{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:2JZWUMUO4DVJCEIPRF5LMPI2FV","short_pith_number":"pith:2JZWUMUO","canonical_record":{"source":{"id":"2608.11469","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-11T22:14:57Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"7fecd4ca67024e8f2c72ef9ef0a5bba8e2a8426eca69b24ebf7f1fe139fdc7a6","abstract_canon_sha256":"e5f5f600846831f68d4123897836c5ac8519e1e940721ce3a2e68d84656f0e95"},"schema_version":"1.0"},"canonical_sha256":"d2736a328ee0ea91110f897ab63d1a2d524f4ea5d30209c3452c9f933f4a8998","source":{"kind":"arxiv","id":"2608.11469","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.11469","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"arxiv_version","alias_value":"2608.11469v1","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.11469","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"pith_short_12","alias_value":"2JZWUMUO4DVJ","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"pith_short_16","alias_value":"2JZWUMUO4DVJCEIP","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"pith_short_8","alias_value":"2JZWUMUO","created_at":"2026-08-13T00:21:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:2JZWUMUO4DVJCEIPRF5LMPI2FV","target":"record","payload":{"canonical_record":{"source":{"id":"2608.11469","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-11T22:14:57Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"7fecd4ca67024e8f2c72ef9ef0a5bba8e2a8426eca69b24ebf7f1fe139fdc7a6","abstract_canon_sha256":"e5f5f600846831f68d4123897836c5ac8519e1e940721ce3a2e68d84656f0e95"},"schema_version":"1.0"},"canonical_sha256":"d2736a328ee0ea91110f897ab63d1a2d524f4ea5d30209c3452c9f933f4a8998","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-13T00:21:58.871247Z","signature_b64":"008BcULiA6KvNki6dOwNuWU0ycjw5jL++gSCR+gSQWdqZSRcwFKpJlgBEGu4I5n3KimpE8Dss2E1GT+7+acqBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d2736a328ee0ea91110f897ab63d1a2d524f4ea5d30209c3452c9f933f4a8998","last_reissued_at":"2026-08-13T00:21:58.869775Z","signature_status":"signed_v1","first_computed_at":"2026-08-13T00:21:58.869775Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.11469","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-13T00:21:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hBrxnp0EDnKb0AeOzD9gf8Jx4+o7rs8ioEn4FxX5PTw9EUo5OSXn6Ab8omV0hS1xy0xM0j8YUTnpjsylIR9+Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T15:51:13.582844Z"},"content_sha256":"354678940c34794ef0c2d5ec3a4a8cce74d639e34f13b00ca3a6e259b5cfa07e","schema_version":"1.0","event_id":"sha256:354678940c34794ef0c2d5ec3a4a8cce74d639e34f13b00ca3a6e259b5cfa07e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:2JZWUMUO4DVJCEIPRF5LMPI2FV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Next Challenge for Agentic Cybersecurity: A Realistic, Contamination-Free Reverse Engineering Benchmark","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.SE"],"primary_cat":"cs.CR","authors_text":"Guannan Wei, Jeremy Spence, Jinhao Zhu, Nicholas Assaderaghi, Nikil Ravi, Raluca Ada Popa, Yangruibo Ding, Zhuo Zhang","submitted_at":"2026-08-11T22:14:57Z","abstract_excerpt":"AI agents are rapidly improving in cybersecurity capabilities when the source code is available for analysis, yet much of the software most consequential to cybersecurity, including malware, firmware, and proprietary applications, is available only as binaries. Analyzing such software requires reverse engineering(RE): recovering program semantics before the analysis can be meaningfully performed. However, evaluating agentic RE poses a fundamental challenge: benchmark instances must be unseen as source code in the LLMs' training data to prevent models from taking shortcuts by recognizing them r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.11469","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.11469/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-13T00:21:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IXotk/AXLIONP1XwqO8OrWvfhJaFXBwbEEmZLedgbKMgF7gmIhGnY1nce0paXJ8ZYcfN/MvXxVFtBl33GNYzCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T15:51:13.583504Z"},"content_sha256":"7cdf11246cdae7b7d61c7ee8360c680bd80aff2217d692f2c354d4b90276089b","schema_version":"1.0","event_id":"sha256:7cdf11246cdae7b7d61c7ee8360c680bd80aff2217d692f2c354d4b90276089b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2JZWUMUO4DVJCEIPRF5LMPI2FV/bundle.json