{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:2UFWK3CYZQVHJW2I7NSZVI4HPQ","short_pith_number":"pith:2UFWK3CY","canonical_record":{"source":{"id":"2608.06960","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-07T08:36:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"27b8efa61efa38172f4627a1d783b20622254e817a8d52eb255dc7028ced6210","abstract_canon_sha256":"f14867331a14c8a1236a696a1097499b2fd8519c5a9fda828740d132271aaba2"},"schema_version":"1.0"},"canonical_sha256":"d50b656c58cc2a74db48fb659aa3877c24f529b39bf106d0edf010f6b689abb3","source":{"kind":"arxiv","id":"2608.06960","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.06960","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"arxiv_version","alias_value":"2608.06960v1","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.06960","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"pith_short_12","alias_value":"2UFWK3CYZQVH","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"pith_short_16","alias_value":"2UFWK3CYZQVHJW2I","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"pith_short_8","alias_value":"2UFWK3CY","created_at":"2026-08-10T01:12:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:2UFWK3CYZQVHJW2I7NSZVI4HPQ","target":"record","payload":{"canonical_record":{"source":{"id":"2608.06960","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-07T08:36:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"27b8efa61efa38172f4627a1d783b20622254e817a8d52eb255dc7028ced6210","abstract_canon_sha256":"f14867331a14c8a1236a696a1097499b2fd8519c5a9fda828740d132271aaba2"},"schema_version":"1.0"},"canonical_sha256":"d50b656c58cc2a74db48fb659aa3877c24f529b39bf106d0edf010f6b689abb3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-10T01:12:38.954505Z","signature_b64":"sK8dCu8kJiAuAVgtH7NTb3O0uQM4dXhTndmfyo10q2OLfD0StSVquzZXpgGNyk6aBRKOuMbcu/CelKGMnQigDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d50b656c58cc2a74db48fb659aa3877c24f529b39bf106d0edf010f6b689abb3","last_reissued_at":"2026-08-10T01:12:38.951451Z","signature_status":"signed_v1","first_computed_at":"2026-08-10T01:12:38.951451Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.06960","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-10T01:12:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CZbbvICJweSbgBJlHSAMxnRxwhY8y+ZsqqpGf/lSItq3DlVEGZ2+8GXHbU2T5bHCCoElkzGd8bbSYSRzgkolAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T15:15:27.766492Z"},"content_sha256":"9932ce928195dcb55fc4b9ee6ad7178f9140ce6f506fff20ed051180c3a7416d","schema_version":"1.0","event_id":"sha256:9932ce928195dcb55fc4b9ee6ad7178f9140ce6f506fff20ed051180c3a7416d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:2UFWK3CYZQVHJW2I7NSZVI4HPQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Statistical Analysis of Executability and Program Equivalence in Decompilation for IoT Vulnerability Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Jialong Li, Minami Yoda, Yasuyuki Tahara, Yuichi Sei, Yutaka Matsuno","submitted_at":"2026-08-07T08:36:35Z","abstract_excerpt":"Internet of Things (IoT) devices handle sensitive privacy-related information such as user audio, video, and authentication data, making it essential to detect vulnerabilities in their firmware. Decompilation, a key detection technique, has recently attracted attention because Large Language Models (LLMs) enable high readability and high recompilation success rates. However, because LLM outputs depend on probabilistic token prediction, they tend to prioritize syntactic correctness and may generate plausible-looking code that is semantically different from the original binary. Vulnerabilities o"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.06960","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.06960/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-10T01:12:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZPAsJKB+FpjdWv0mQ816tg63jZEbZg3PAtOCuyB5ALTy84rABWFntg/C/Z425wmUSFOdezN8jhnfVf5h7u7mAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T15:15:27.767066Z"},"content_sha256":"ec50bd0ee44ee183c31e5ef323601bdd93fb1303d0d7f5f6dd6530ba13d6a8a2","schema_version":"1.0","event_id":"sha256:ec50bd0ee44ee183c31e5ef323601bdd93fb1303d0d7f5f6dd6530ba13d6a8a2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2UFWK3CYZQVHJW2I7NSZVI4HPQ/bundle.json","state_url