{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:5XY6S7JVHCWC34J6MXTO7A4AWR","short_pith_number":"pith:5XY6S7JV","canonical_record":{"source":{"id":"2607.08288","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T09:32:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"11221b3bb6c00475b4496c33b7f986bec4c2f63a4fb1c807c60cd762d8c0ec6b","abstract_canon_sha256":"ffd58ab1d1bad5c7090f942fe9fcda65d52d0714d3a95fec25b80e850916f55b"},"schema_version":"1.0"},"canonical_sha256":"edf1e97d3538ac2df13e65e6ef8380b45411d12e17f5618d5963bbc08cee5b98","source":{"kind":"arxiv","id":"2607.08288","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.08288","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"arxiv_version","alias_value":"2607.08288v1","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.08288","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"pith_short_12","alias_value":"5XY6S7JVHCWC","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"pith_short_16","alias_value":"5XY6S7JVHCWC34J6","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"pith_short_8","alias_value":"5XY6S7JV","created_at":"2026-07-10T01:19:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:5XY6S7JVHCWC34J6MXTO7A4AWR","target":"record","payload":{"canonical_record":{"source":{"id":"2607.08288","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T09:32:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"11221b3bb6c00475b4496c33b7f986bec4c2f63a4fb1c807c60cd762d8c0ec6b","abstract_canon_sha256":"ffd58ab1d1bad5c7090f942fe9fcda65d52d0714d3a95fec25b80e850916f55b"},"schema_version":"1.0"},"canonical_sha256":"edf1e97d3538ac2df13e65e6ef8380b45411d12e17f5618d5963bbc08cee5b98","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-10T01:19:31.924861Z","signature_b64":"tqF3hqGIQkWboR2p2la06LOetBYKQam2yvCLJhkTAZUnijmKzWLQbyZzVd9eCYrajcHzYPQyYH13I5G+92iOCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"edf1e97d3538ac2df13e65e6ef8380b45411d12e17f5618d5963bbc08cee5b98","last_reissued_at":"2026-07-10T01:19:31.924495Z","signature_status":"signed_v1","first_computed_at":"2026-07-10T01:19:31.924495Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.08288","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T01:19:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B8Zc2USZqm6qu6mK+DgqyHB575XuCT8SmlyTKRibkp8fV4lDhum/iaBt01wrToomAoXDi2Q9tQ0q2R/tp0elDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T08:32:34.665898Z"},"content_sha256":"7e508d2d5119a529684e790e7cca6f5d8ae9161da95ef24caa44f9ab03714e38","schema_version":"1.0","event_id":"sha256:7e508d2d5119a529684e790e7cca6f5d8ae9161da95ef24caa44f9ab03714e38"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:5XY6S7JVHCWC34J6MXTO7A4AWR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Lea Roxanne Muth, Marian Margraf","submitted_at":"2026-07-09T09:32:03Z","abstract_excerpt":"In critical infrastructure, operational technology environments often cannot be actively scanned, and yet active system feedback is needed for risk assessment and compliance. This paper presents a non-invasive, MCP-grounded multi-agent pipeline that converts natural-language system descriptions into source-verified knowledge graph and audit-ready artifacts in the NIST OSCAL format for continuous automated compliance management. The architecture decouples LLM-based reasoning from deterministic knowledge retrieval against authoritative threat-intelligence sources, reducing the risk of fabricated"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.08288","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.08288/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T01:19:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Yik25D8DLzPx1KBVnNq5FS8ykTegmTuHWspeOvubLTIH5SZikkmb9l6kcpH4bTq9EO5GPP2uysWhAYCreZDpCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T08:32:34.666287Z"},"content_sha256":"26d7f95b48d5f855c15b5d7fc37b1e72b1449db1ffa72915060ad7bdb683ea0f","schema_version":"1.0","event_id":"sha256:26d7f95b48d5f855c15b5d7fc37b1e72b1449db1ffa72915060ad7bdb683ea0f"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:5XY6S7JVHCWC34J6MXTO7A4AWR","target":"integrity","payload":{"note":"This paper contains a 40-token span identical to one in arXiv:2605.21350. The two papers share no author per Pith records and neither cites the other. The duplication is the verbatim shared span; the framing makes no claim about intent or directionality.","snippet":"all