{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:5KULLJN52VWHYRHZJ5J5PH46CL","short_pith_number":"pith:5KULLJN5","canonical_record":{"source":{"id":"2605.19755","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-03-17T20:45:09Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","cs.MA"],"title_canon_sha256":"3dd29d89cc399c57360e6b0e4a0a4f886e92a426b663c66567b1de036b7c8ebc","abstract_canon_sha256":"0d831fc7cc01d6311557e8b5cfbf255146c485c3d6db085cbc640fb0af26442c"},"schema_version":"1.0"},"canonical_sha256":"eaa8b5a5bdd56c7c44f94f53d79f9e12cf8b6a56b6f4a67294e84fa3b9af3e5c","source":{"kind":"arxiv","id":"2605.19755","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.19755","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"arxiv_version","alias_value":"2605.19755v1","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.19755","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"pith_short_12","alias_value":"5KULLJN52VWH","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"pith_short_16","alias_value":"5KULLJN52VWHYRHZ","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"pith_short_8","alias_value":"5KULLJN5","created_at":"2026-05-20T01:06:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:5KULLJN52VWHYRHZJ5J5PH46CL","target":"record","payload":{"canonical_record":{"source":{"id":"2605.19755","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-03-17T20:45:09Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","cs.MA"],"title_canon_sha256":"3dd29d89cc399c57360e6b0e4a0a4f886e92a426b663c66567b1de036b7c8ebc","abstract_canon_sha256":"0d831fc7cc01d6311557e8b5cfbf255146c485c3d6db085cbc640fb0af26442c"},"schema_version":"1.0"},"canonical_sha256":"eaa8b5a5bdd56c7c44f94f53d79f9e12cf8b6a56b6f4a67294e84fa3b9af3e5c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-20T01:06:12.249352Z","signature_b64":"tmGv0herVEeiYeQ8ZiZousZpPgZ/Q5eP6/p/aQaizRG3vaFzo4XZH4CCDHx+ZEF0zR2VSurMcJT5x+9QCNeXCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eaa8b5a5bdd56c7c44f94f53d79f9e12cf8b6a56b6f4a67294e84fa3b9af3e5c","last_reissued_at":"2026-05-20T01:06:12.248817Z","signature_status":"signed_v1","first_computed_at":"2026-05-20T01:06:12.248817Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.19755","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T01:06:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c035RoSFnHbApwJpZ30S8LS3sIStO8NiSZdN/N8SI9+JcS4Day/gxD5iRE29Ygmi0RFGY/vQAfieMBOz5ZuVBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T00:26:15.935225Z"},"content_sha256":"cbbad138ee5bf7f1bcfe96fda5850017521ff49797cdb19b7e1d163b680dc4f9","schema_version":"1.0","event_id":"sha256:cbbad138ee5bf7f1bcfe96fda5850017521ff49797cdb19b7e1d163b680dc4f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:5KULLJN52VWHYRHZJ5J5PH46CL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Operationalising Artificial Intelligence Bills of Materials (AIBOMs) for Verifiable AI Provenance and Lifecycle Assurance","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG","cs.MA"],"primary_cat":"cs.SE","authors_text":"Carsten Maple, Kay Atefi, Omar Santos, Petar Radanliev","submitted_at":"2026-03-17T20:45:09Z","abstract_excerpt":"Artificial Intelligence (AI) systems are increasingly dependent on complex, multi-layered software supply chains that introduce challenges for reproducibility, transparency, and security assurance. This study presents an Artificial Intelligence Bill of Materials (AIBOM) schema extending the CycloneDX standard to capture AI-specific provenance, model lineage, and disclosure metadata. The framework provides a formalised approach to verifiable software provenance through structured schema engineering, cryptographic validation, and agent-driven automation. An autonomous AI pipeline is developed