{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:2Y6PM3T5RXWKP2AAYLZZ3PGCT2","short_pith_number":"pith:2Y6PM3T5","canonical_record":{"source":{"id":"2504.20763","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-29T13:44:01Z","cross_cats_sorted":[],"title_canon_sha256":"3cb4a351d3abd3fc10cc25517eda0766000e819acce138e31c3959b40d7782ad","abstract_canon_sha256":"a830a497f4f19a47531b42a17ce33d551639e4ca66b2d2fe38497496d92456ad"},"schema_version":"1.0"},"canonical_sha256":"d63cf66e7d8deca7e800c2f39dbcc29e93a995da46728b682fb5d929a51f994d","source":{"kind":"arxiv","id":"2504.20763","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.20763","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"arxiv_version","alias_value":"2504.20763v1","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.20763","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"pith_short_12","alias_value":"2Y6PM3T5RXWK","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"pith_short_16","alias_value":"2Y6PM3T5RXWKP2AA","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"pith_short_8","alias_value":"2Y6PM3T5","created_at":"2026-07-05T10:55:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:2Y6PM3T5RXWKP2AAYLZZ3PGCT2","target":"record","payload":{"canonical_record":{"source":{"id":"2504.20763","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-29T13:44:01Z","cross_cats_sorted":[],"title_canon_sha256":"3cb4a351d3abd3fc10cc25517eda0766000e819acce138e31c3959b40d7782ad","abstract_canon_sha256":"a830a497f4f19a47531b42a17ce33d551639e4ca66b2d2fe38497496d92456ad"},"schema_version":"1.0"},"canonical_sha256":"d63cf66e7d8deca7e800c2f39dbcc29e93a995da46728b682fb5d929a51f994d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:55:48.286093Z","signature_b64":"k6abO6G4wg3+S/OFb3LUp1flPM6GNNab1K6cNfMsFt1wwBW4uSQLyRd6cjQ00yyNkIBHE/jty/kuMBDAz3V0Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d63cf66e7d8deca7e800c2f39dbcc29e93a995da46728b682fb5d929a51f994d","last_reissued_at":"2026-07-05T10:55:48.285656Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:55:48.285656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.20763","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:55:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HoX0mG+t4Iwa62RkzIpBkM1cjY/X3JzNjXcmd86u3axJmiYgVosYz5ZXHNIkXpMQCBlm1fUOq65jMPcPMkmiCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:28:55.438653Z"},"content_sha256":"1fc7f3dd0712bb7040beff9ad377e813871853d43c7ecbd8c8d42f29b46802d4","schema_version":"1.0","event_id":"sha256:1fc7f3dd0712bb7040beff9ad377e813871853d43c7ecbd8c8d42f29b46802d4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:2Y6PM3T5RXWKP2AAYLZZ3PGCT2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding Large Language Model Supply Chain: Structure, Domain, and Vulnerabilities","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Haoyu Wang, Shenao Wang, Tianyuan Nie, Yanjie Zhao, Yanzhe Hu","submitted_at":"2025-04-29T13:44:01Z","abstract_excerpt":"Large Language Models (LLMs) have revolutionized artificial intelligence (AI), driving breakthroughs in natural language understanding, text generation, and autonomous systems. However, the rapid growth of LLMs presents significant challenges in the security and reliability of the Large Language Model Supply Chain (LLMSC), a complex network of open-source components, libraries, and tools essential for LLM development and deployment. Despite its critical importance, the LLMSC remains underexplored, particularly regarding its structural characteristics, domain composition, and security vulnerabi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.20763","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.20763/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:55:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hRa1MC5qi0IYtQl+TsVapnRrw6c+ORi1W/SM8IPuTzxol1pPyYlS1YPMew2Jdi6eHqD2YNcy66xnTFtQulNzCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:28:55.439157Z"},"content_sha256":"b3ee37fd8039abc2e6006b97c78393dcb9516d9832f49a73c42d23072446946f","schema_version":"1.0","event_id":"sha256:b3ee37fd8039abc2e6006b97c78393dcb9516d9832f49a73c42d23072446946f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2Y6PM3T5RXWKP2AAYLZZ3PGCT2/bundle.json","state_url":