{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:554AR4UCFX5MPYXYH5VFMBZZOT","short_pith_number":"pith:554AR4UC","canonical_record":{"source":{"id":"2603.17673","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-03-18T12:52:54Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c4842c2f1ebe453517c8ea39333e762bc5e24655524032fb175dead4170299b9","abstract_canon_sha256":"824a2d4dfa07d4e2da417429edc6849a47b38f2a7ec1fb2ed59fc645127ea1d6"},"schema_version":"1.0"},"canonical_sha256":"ef7808f2822dfac7e2f83f6a56073974d4d4784a5c1fbdba078881e1c74e292f","source":{"kind":"arxiv","id":"2603.17673","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2603.17673","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"arxiv_version","alias_value":"2603.17673v2","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2603.17673","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"pith_short_12","alias_value":"554AR4UCFX5M","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"pith_short_16","alias_value":"554AR4UCFX5MPYXY","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"pith_short_8","alias_value":"554AR4UC","created_at":"2026-07-07T02:17:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:554AR4UCFX5MPYXYH5VFMBZZOT","target":"record","payload":{"canonical_record":{"source":{"id":"2603.17673","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-03-18T12:52:54Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c4842c2f1ebe453517c8ea39333e762bc5e24655524032fb175dead4170299b9","abstract_canon_sha256":"824a2d4dfa07d4e2da417429edc6849a47b38f2a7ec1fb2ed59fc645127ea1d6"},"schema_version":"1.0"},"canonical_sha256":"ef7808f2822dfac7e2f83f6a56073974d4d4784a5c1fbdba078881e1c74e292f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T02:17:21.296620Z","signature_b64":"QcqxrZxXiKjGt7TQ0+eKoBHm3VYepbxXKmLXEXBDV072qv6yQI0fyccvXRFC11kmTp8H9KCj2TAsRGurfL9FBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ef7808f2822dfac7e2f83f6a56073974d4d4784a5c1fbdba078881e1c74e292f","last_reissued_at":"2026-07-07T02:17:21.294824Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T02:17:21.294824Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2603.17673","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:17:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v/xlnbvVbOL8Cx3DSHsJpTjyBH/d6l+/inYpgTeLZnfpzlNetBzipVU300qy4MPm5Zm4ZQ0TqCZ2xIEtvSKdDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T21:05:00.993071Z"},"content_sha256":"5d92722673527ae7a1612b616d8bf79d8f328e7ef7908897700338fa1bc1d206","schema_version":"1.0","event_id":"sha256:5d92722673527ae7a1612b616d8bf79d8f328e7ef7908897700338fa1bc1d206"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:554AR4UCFX5MPYXYH5VFMBZZOT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Reliable Local Security Agents: Verifiable Post-Training for Linux Privilege Escalation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Andreas Happe, Daniel Arp, J\\\"urgen Cito, Philipp Normann","submitted_at":"2026-03-18T12:52:54Z","abstract_excerpt":"LLM agents are becoming increasingly important in the security domain, but leading systems are often closed-source, cloud-based, hard to reproduce or use with sensitive code. This creates a need for small, local models that can perform security tasks under strict resource constraints, though effective methods for developing them remain unexplored. In this paper, we address this gap by proposing a two-stage post-training recipe that turns a small local language model into a security agent. To this end, we focus on Linux privilege escalation as a representative setting to systematically study th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2603.17673","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2603.17673/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:17:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g/uRorApIS0AQxUrFh3xyHBzg8zhDZZqio3SGgPQtr8m1uOTlE2DK1xUgM95xpWE3QCQtplkGYUY/IrKgRCAAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T21:05:00.994061Z"},"content_sha256":"b9a35958b99a18474b49ebbd9d218b3093f2249e9cf302192a0c5980d8c02f05","schema_version":"1.0","event_id":"sha256:b9a35958b99a18474b49ebbd9d218b3093f2249e9cf302192a0c5980d8c02f05"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/554AR4UCFX5MPYXYH5VFMBZZOT/bundle.json","state_url":"https://pith