundle":"https://pith.science/pith/22GIY4WNTMYC7GXWOYJMWZGO6M/bundle.json","state":"https://pith.science/pith/22GIY4WNTMYC7GXWOYJMWZGO6M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/22GIY4WNTMYC7GXWOYJMWZGO6M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:22GIY4WNTMYC7GXWOYJMWZGO6M","merge_version":"pith-open-graph-merge-v1","event_count":4,"valid_event_count":4,"invalid_event_count":0,"equivocation_count":1,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"53458cab515e03c21476a016c12bc4da6e5c3753ab525ade219d90b55e654ba5","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-24T04:10:12Z","title_canon_sha256":"d9c8b40a8b06b6e31e695a3fe8977ea3dee59c8243fe6b492ef4b60a7c682199"},"schema_version":"1.0","source":{"id":"2607.21957","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.21957","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"arxiv_version","alias_value":"2607.21957v1","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.21957","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_12","alias_value":"22GIY4WNTMYC","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_16","alias_value":"22GIY4WNTMYC7GXW","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_8","alias_value":"22GIY4WN","created_at":"2026-07-27T00:20:29Z"}],"graph_snapshots":[{"event_id":"sha256:6c9eef90b7241a6ed87d139cf90eac24bb3fcc84df2f39ccab5e37f53d64fc43","target":"graph","created_at":"2026-07-27T00:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.21957/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Rust's ownership and type system provide strong memory safety guarantees, but unsafe code still presents memory safety risks. Formal verification is crucial for ensuring memory safety, but writing precise specifications for unsafe Rust is challenging and largely manual. Large language models (LLMs) have shown promise in generating formal specifications but are often code-centric, prone to inheriting implementation flaws, and lack systematic quality assessment.\n  In this paper, we present KaPilot, a multi-agent framework for automatically generating specifications to verify unsafe Rust memory s","authors_text":"Lin Huang, Minghua Wang, Mingzhi Gao, Yuwei Liu, Yuxi Ling","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-24T04:10:12Z","title":"KaPilot: LLM-Assisted Generation of Kani Specifications for Unsafe Rust Verification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.21957","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bd201b592688c4d3f545498751d20d7b1173760fe1ce02a776f281cb8c905b26","target":"record","created_at":"2026-07-27T00:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"53458cab515e03c21476a016c12bc4da6e5c3753ab525ade219d90b55e654ba5","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-24T04:10:12Z","title_canon_sha256":"d9c8b40a8b06b6e31e695a3fe8977ea3dee59c8243fe6b492ef4b60a7c682199"},"schema_version":"1.0","source":{"id":"2607.21957","kind":"arxiv","version":1}},"canonical_sha256":"d68c8c72cd9b302f9af67612cb64cef31dace56078a31fa28c32ef28c05e94f8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d68c8c72cd9b302f9af67612cb64cef31dace56078a31fa28c32ef28c05e94f8","first_computed_at":"2026-07-27T00:20:29.761934Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-27T00:20:29.761934Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XBjfr9eMbV3j+9noDjuVuj9GPWniFtyW2nylVn/qVpu7R21USlOpC0zpSynQTzPq4NHMbxcV0NhH6vV06hUCDw==","signature_status":"signed_v1","signed_at":"2026-07-27T00:20:29.762764Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.21957","source_kind":"arxiv","source_version":1}}},"equivocations":[{"signer_id":"pith.science","event_type":"integrity_finding","target":"integrity","event_ids":["sha256:a51b268204bdcabb1afacea7f2e3ce6d7ba5e6ecd1960c85fb2ee192d7a02c23","sha256:fadc5e23a7b029def8e3f71e544a138f54c6b891bc059baf4e3f266831a4e301"]}],"invalid_events":[],"applied_event_ids":["sha256:bd201b592688c4d3f545498751d20d7b1173760fe1ce02a776f281cb8c905b26","sha256:6c9eef90b7241a6ed87d139cf90eac24bb3fcc84df2f39ccab5e37f53d64fc43"],"state_sha256":"0506e4caad4f21b404f94fcfca03aa8a9f85e9a6cd06f0b99d26a5f1ef145ee1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9r1Wbed952LMuEwniQzraT8+784CWkVbl1GGWKvMYRf0w04MKlgk/DqiY9r4oyYv637HTbjJY1YZDo/cJf/oCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T18:10:02.105895Z","bundle_sha256":"1cc0b17c3c329a961d90906fd3a337303d9f44ba5009c2c24782e61993091b9d"}}