{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3SYZ74HKSX5AECIN72YHC5CQTU","short_pith_number":"pith:3SYZ74HK","canonical_record":{"source":{"id":"2507.12364","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-16T16:08:24Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"e3ef2718063443b37da383e74a4d623d4ef3b18ef981f7a61a5057364244eba9","abstract_canon_sha256":"c8ff3f3bc5e5e76f7b7eba6e3a666095362bd1c1d733f8429759f721ad23c6fc"},"schema_version":"1.0"},"canonical_sha256":"dcb19ff0ea95fa02090dfeb07174509d34d318426fce043d7c6bbb56d14b6163","source":{"kind":"arxiv","id":"2507.12364","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.12364","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"arxiv_version","alias_value":"2507.12364v2","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.12364","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"pith_short_12","alias_value":"3SYZ74HKSX5A","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"pith_short_16","alias_value":"3SYZ74HKSX5AECIN","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"pith_short_8","alias_value":"3SYZ74HK","created_at":"2026-05-22T02:04:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3SYZ74HKSX5AECIN72YHC5CQTU","target":"record","payload":{"canonical_record":{"source":{"id":"2507.12364","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-16T16:08:24Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"e3ef2718063443b37da383e74a4d623d4ef3b18ef981f7a61a5057364244eba9","abstract_canon_sha256":"c8ff3f3bc5e5e76f7b7eba6e3a666095362bd1c1d733f8429759f721ad23c6fc"},"schema_version":"1.0"},"canonical_sha256":"dcb19ff0ea95fa02090dfeb07174509d34d318426fce043d7c6bbb56d14b6163","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-22T02:04:36.430491Z","signature_b64":"ooI9S9s07nhCD6ch4uwHKBlypfUuLz1NYZXSDWzhDhbUP2h7rf8lEAFHURvkmh/gBQ7B+QIj56Vp2UIdoOJpAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dcb19ff0ea95fa02090dfeb07174509d34d318426fce043d7c6bbb56d14b6163","last_reissued_at":"2026-05-22T02:04:36.429458Z","signature_status":"signed_v1","first_computed_at":"2026-05-22T02:04:36.429458Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.12364","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-22T02:04:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Adv9E2BTe0SUOIIoNmNw9YBqruCtf/OBHhQy6EMfiWon0Pqaxhhjq0e3hQgYnm0rZwsMc6Gf1L7glmovcfSjCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T23:00:59.888677Z"},"content_sha256":"c6145bf96a679cb20a2a456bd2f53cce08b6ce907808395ef5200eaf2d67d97f","schema_version":"1.0","event_id":"sha256:c6145bf96a679cb20a2a456bd2f53cce08b6ce907808395ef5200eaf2d67d97f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3SYZ74HKSX5AECIN72YHC5CQTU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tyche: Composable Isolation as a Foundation to Manage Trust in the Cloud","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Adrien Ghosn, Charly Castes, Edouard Bugnion, Marios Kogias, Neelu S. Kalani, Yuchen Qian","submitted_at":"2025-07-16T16:08:24Z","abstract_excerpt":"Cloud workloads combine software components from different parties to process sensitive data. Each component has its own trust model - it must protect its assets from the rest of the system, yet share sensitive data with components it cannot trust to keep confidential. This tension requires composing isolation boundaries for confidentiality and encapsulation. Unfortunately, the cloud offers no direct way to compose such boundaries, forcing tenants to assemble, deploy, and maintain their own solutions. This paper shifts that burden back to the infrastructure by making composable, attestable iso"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.12364","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.12364/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-22T02:04:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KyIZJU7s7xKHaLN2JIsSkV5KrdYgFQ6oZordFSqShqeNQTNlrxr5qqMCD7t1N54MvcrGaf2bB7siAMDBJQxiDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T23:00:59.889466Z"},"content_sha256":"4f818ed29c8a287f598f14100e88ae2117cda5ffcf31ca3261f2695798638dd5","schema_version":"1.0","event_id":"sha256:4f818ed29c8a287f598f14100e88ae2117cda5ffcf31ca3261f2695798638dd5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3SYZ74HKSX5AECIN72YHC5CQTU/bundle.json","state_url":"https