","state_url":"https://pith.science/pith/2JZWUMUO4DVJCEIPRF5LMPI2FV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2JZWUMUO4DVJCEIPRF5LMPI2FV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T15:51:13Z","links":{"resolver":"https://pith.science/pith/2JZWUMUO4DVJCEIPRF5LMPI2FV","bundle":"https://pith.science/pith/2JZWUMUO4DVJCEIPRF5LMPI2FV/bundle.json","state":"https://pith.science/pith/2JZWUMUO4DVJCEIPRF5LMPI2FV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2JZWUMUO4DVJCEIPRF5LMPI2FV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:2JZWUMUO4DVJCEIPRF5LMPI2FV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e5f5f600846831f68d4123897836c5ac8519e1e940721ce3a2e68d84656f0e95","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-11T22:14:57Z","title_canon_sha256":"7fecd4ca67024e8f2c72ef9ef0a5bba8e2a8426eca69b24ebf7f1fe139fdc7a6"},"schema_version":"1.0","source":{"id":"2608.11469","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.11469","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"arxiv_version","alias_value":"2608.11469v1","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.11469","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"pith_short_12","alias_value":"2JZWUMUO4DVJ","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"pith_short_16","alias_value":"2JZWUMUO4DVJCEIP","created_at":"2026-08-13T00:21:58Z"},{"alias_kind":"pith_short_8","alias_value":"2JZWUMUO","created_at":"2026-08-13T00:21:58Z"}],"graph_snapshots":[{"event_id":"sha256:7cdf11246cdae7b7d61c7ee8360c680bd80aff2217d692f2c354d4b90276089b","target":"graph","created_at":"2026-08-13T00:21:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.11469/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI agents are rapidly improving in cybersecurity capabilities when the source code is available for analysis, yet much of the software most consequential to cybersecurity, including malware, firmware, and proprietary applications, is available only as binaries. Analyzing such software requires reverse engineering(RE): recovering program semantics before the analysis can be meaningfully performed. However, evaluating agentic RE poses a fundamental challenge: benchmark instances must be unseen as source code in the LLMs' training data to prevent models from taking shortcuts by recognizing them r","authors_text":"Guannan Wei, Jeremy Spence, Jinhao Zhu, Nicholas Assaderaghi, Nikil Ravi, Raluca Ada Popa, Yangruibo Ding, Zhuo Zhang","cross_cats":["cs.AI","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-11T22:14:57Z","title":"The Next Challenge for Agentic Cybersecurity: A Realistic, Contamination-Free Reverse Engineering Benchmark"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.11469","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:354678940c34794ef0c2d5ec3a4a8cce74d639e34f13b00ca3a6e259b5cfa07e","target":"record","created_at":"2026-08-13T00:21:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e5f5f600846831f68d4123897836c5ac8519e1e940721ce3a2e68d84656f0e95","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-11T22:14:57Z","title_canon_sha256":"7fecd4ca67024e8f2c72ef9ef0a5bba8e2a8426eca69b24ebf7f1fe139fdc7a6"},"schema_version":"1.0","source":{"id":"2608.11469","kind":"arxiv","version":1}},"canonical_sha256":"d2736a328ee0ea91110f897ab63d1a2d524f4ea5d30209c3452c9f933f4a8998","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d2736a328ee0ea91110f897ab63d1a2d524f4ea5d30209c3452c9f933f4a8998","first_computed_at":"2026-08-13T00:21:58.869775Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-13T00:21:58.869775Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"008BcULiA6KvNki6dOwNuWU0ycjw5jL++gSCR+gSQWdqZSRcwFKpJlgBEGu4I5n3KimpE8Dss2E1GT+7+acqBw==","signature_status":"signed_v1","signed_at":"2026-08-13T00:21:58.871247Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.11469","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:354678940c34794ef0c2d5ec3a4a8cce74d639e34f13b00ca3a6e259b5cfa07e","sha256:7cdf11246cdae7b7d61c7ee8360c680bd80aff2217d692f2c354d4b90276089b"],"state_sha256":"7a499525d8af9ce17381e4f10b35bb603b039ba224671fb9087e440c0787fbd1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"leVYa1wFlAgRwz1/PbFDwnoamxtrGmwgpaxgF3T2JaaW7m2AkUR4YHc1uH/zwOHH/zsHjZM1pV3BZ2ABMK4tAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T15:51:13.588591Z","bundle_sha256":"8c8881fffa7acf90a8d0576f74bbb670af740701b5207eb0d47c9f53e339dd87"}}