"https://pith.science/pith/2Y6PM3T5RXWKP2AAYLZZ3PGCT2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2Y6PM3T5RXWKP2AAYLZZ3PGCT2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T05:28:55Z","links":{"resolver":"https://pith.science/pith/2Y6PM3T5RXWKP2AAYLZZ3PGCT2","bundle":"https://pith.science/pith/2Y6PM3T5RXWKP2AAYLZZ3PGCT2/bundle.json","state":"https://pith.science/pith/2Y6PM3T5RXWKP2AAYLZZ3PGCT2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2Y6PM3T5RXWKP2AAYLZZ3PGCT2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:2Y6PM3T5RXWKP2AAYLZZ3PGCT2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a830a497f4f19a47531b42a17ce33d551639e4ca66b2d2fe38497496d92456ad","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-29T13:44:01Z","title_canon_sha256":"3cb4a351d3abd3fc10cc25517eda0766000e819acce138e31c3959b40d7782ad"},"schema_version":"1.0","source":{"id":"2504.20763","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.20763","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"arxiv_version","alias_value":"2504.20763v1","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.20763","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"pith_short_12","alias_value":"2Y6PM3T5RXWK","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"pith_short_16","alias_value":"2Y6PM3T5RXWKP2AA","created_at":"2026-07-05T10:55:48Z"},{"alias_kind":"pith_short_8","alias_value":"2Y6PM3T5","created_at":"2026-07-05T10:55:48Z"}],"graph_snapshots":[{"event_id":"sha256:b3ee37fd8039abc2e6006b97c78393dcb9516d9832f49a73c42d23072446946f","target":"graph","created_at":"2026-07-05T10:55:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.20763/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have revolutionized artificial intelligence (AI), driving breakthroughs in natural language understanding, text generation, and autonomous systems. However, the rapid growth of LLMs presents significant challenges in the security and reliability of the Large Language Model Supply Chain (LLMSC), a complex network of open-source components, libraries, and tools essential for LLM development and deployment. Despite its critical importance, the LLMSC remains underexplored, particularly regarding its structural characteristics, domain composition, and security vulnerabi","authors_text":"Haoyu Wang, Shenao Wang, Tianyuan Nie, Yanjie Zhao, Yanzhe Hu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-29T13:44:01Z","title":"Understanding Large Language Model Supply Chain: Structure, Domain, and Vulnerabilities"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.20763","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1fc7f3dd0712bb7040beff9ad377e813871853d43c7ecbd8c8d42f29b46802d4","target":"record","created_at":"2026-07-05T10:55:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a830a497f4f19a47531b42a17ce33d551639e4ca66b2d2fe38497496d92456ad","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-29T13:44:01Z","title_canon_sha256":"3cb4a351d3abd3fc10cc25517eda0766000e819acce138e31c3959b40d7782ad"},"schema_version":"1.0","source":{"id":"2504.20763","kind":"arxiv","version":1}},"canonical_sha256":"d63cf66e7d8deca7e800c2f39dbcc29e93a995da46728b682fb5d929a51f994d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d63cf66e7d8deca7e800c2f39dbcc29e93a995da46728b682fb5d929a51f994d","first_computed_at":"2026-07-05T10:55:48.285656Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:55:48.285656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k6abO6G4wg3+S/OFb3LUp1flPM6GNNab1K6cNfMsFt1wwBW4uSQLyRd6cjQ00yyNkIBHE/jty/kuMBDAz3V0Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:55:48.286093Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.20763","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1fc7f3dd0712bb7040beff9ad377e813871853d43c7ecbd8c8d42f29b46802d4","sha256:b3ee37fd8039abc2e6006b97c78393dcb9516d9832f49a73c42d23072446946f"],"state_sha256":"d25ece94e0f0cc8291d215f38f878005024da631e40728988517b2d507529e25"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"egCKJVRcSgFtr3oPCu5tQd1hDNgKgBY2j/6GpmJRtkShny0oVLnvXOkfhFS18RCAYeGcSsKZpxuSVu9oZqTPCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T05:28:55.443964Z","bundle_sha256":"333dce74bbb9255a4cdf5508fddcec842f5963cfc50223cee7302c5ea3e7dae8"}}