other uses in any current or future media including reprinting republishing this material for advertising or promotional purposes creating new collective works for resale or redistribution to servers or lists or reuse of any copyrighted","arxiv_id":"2607.08288","detector":"shingle_duplication","evidence":{"shared_text":"all other uses in any current or future media including reprinting republishing this material for advertising or promotional purposes creating new collective works for resale or redistribution to servers or lists or reuse of any copyrighted component of this work","verdict_class":"incontrovertible","shared_arxiv_id":"2605.21350","shared_token_count":40,"shared_paper_version":1,"shared_offset_in_citing_paper":358},"severity":"advisory","ref_index":null,"audited_at":"2026-07-11T13:54:10.476711Z","event_type":"pith.integrity.v1","detected_doi":null,"detector_url":"https://pith.science/pith-integrity-protocol#shingle_duplication","external_url":null,"finding_type":"prose_duplication","evidence_hash":"499057bee90a712f0e35feef7dc07a106b23fc708fa0d5206ff18c93ff5629bc","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"0.1.0","detected_arxiv_id":"2605.21350","integrity_event_id":12211,"payload_sha256":"ad50518c080e09058e253f221d40229ceb5fe141ee4a731c2f45cc7ef8161a2a","signature_b64":"Y/gprZe5KMeN+Y2MsAFv5bcSP+4kfDRZl//z4qf44tNvEkLkRLpt3rziElrSFl78nIJooazHWt8rjb54HtpJAg==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-11T13:56:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PfoYtgQg2doZrgQWR/XRzZ46WGy7FN+gsqfhJEjjLW0bbtKgETs29dg6ZWQONoJK0/P+Dgb2c1xFbREM2wzXAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T08:32:34.667714Z"},"content_sha256":"bcba4bfe34b5049d1b089a134166930634622fd51b1b5c3e7aa3957be7e51762","schema_version":"1.0","event_id":"sha256:bcba4bfe34b5049d1b089a134166930634622fd51b1b5c3e7aa3957be7e51762"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:5XY6S7JVHCWC34J6MXTO7A4AWR","target":"integrity","payload":{"note":"This paper contains a 40-token span identical to one in arXiv:2605.20136. The two papers share no author per Pith records and neither cites the other. The duplication is the verbatim shared span; the framing makes no claim about intent or directionality.","snippet":"be obtained for all other uses in any current or future media including reprinting republishing this material for advertising or promotional purposes creating new collective works for resale or redistribution to servers or lists or reuse of","arxiv_id":"2607.08288","detector":"shingle_duplication","evidence":{"shared_text":"be obtained for all other uses in any current or future media including reprinting republishing this material for advertising or promotional purposes creating new collective works for resale or redistribution to servers or lists or reuse of any copyrighted component","verdict_class":"incontrovertible","shared_arxiv_id":"2605.20136","shared_token_count":40,"shared_paper_version":1,"shared_offset_in_citing_paper":355},"severity":"advisory","ref_index":null,"audited_at":"2026-07-11T13:54:10.476711Z","event_type":"pith.integrity.v1","detected_doi":null,"detector_url":"https://pith.science/pith-integrity-protocol#shingle_duplication","external_url":null,"finding_type":"prose_duplication","evidence_hash":"d05919aae1a8a7e97159af5f02524c7f72235c19783999ee41002bf9b567ddba","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"0.1.0","detected_arxiv_id":"2605.20136","integrity_event_id":12210,"payload_sha256":"e5ba85b6fff2272974bf6daeadb19191b3129d60c6a7ad385192a0ae6c0626e9","signature_b64":"9GeEV/pgZ9a1zpsstockgwrp55UNOEOLr+vocjxhcN9L7EHwohxcrLlJuJiZS8nINttFtPEi8t++2tpH4DI/DA==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-11T13:56:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nBPmVstZZsWbsy7LTJ8ukZgrP4kDOazJcW04CYbKngGmznrduSboiwsyuqjt13GTzybVa9wBycwQl/xHxcbWDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T08:32:34.668004Z"},"content_sha256":"f628b235561abf5bc43ebbdc9bef16b2bb87a1828f525f586676f052002d5e3d","schema_version":"1.0","event_id":"sha256:f628b235561abf5bc43ebbdc9bef16b2bb87a1828f525f586676f052002d5e3d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5XY6S7JVHCWC34J6MXTO7A4AWR/bundle.json","state_url":"https://pith.science/pith/5XY6S7JVHCWC34J6MXTO7A4AWR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5XY6S7JVHCWC34J6MXTO7A4AWR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T08:32