://pith.science/pith/3SYZ74HKSX5AECIN72YHC5CQTU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3SYZ74HKSX5AECIN72YHC5CQTU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T23:00:59Z","links":{"resolver":"https://pith.science/pith/3SYZ74HKSX5AECIN72YHC5CQTU","bundle":"https://pith.science/pith/3SYZ74HKSX5AECIN72YHC5CQTU/bundle.json","state":"https://pith.science/pith/3SYZ74HKSX5AECIN72YHC5CQTU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3SYZ74HKSX5AECIN72YHC5CQTU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3SYZ74HKSX5AECIN72YHC5CQTU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c8ff3f3bc5e5e76f7b7eba6e3a666095362bd1c1d733f8429759f721ad23c6fc","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-16T16:08:24Z","title_canon_sha256":"e3ef2718063443b37da383e74a4d623d4ef3b18ef981f7a61a5057364244eba9"},"schema_version":"1.0","source":{"id":"2507.12364","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.12364","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"arxiv_version","alias_value":"2507.12364v2","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.12364","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"pith_short_12","alias_value":"3SYZ74HKSX5A","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"pith_short_16","alias_value":"3SYZ74HKSX5AECIN","created_at":"2026-05-22T02:04:36Z"},{"alias_kind":"pith_short_8","alias_value":"3SYZ74HK","created_at":"2026-05-22T02:04:36Z"}],"graph_snapshots":[{"event_id":"sha256:4f818ed29c8a287f598f14100e88ae2117cda5ffcf31ca3261f2695798638dd5","target":"graph","created_at":"2026-05-22T02:04:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.12364/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Cloud workloads combine software components from different parties to process sensitive data. Each component has its own trust model - it must protect its assets from the rest of the system, yet share sensitive data with components it cannot trust to keep confidential. This tension requires composing isolation boundaries for confidentiality and encapsulation. Unfortunately, the cloud offers no direct way to compose such boundaries, forcing tenants to assemble, deploy, and maintain their own solutions. This paper shifts that burden back to the infrastructure by making composable, attestable iso","authors_text":"Adrien Ghosn, Charly Castes, Edouard Bugnion, Marios Kogias, Neelu S. Kalani, Yuchen Qian","cross_cats":["cs.OS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-16T16:08:24Z","title":"Tyche: Composable Isolation as a Foundation to Manage Trust in the Cloud"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.12364","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c6145bf96a679cb20a2a456bd2f53cce08b6ce907808395ef5200eaf2d67d97f","target":"record","created_at":"2026-05-22T02:04:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c8ff3f3bc5e5e76f7b7eba6e3a666095362bd1c1d733f8429759f721ad23c6fc","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-16T16:08:24Z","title_canon_sha256":"e3ef2718063443b37da383e74a4d623d4ef3b18ef981f7a61a5057364244eba9"},"schema_version":"1.0","source":{"id":"2507.12364","kind":"arxiv","version":2}},"canonical_sha256":"dcb19ff0ea95fa02090dfeb07174509d34d318426fce043d7c6bbb56d14b6163","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dcb19ff0ea95fa02090dfeb07174509d34d318426fce043d7c6bbb56d14b6163","first_computed_at":"2026-05-22T02:04:36.429458Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-22T02:04:36.429458Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ooI9S9s07nhCD6ch4uwHKBlypfUuLz1NYZXSDWzhDhbUP2h7rf8lEAFHURvkmh/gBQ7B+QIj56Vp2UIdoOJpAA==","signature_status":"signed_v1","signed_at":"2026-05-22T02:04:36.430491Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.12364","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c6145bf96a679cb20a2a456bd2f53cce08b6ce907808395ef5200eaf2d67d97f","sha256:4f818ed29c8a287f598f14100e88ae2117cda5ffcf31ca3261f2695798638dd5"],"state_sha256":"c31e2d362646b5ed25378835401a54dd1fb1c4a63c175a35466c3a90b029965e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JAm3jmPn3RxHt/Um8LXhw/GwZeJRsUiHdId5GWm03I9U8XBaUmYW+7tq6fm4MqCqg11ZONvcG7VAmQBv/csODQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T23:00:59.893302Z","bundle_sha256":"9aa80866ae71e6ad1f89ecc63980b5cd19cfa931b13fa62c5c5a50759dc76299"}}