":"https://pith.science/pith/2UFWK3CYZQVHJW2I7NSZVI4HPQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2UFWK3CYZQVHJW2I7NSZVI4HPQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T15:15:27Z","links":{"resolver":"https://pith.science/pith/2UFWK3CYZQVHJW2I7NSZVI4HPQ","bundle":"https://pith.science/pith/2UFWK3CYZQVHJW2I7NSZVI4HPQ/bundle.json","state":"https://pith.science/pith/2UFWK3CYZQVHJW2I7NSZVI4HPQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2UFWK3CYZQVHJW2I7NSZVI4HPQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:2UFWK3CYZQVHJW2I7NSZVI4HPQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f14867331a14c8a1236a696a1097499b2fd8519c5a9fda828740d132271aaba2","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-07T08:36:35Z","title_canon_sha256":"27b8efa61efa38172f4627a1d783b20622254e817a8d52eb255dc7028ced6210"},"schema_version":"1.0","source":{"id":"2608.06960","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.06960","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"arxiv_version","alias_value":"2608.06960v1","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.06960","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"pith_short_12","alias_value":"2UFWK3CYZQVH","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"pith_short_16","alias_value":"2UFWK3CYZQVHJW2I","created_at":"2026-08-10T01:12:38Z"},{"alias_kind":"pith_short_8","alias_value":"2UFWK3CY","created_at":"2026-08-10T01:12:38Z"}],"graph_snapshots":[{"event_id":"sha256:ec50bd0ee44ee183c31e5ef323601bdd93fb1303d0d7f5f6dd6530ba13d6a8a2","target":"graph","created_at":"2026-08-10T01:12:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.06960/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Internet of Things (IoT) devices handle sensitive privacy-related information such as user audio, video, and authentication data, making it essential to detect vulnerabilities in their firmware. Decompilation, a key detection technique, has recently attracted attention because Large Language Models (LLMs) enable high readability and high recompilation success rates. However, because LLM outputs depend on probabilistic token prediction, they tend to prioritize syntactic correctness and may generate plausible-looking code that is semantically different from the original binary. Vulnerabilities o","authors_text":"Jialong Li, Minami Yoda, Yasuyuki Tahara, Yuichi Sei, Yutaka Matsuno","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-07T08:36:35Z","title":"Statistical Analysis of Executability and Program Equivalence in Decompilation for IoT Vulnerability Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.06960","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9932ce928195dcb55fc4b9ee6ad7178f9140ce6f506fff20ed051180c3a7416d","target":"record","created_at":"2026-08-10T01:12:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f14867331a14c8a1236a696a1097499b2fd8519c5a9fda828740d132271aaba2","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-07T08:36:35Z","title_canon_sha256":"27b8efa61efa38172f4627a1d783b20622254e817a8d52eb255dc7028ced6210"},"schema_version":"1.0","source":{"id":"2608.06960","kind":"arxiv","version":1}},"canonical_sha256":"d50b656c58cc2a74db48fb659aa3877c24f529b39bf106d0edf010f6b689abb3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d50b656c58cc2a74db48fb659aa3877c24f529b39bf106d0edf010f6b689abb3","first_computed_at":"2026-08-10T01:12:38.951451Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-10T01:12:38.951451Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sK8dCu8kJiAuAVgtH7NTb3O0uQM4dXhTndmfyo10q2OLfD0StSVquzZXpgGNyk6aBRKOuMbcu/CelKGMnQigDw==","signature_status":"signed_v1","signed_at":"2026-08-10T01:12:38.954505Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.06960","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9932ce928195dcb55fc4b9ee6ad7178f9140ce6f506fff20ed051180c3a7416d","sha256:ec50bd0ee44ee183c31e5ef323601bdd93fb1303d0d7f5f6dd6530ba13d6a8a2"],"state_sha256":"b15e5c89fd763fd0459ea7ed2bf843c18bff5085ed5530af9583c0564ddf4078"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+FlfR2gIK9LlbDe0h7ERWURwDwISuwGHgpayCQ8ZzznKK6kMjVfGKXVDgOdAConP+lQRgpAPx+PkjOw4t7kDCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T15:15:27.772507Z","bundle_sha256":"60d2634d593158567f7758a6ef9bd2a26e68b9a6082912cd83b482d839f1ea94"}}