:34Z","links":{"resolver":"https://pith.science/pith/5XY6S7JVHCWC34J6MXTO7A4AWR","bundle":"https://pith.science/pith/5XY6S7JVHCWC34J6MXTO7A4AWR/bundle.json","state":"https://pith.science/pith/5XY6S7JVHCWC34J6MXTO7A4AWR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5XY6S7JVHCWC34J6MXTO7A4AWR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:5XY6S7JVHCWC34J6MXTO7A4AWR","merge_version":"pith-open-graph-merge-v1","event_count":4,"valid_event_count":4,"invalid_event_count":0,"equivocation_count":1,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ffd58ab1d1bad5c7090f942fe9fcda65d52d0714d3a95fec25b80e850916f55b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T09:32:03Z","title_canon_sha256":"11221b3bb6c00475b4496c33b7f986bec4c2f63a4fb1c807c60cd762d8c0ec6b"},"schema_version":"1.0","source":{"id":"2607.08288","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.08288","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"arxiv_version","alias_value":"2607.08288v1","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.08288","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"pith_short_12","alias_value":"5XY6S7JVHCWC","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"pith_short_16","alias_value":"5XY6S7JVHCWC34J6","created_at":"2026-07-10T01:19:31Z"},{"alias_kind":"pith_short_8","alias_value":"5XY6S7JV","created_at":"2026-07-10T01:19:31Z"}],"graph_snapshots":[{"event_id":"sha256:26d7f95b48d5f855c15b5d7fc37b1e72b1449db1ffa72915060ad7bdb683ea0f","target":"graph","created_at":"2026-07-10T01:19:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.08288/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In critical infrastructure, operational technology environments often cannot be actively scanned, and yet active system feedback is needed for risk assessment and compliance. This paper presents a non-invasive, MCP-grounded multi-agent pipeline that converts natural-language system descriptions into source-verified knowledge graph and audit-ready artifacts in the NIST OSCAL format for continuous automated compliance management. The architecture decouples LLM-based reasoning from deterministic knowledge retrieval against authoritative threat-intelligence sources, reducing the risk of fabricated","authors_text":"Lea Roxanne Muth, Marian Margraf","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T09:32:03Z","title":"From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.08288","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7e508d2d5119a529684e790e7cca6f5d8ae9161da95ef24caa44f9ab03714e38","target":"record","created_at":"2026-07-10T01:19:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ffd58ab1d1bad5c7090f942fe9fcda65d52d0714d3a95fec25b80e850916f55b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T09:32:03Z","title_canon_sha256":"11221b3bb6c00475b4496c33b7f986bec4c2f63a4fb1c807c60cd762d8c0ec6b"},"schema_version":"1.0","source":{"id":"2607.08288","kind":"arxiv","version":1}},"canonical_sha256":"edf1e97d3538ac2df13e65e6ef8380b45411d12e17f5618d5963bbc08cee5b98","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"edf1e97d3538ac2df13e65e6ef8380b45411d12e17f5618d5963bbc08cee5b98","first_computed_at":"2026-07-10T01:19:31.924495Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-10T01:19:31.924495Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tqF3hqGIQkWboR2p2la06LOetBYKQam2yvCLJhkTAZUnijmKzWLQbyZzVd9eCYrajcHzYPQyYH13I5G+92iOCw==","signature_status":"signed_v1","signed_at":"2026-07-10T01:19:31.924861Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.08288","source_kind":"arxiv","source_version":1}}},"equivocations":[{"signer_id":"pith.science","event_type":"integrity_finding","target":"integrity","event_ids":["sha256:bcba4bfe34b5049d1b089a134166930634622fd51b1b5c3e7aa3957be7e51762","sha256:f628b235561abf5bc43ebbdc9bef16b2bb87a1828f525f586676f052002d5e3d"]}],"invalid_events":[],"applied_event_ids":["sha256:7e508d2d5119a529684e790e7cca6f5d8ae9161da95ef24caa44f9ab03714e38","sha256:26d7f95b48d5f855c15b5d7fc37b1e72b1449db1ffa72915060ad7bdb683ea0f"],"state_sha256":"6377386f3e46a9b49ca57faf2650fd150a0a91ef997d772c476dc025b6a1a942"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T0HmKovCB2AGScHVM6N6FLa94psrRISAUcdcTFahXKhLdrkx5AkTh5gh2Xt3ALp8l7o1WPSB3jxhYXAqtxnoBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T08:32:34.669594Z","bundle_sha256":"9d65084c164c4fbd085f0041a717a78a2891496076f50ba755cf6c65b6b47e74"}}