.science/pith/554AR4UCFX5MPYXYH5VFMBZZOT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/554AR4UCFX5MPYXYH5VFMBZZOT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T21:05:00Z","links":{"resolver":"https://pith.science/pith/554AR4UCFX5MPYXYH5VFMBZZOT","bundle":"https://pith.science/pith/554AR4UCFX5MPYXYH5VFMBZZOT/bundle.json","state":"https://pith.science/pith/554AR4UCFX5MPYXYH5VFMBZZOT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/554AR4UCFX5MPYXYH5VFMBZZOT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:554AR4UCFX5MPYXYH5VFMBZZOT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"824a2d4dfa07d4e2da417429edc6849a47b38f2a7ec1fb2ed59fc645127ea1d6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-03-18T12:52:54Z","title_canon_sha256":"c4842c2f1ebe453517c8ea39333e762bc5e24655524032fb175dead4170299b9"},"schema_version":"1.0","source":{"id":"2603.17673","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2603.17673","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"arxiv_version","alias_value":"2603.17673v2","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2603.17673","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"pith_short_12","alias_value":"554AR4UCFX5M","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"pith_short_16","alias_value":"554AR4UCFX5MPYXY","created_at":"2026-07-07T02:17:21Z"},{"alias_kind":"pith_short_8","alias_value":"554AR4UC","created_at":"2026-07-07T02:17:21Z"}],"graph_snapshots":[{"event_id":"sha256:b9a35958b99a18474b49ebbd9d218b3093f2249e9cf302192a0c5980d8c02f05","target":"graph","created_at":"2026-07-07T02:17:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2603.17673/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM agents are becoming increasingly important in the security domain, but leading systems are often closed-source, cloud-based, hard to reproduce or use with sensitive code. This creates a need for small, local models that can perform security tasks under strict resource constraints, though effective methods for developing them remain unexplored. In this paper, we address this gap by proposing a two-stage post-training recipe that turns a small local language model into a security agent. To this end, we focus on Linux privilege escalation as a representative setting to systematically study th","authors_text":"Andreas Happe, Daniel Arp, J\\\"urgen Cito, Philipp Normann","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-03-18T12:52:54Z","title":"Towards Reliable Local Security Agents: Verifiable Post-Training for Linux Privilege Escalation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2603.17673","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5d92722673527ae7a1612b616d8bf79d8f328e7ef7908897700338fa1bc1d206","target":"record","created_at":"2026-07-07T02:17:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"824a2d4dfa07d4e2da417429edc6849a47b38f2a7ec1fb2ed59fc645127ea1d6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-03-18T12:52:54Z","title_canon_sha256":"c4842c2f1ebe453517c8ea39333e762bc5e24655524032fb175dead4170299b9"},"schema_version":"1.0","source":{"id":"2603.17673","kind":"arxiv","version":2}},"canonical_sha256":"ef7808f2822dfac7e2f83f6a56073974d4d4784a5c1fbdba078881e1c74e292f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ef7808f2822dfac7e2f83f6a56073974d4d4784a5c1fbdba078881e1c74e292f","first_computed_at":"2026-07-07T02:17:21.294824Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T02:17:21.294824Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QcqxrZxXiKjGt7TQ0+eKoBHm3VYepbxXKmLXEXBDV072qv6yQI0fyccvXRFC11kmTp8H9KCj2TAsRGurfL9FBA==","signature_status":"signed_v1","signed_at":"2026-07-07T02:17:21.296620Z","signed_message":"canonical_sha256_bytes"},"source_id":"2603.17673","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5d92722673527ae7a1612b616d8bf79d8f328e7ef7908897700338fa1bc1d206","sha256:b9a35958b99a18474b49ebbd9d218b3093f2249e9cf302192a0c5980d8c02f05"],"state_sha256":"36c62cb43e0ff8b11a4044d93b917c9b1d7fe7a7b81f4fa1636796a8a3ef781e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S4T1m8XA/hWOzkUUlXScYbfAKwOX/ZgwdfW5CaxrJwLcJE0tPfseWZ0StuSd97i7C0sjvhj2RGdT8uQRR+XaDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T21:05:01.000539Z","bundle_sha256":"3037ac36ecaa5eb0acd410389cc00b1cbf17d9021de9b268ab260be630f8feed"}}