{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:567QVS6SL4HMADNU3FQEVUTEFT","short_pith_number":"pith:567QVS6S","canonical_record":{"source":{"id":"2607.21325","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T13:55:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5ede363aeb9d5185ea191c4290a06e078a2f6cb662670a95aa251d52502364a9","abstract_canon_sha256":"5b8669eb77a286a757bfb6d6dc32df668ac5f1d27147f7f230db9b47a83ae8a6"},"schema_version":"1.0"},"canonical_sha256":"efbf0acbd25f0ec00db4d9604ad2642ccd198dee9f75a51e10cf7cd73a8e0e84","source":{"kind":"arxiv","id":"2607.21325","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.21325","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"arxiv_version","alias_value":"2607.21325v1","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.21325","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"pith_short_12","alias_value":"567QVS6SL4HM","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"pith_short_16","alias_value":"567QVS6SL4HMADNU","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"pith_short_8","alias_value":"567QVS6S","created_at":"2026-07-24T01:24:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:567QVS6SL4HMADNU3FQEVUTEFT","target":"record","payload":{"canonical_record":{"source":{"id":"2607.21325","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T13:55:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5ede363aeb9d5185ea191c4290a06e078a2f6cb662670a95aa251d52502364a9","abstract_canon_sha256":"5b8669eb77a286a757bfb6d6dc32df668ac5f1d27147f7f230db9b47a83ae8a6"},"schema_version":"1.0"},"canonical_sha256":"efbf0acbd25f0ec00db4d9604ad2642ccd198dee9f75a51e10cf7cd73a8e0e84","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-24T01:24:25.905484Z","signature_b64":"ZnFzcDg98YxQlQgFowE+9ziKj0VXI/1/jjbutkAUo9T3dNrX79rPv8mBEMOPetpgL7LOaRnGssaaalkrM5riCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"efbf0acbd25f0ec00db4d9604ad2642ccd198dee9f75a51e10cf7cd73a8e0e84","last_reissued_at":"2026-07-24T01:24:25.904581Z","signature_status":"signed_v1","first_computed_at":"2026-07-24T01:24:25.904581Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.21325","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-24T01:24:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"heiDn7RpD0vQ6W+JKBN8JvYVXwp4Br93p3RiJxjchfY0VGrpddD5UPqBzMq7LWi1v1x4khuryCXnZ+gt3rgCCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:31:05.616406Z"},"content_sha256":"b4c80c856cbcca86ae9d5818b3b2858a2412e825692bb0afdb43406c14e32c6c","schema_version":"1.0","event_id":"sha256:b4c80c856cbcca86ae9d5818b3b2858a2412e825692bb0afdb43406c14e32c6c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:567QVS6SL4HMADNU3FQEVUTEFT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Toward cryptographically verifiable authorization for autonomous AI agents: A security hypothesis, preliminary formal model, and proof-of-concept implementation","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"D. Fern\\'andez-Fern\\'andez, M. Llamb\\'i-Morillas","submitted_at":"2026-07-23T13:55:02Z","abstract_excerpt":"Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight. Existing authentication and authorization mechanisms establish identity and delegate authority, but do not inherently provide cryptographic evidence that a concrete request issued by a specific agent satisfies the applicable policy in a specific execution context. This paper hypothesizes that agent authorization can be formalized as a cryptographically verifiable relation, denoted $R_{CVA}$, that jointly binds an agent principal, a concrete authorization request, an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.21325","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.21325/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-24T01:24:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0iVqKa9Qps3qmsi7muP/78WOMFeTKi156V/sfQvbjlb4Ws4CyhoaQtrLwlMSvRt+ljAxtHTdnIp8qsl1oZHMCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:31:05.616964Z"},"content_sha256":"035c1ea30fc12194ac0807ecfc6fe8106fb4bbb02f108a24b58f7b1d3e90435b","schema_version":"1.0","event_id":"sha256:035c1ea30fc12194ac0807ecfc6fe8106fb4bbb02f108a24b58f7b1d3e90435b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/567QVS6SL4HMADNU3FQEVUTEFT/bundle.json","state_url":"https://pith.science/pith/567QVS6SL4HMADNU3FQEVUTEFT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/567QVS6SL4HMADNU3FQEVUTEFT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T19:31:05Z","links":{"resolver":"https://pith.science/pith/567QVS6SL4HMADNU3FQEVUTEFT","bundle":"https://pith.science/pith/567QVS6SL4HMADNU3FQEVUTEFT/bundle.json","state":"https://pith.science/pith/567QVS6SL4HMADNU3FQEVUTEFT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/567QVS6SL4HMADNU3FQEVUTEFT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:567QVS6SL4HMADNU3FQEVUTEFT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5b8669eb77a286a757bfb6d6dc32df668ac5f1d27147f7f230db9b47a83ae8a6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T13:55:02Z","title_canon_sha256":"5ede363aeb9d5185ea191c4290a06e078a2f6cb662670a95aa251d52502364a9"},"schema_version":"1.0","source":{"id":"2607.21325","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.21325","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"arxiv_version","alias_value":"2607.21325v1","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.21325","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"pith_short_12","alias_value":"567QVS6SL4HM","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"pith_short_16","alias_value":"567QVS6SL4HMADNU","created_at":"2026-07-24T01:24:25Z"},{"alias_kind":"pith_short_8","alias_value":"567QVS6S","created_at":"2026-07-24T01:24:25Z"}],"graph_snapshots":[{"event_id":"sha256:035c1ea30fc12194ac0807ecfc6fe8106fb4bbb02f108a24b58f7b1d3e90435b","target":"graph","created_at":"2026-07-24T01:24:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.21325/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight. Existing authentication and authorization mechanisms establish identity and delegate authority, but do not inherently provide cryptographic evidence that a concrete request issued by a specific agent satisfies the applicable policy in a specific execution context. This paper hypothesizes that agent authorization can be formalized as a cryptographically verifiable relation, denoted $R_{CVA}$, that jointly binds an agent principal, a concrete authorization request, an","authors_text":"D. Fern\\'andez-Fern\\'andez, M. Llamb\\'i-Morillas","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T13:55:02Z","title":"Toward cryptographically verifiable authorization for autonomous AI agents: A security hypothesis, preliminary formal model, and proof-of-concept implementation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.21325","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b4c80c856cbcca86ae9d5818b3b2858a2412e825692bb0afdb43406c14e32c6c","target":"record","created_at":"2026-07-24T01:24:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5b8669eb77a286a757bfb6d6dc32df668ac5f1d27147f7f230db9b47a83ae8a6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T13:55:02Z","title_canon_sha256":"5ede363aeb9d5185ea191c4290a06e078a2f6cb662670a95aa251d52502364a9"},"schema_version":"1.0","source":{"id":"2607.21325","kind":"arxiv","version":1}},"canonical_sha256":"efbf0acbd25f0ec00db4d9604ad2642ccd198dee9f75a51e10cf7cd73a8e0e84","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"efbf0acbd25f0ec00db4d9604ad2642ccd198dee9f75a51e10cf7cd73a8e0e84","first_computed_at":"2026-07-24T01:24:25.904581Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-24T01:24:25.904581Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZnFzcDg98YxQlQgFowE+9ziKj0VXI/1/jjbutkAUo9T3dNrX79rPv8mBEMOPetpgL7LOaRnGssaaalkrM5riCw==","signature_status":"signed_v1","signed_at":"2026-07-24T01:24:25.905484Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.21325","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b4c80c856cbcca86ae9d5818b3b2858a2412e825692bb0afdb43406c14e32c6c","sha256:035c1ea30fc12194ac0807ecfc6fe8106fb4bbb02f108a24b58f7b1d3e90435b"],"state_sha256":"0746cd809a35af7be0d81985c908fca1cb92f683399db3da6d061db16f51bb64"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iQv0dY2oE7xxDL9c8ej9lXIPtCN6/i4liwYlGSsyo2l5gbU9qFLV0m8B5GhCeWWe+tKoyYOlpiXq6QcMb2yaBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T19:31:05.621869Z","bundle_sha256":"7108453d78684abf2a3433ddc71301e0bb7fd8f2fb3380dfbb7293155bd243b9"}}