{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:4XYZ5RRDECBENLQMGAAQMTIE2Q","short_pith_number":"pith:4XYZ5RRD","canonical_record":{"source":{"id":"2607.23088","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-25T07:46:13Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7427d689bc97615d3fcbeb101989f80bece4d85da72b97e3f6cad87ae731f328","abstract_canon_sha256":"584fdc9d75dde1d2df2f67158de68b23898579561754385f5fa1becdfc6f10e6"},"schema_version":"1.0"},"canonical_sha256":"e5f19ec623208246ae0c3001064d04d40fd375460dc23d6e05a123f550d419d7","source":{"kind":"arxiv","id":"2607.23088","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.23088","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"arxiv_version","alias_value":"2607.23088v1","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.23088","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"pith_short_12","alias_value":"4XYZ5RRDECBE","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"pith_short_16","alias_value":"4XYZ5RRDECBENLQM","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"pith_short_8","alias_value":"4XYZ5RRD","created_at":"2026-07-28T01:22:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:4XYZ5RRDECBENLQMGAAQMTIE2Q","target":"record","payload":{"canonical_record":{"source":{"id":"2607.23088","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-25T07:46:13Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7427d689bc97615d3fcbeb101989f80bece4d85da72b97e3f6cad87ae731f328","abstract_canon_sha256":"584fdc9d75dde1d2df2f67158de68b23898579561754385f5fa1becdfc6f10e6"},"schema_version":"1.0"},"canonical_sha256":"e5f19ec623208246ae0c3001064d04d40fd375460dc23d6e05a123f550d419d7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-28T01:22:06.134154Z","signature_b64":"zZVAnqhOn3UaOH8mRyzpknRy63aStnwDzAqHkt8VJjAjgY2si/sJX7GdmykPZUabXfs7FOwFDQtiQcNlNgecCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e5f19ec623208246ae0c3001064d04d40fd375460dc23d6e05a123f550d419d7","last_reissued_at":"2026-07-28T01:22:06.133190Z","signature_status":"signed_v1","first_computed_at":"2026-07-28T01:22:06.133190Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.23088","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:22:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L5mzatDqq3s1fhYG5hrgiHlwRokmK6dVWcwNecB/7MDYT87f4aMvCZzmP8QzpRA4ae7CLkXN1oWqqLCH8fUhBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T07:17:06.279958Z"},"content_sha256":"bb411a76d0129ff04b447f42a1f8e040b617bb17889d5b960d8b2eaf4f4a7d07","schema_version":"1.0","event_id":"sha256:bb411a76d0129ff04b447f42a1f8e040b617bb17889d5b960d8b2eaf4f4a7d07"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:4XYZ5RRDECBENLQMGAAQMTIE2Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Poster: Rethinking Security in LLM Code Generation through Real-World Risk Scenarios","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Bei Wang, Feng Wei, Lixun Ma, Lorenzo Cavallaro, Ruolong Ma, Wentao Chen, Zhenguang Liu","submitted_at":"2026-07-25T07:46:13Z","abstract_excerpt":"Large Language Models (LLMs) are widely used for code generation, yet their security behavior in realistic development workflows remains underexplored. Existing benchmarks often rely on explicitly specified security requirements, failing to capture real-world scenarios where prompts are frequently ambiguous or incomplete. In this paper, we adopt a developer-centric perspective and identify three representative risk scenarios that commonly lead to security vulnerabilities in LLM-generated code: Ambiguous Requirements, Under-Specified Operational Context, and Security--Functionality Conflict. Ba"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.23088","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.23088/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:22:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p7yDEUJMrmJtcOg1+d1LWtj+x7poLzLVBbL4gWnceXZnKnNzALiLZpWyPpBpeTiXqb4tQCzHBtymm7ewgSa8CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T07:17:06.280536Z"},"content_sha256":"6d893a99c1eaf5d4d150dbe64bac5962f94944c97555423ab5269cee267eb649","schema_version":"1.0","event_id":"sha256:6d893a99c1eaf5d4d150dbe64bac5962f94944c97555423ab5269cee267eb649"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4XYZ5RRDECBENLQMGAAQMTIE2Q/bundle.json","state_url":"https://pith.science/pith/4XYZ5RRDECBENLQMGAAQMTIE2Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4XYZ5RRDECBENLQMGAAQMTIE2Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T07:17:06Z","links":{"resolver":"https://pith.science/pith/4XYZ5RRDECBENLQMGAAQMTIE2Q","bundle":"https://pith.science/pith/4XYZ5RRDECBENLQMGAAQMTIE2Q/bundle.json","state":"https://pith.science/pith/4XYZ5RRDECBENLQMGAAQMTIE2Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4XYZ5RRDECBENLQMGAAQMTIE2Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:4XYZ5RRDECBENLQMGAAQMTIE2Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"584fdc9d75dde1d2df2f67158de68b23898579561754385f5fa1becdfc6f10e6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-25T07:46:13Z","title_canon_sha256":"7427d689bc97615d3fcbeb101989f80bece4d85da72b97e3f6cad87ae731f328"},"schema_version":"1.0","source":{"id":"2607.23088","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.23088","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"arxiv_version","alias_value":"2607.23088v1","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.23088","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"pith_short_12","alias_value":"4XYZ5RRDECBE","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"pith_short_16","alias_value":"4XYZ5RRDECBENLQM","created_at":"2026-07-28T01:22:06Z"},{"alias_kind":"pith_short_8","alias_value":"4XYZ5RRD","created_at":"2026-07-28T01:22:06Z"}],"graph_snapshots":[{"event_id":"sha256:6d893a99c1eaf5d4d150dbe64bac5962f94944c97555423ab5269cee267eb649","target":"graph","created_at":"2026-07-28T01:22:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.23088/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are widely used for code generation, yet their security behavior in realistic development workflows remains underexplored. Existing benchmarks often rely on explicitly specified security requirements, failing to capture real-world scenarios where prompts are frequently ambiguous or incomplete. In this paper, we adopt a developer-centric perspective and identify three representative risk scenarios that commonly lead to security vulnerabilities in LLM-generated code: Ambiguous Requirements, Under-Specified Operational Context, and Security--Functionality Conflict. Ba","authors_text":"Bei Wang, Feng Wei, Lixun Ma, Lorenzo Cavallaro, Ruolong Ma, Wentao Chen, Zhenguang Liu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-25T07:46:13Z","title":"Poster: Rethinking Security in LLM Code Generation through Real-World Risk Scenarios"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.23088","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bb411a76d0129ff04b447f42a1f8e040b617bb17889d5b960d8b2eaf4f4a7d07","target":"record","created_at":"2026-07-28T01:22:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"584fdc9d75dde1d2df2f67158de68b23898579561754385f5fa1becdfc6f10e6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-25T07:46:13Z","title_canon_sha256":"7427d689bc97615d3fcbeb101989f80bece4d85da72b97e3f6cad87ae731f328"},"schema_version":"1.0","source":{"id":"2607.23088","kind":"arxiv","version":1}},"canonical_sha256":"e5f19ec623208246ae0c3001064d04d40fd375460dc23d6e05a123f550d419d7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e5f19ec623208246ae0c3001064d04d40fd375460dc23d6e05a123f550d419d7","first_computed_at":"2026-07-28T01:22:06.133190Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-28T01:22:06.133190Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zZVAnqhOn3UaOH8mRyzpknRy63aStnwDzAqHkt8VJjAjgY2si/sJX7GdmykPZUabXfs7FOwFDQtiQcNlNgecCw==","signature_status":"signed_v1","signed_at":"2026-07-28T01:22:06.134154Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.23088","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bb411a76d0129ff04b447f42a1f8e040b617bb17889d5b960d8b2eaf4f4a7d07","sha256:6d893a99c1eaf5d4d150dbe64bac5962f94944c97555423ab5269cee267eb649"],"state_sha256":"d3b518c5343403a3814899a4a54f49a88bc29a2fcdb053c39b7a08a32803edb8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"moPbyNjxU4vHeTVAe5EiZvKFp3tXa3R52wbFrNx8xwc4IKUfMTOxyn7DcASFZWMunhqkGx52OcYDGRPnlpt9DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T07:17:06.284473Z","bundle_sha256":"56c05344e28fabf8bf602e9ad7fabe1dc082ce5f82c1c5c730f7355cf72be2b0"}}