to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.19755","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.19755/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T01:06:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bnU0PruA/jDst/iG+zD01s22/ijXruY33IYX9uTC9DrWLcnDBuB96L3hhdwRVuOVLR3/+0ogZMCHSfKR5KhKCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T00:26:15.935614Z"},"content_sha256":"7fd50fbf18690ad5a6132dac2ecc719593e3284573adc8b96c9b8a90346a9cb8","schema_version":"1.0","event_id":"sha256:7fd50fbf18690ad5a6132dac2ecc719593e3284573adc8b96c9b8a90346a9cb8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5KULLJN52VWHYRHZJ5J5PH46CL/bundle.json","state_url":"https://pith.science/pith/5KULLJN52VWHYRHZJ5J5PH46CL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5KULLJN52VWHYRHZJ5J5PH46CL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-09T00:26:15Z","links":{"resolver":"https://pith.science/pith/5KULLJN52VWHYRHZJ5J5PH46CL","bundle":"https://pith.science/pith/5KULLJN52VWHYRHZJ5J5PH46CL/bundle.json","state":"https://pith.science/pith/5KULLJN52VWHYRHZJ5J5PH46CL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5KULLJN52VWHYRHZJ5J5PH46CL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:5KULLJN52VWHYRHZJ5J5PH46CL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0d831fc7cc01d6311557e8b5cfbf255146c485c3d6db085cbc640fb0af26442c","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-03-17T20:45:09Z","title_canon_sha256":"3dd29d89cc399c57360e6b0e4a0a4f886e92a426b663c66567b1de036b7c8ebc"},"schema_version":"1.0","source":{"id":"2605.19755","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.19755","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"arxiv_version","alias_value":"2605.19755v1","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.19755","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"pith_short_12","alias_value":"5KULLJN52VWH","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"pith_short_16","alias_value":"5KULLJN52VWHYRHZ","created_at":"2026-05-20T01:06:12Z"},{"alias_kind":"pith_short_8","alias_value":"5KULLJN5","created_at":"2026-05-20T01:06:12Z"}],"graph_snapshots":[{"event_id":"sha256:7fd50fbf18690ad5a6132dac2ecc719593e3284573adc8b96c9b8a90346a9cb8","target":"graph","created_at":"2026-05-20T01:06:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.19755/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Artificial Intelligence (AI) systems are increasingly dependent on complex, multi-layered software supply chains that introduce challenges for reproducibility, transparency, and security assurance. This study presents an Artificial Intelligence Bill of Materials (AIBOM) schema extending the CycloneDX standard to capture AI-specific provenance, model lineage, and disclosure metadata. The framework provides a formalised approach to verifiable software provenance through structured schema engineering, cryptographic validation, and agent-driven automation. An autonomous AI pipeline is developed to","authors_text":"Carsten Maple, Kay Atefi, Omar Santos, Petar Radanliev","cross_cats":["cs.AI","cs.CR","cs.LG","cs.MA"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-03-17T20:45:09Z","title":"Operationalising Artificial Intelligence Bills of Materials (AIBOMs) for Verifiable AI Provenance and Lifecycle Assurance"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.19755","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cbbad138ee5bf7f1bcfe96fda5850017521ff49797cdb19b7e1d163b680dc4f9","target":"record","created_at":"2026-05-20T01:06:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0d831fc7cc01d6311557e8b5cfbf255146c485c3d6db085cbc640fb0af26442c","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-03-17T20:45:09Z","title_canon_sha256":"3dd29d89cc399c57360e6b0e4a0a4f886e92a426b663c66567b1de036b7c8ebc"},"schema_version":"1.0","source":{"id":"2605.19755","kind":"arxiv","version":1}},"canonical_sha256":"eaa8b5a5bdd56c7c44f94f53d79f9e12cf8b6a56b6f4a67294e84fa3b9af3e5c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eaa8b5a5bdd56c7c44f94f53d79f9e12cf8b6a56b6f4a67294e84fa3b9af3e5c","first_computed_at":"2026-05-20T01:06:12.248817Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-20T01:06:12.248817Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tmGv0herVEeiYeQ8ZiZousZpPgZ/Q5eP6/p/aQaizRG3vaFzo4XZH4CCDHx+ZEF0zR2VSurMcJT5x+9QCNeXCw==","signature_status":"signed_v1","signed_at":"2026-05-20T01:06:12.249352Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.19755","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cbbad138ee5bf7f1bcfe96fda5850017521ff49797cdb19b7e1d163b680dc4f9","sha256:7fd50fbf18690ad5a6132dac2ecc719593e3284573adc8b96c9b8a90346a9cb8"],"state_sha256":"70d910cc91caa4b76dbea5289e1c4172e87acbbb3d1c8b37928d1765742e095e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o5SWAIXA/R+Hv+3nzNC+Q8MzEMmnV25n9bVrklcPfQdKbtnknfcSJp1jgk+kSAQv0UCjHzUH9nB+JD8MAOENAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-09T00:26:15.937601Z","bundle_sha256":"c20fb2914e2c6f60f9708b8cb9456d280548c4018aa6a16cb32d797bb14c7cac"}}