{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:6HRB2ER3FU4MNXDLOVUVFGYUFP","short_pith_number":"pith:6HRB2ER3","canonical_record":{"source":{"id":"2504.04699","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-04-07T03:04:16Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"1c27f7653b817f5a9f713ae25ee39b846a928cf1e975ae399704f3b8b143c5e4","abstract_canon_sha256":"b813e50ee865db6c4c5545b8a3a48b7cce6dffe0ccdc80ed17a694cfa18e0ad6"},"schema_version":"1.0"},"canonical_sha256":"f1e21d123b2d38c6dc6b7569529b142bcef47afb20e5daabcf78e643f74265fc","source":{"kind":"arxiv","id":"2504.04699","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.04699","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"arxiv_version","alias_value":"2504.04699v2","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.04699","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"pith_short_12","alias_value":"6HRB2ER3FU4M","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"pith_short_16","alias_value":"6HRB2ER3FU4MNXDL","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"pith_short_8","alias_value":"6HRB2ER3","created_at":"2026-07-05T11:49:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:6HRB2ER3FU4MNXDLOVUVFGYUFP","target":"record","payload":{"canonical_record":{"source":{"id":"2504.04699","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-04-07T03:04:16Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"1c27f7653b817f5a9f713ae25ee39b846a928cf1e975ae399704f3b8b143c5e4","abstract_canon_sha256":"b813e50ee865db6c4c5545b8a3a48b7cce6dffe0ccdc80ed17a694cfa18e0ad6"},"schema_version":"1.0"},"canonical_sha256":"f1e21d123b2d38c6dc6b7569529b142bcef47afb20e5daabcf78e643f74265fc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:49:52.924334Z","signature_b64":"6Z791mS9GRmtpIbfmnDFAbjZ5q1/Na68TKcjD1eSKr0q9V839lrWxJw3OC/k3vX/Uq2kVOeZeldca5bb8jIJAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1e21d123b2d38c6dc6b7569529b142bcef47afb20e5daabcf78e643f74265fc","last_reissued_at":"2026-07-05T11:49:52.923741Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:49:52.923741Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.04699","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:49:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5+cklfcwNiukA4OXc24fhKlpe1G6BQ/WZ8k0jC2nsL5HXIGiC3qQhN+tf31mxDNYO1M25PEHIcZV2b8vzsmHAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:09:22.798915Z"},"content_sha256":"97d49de0d89e001cbc7b1b1a3ea65fe6849698e567536ca2f86430faf776807e","schema_version":"1.0","event_id":"sha256:97d49de0d89e001cbc7b1b1a3ea65fe6849698e567536ca2f86430faf776807e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:6HRB2ER3FU4MNXDLOVUVFGYUFP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"R2Vul: Learning to Reason about Software Vulnerabilities with Reinforcement Learning and Structured Reasoning Distillation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.SE","authors_text":"Ang Han Wei, Chengran Yang, David Lo, Eng Lieh Ouh, Frank Liauw, Huihui Huang, Huu Hung Nguyen, Junkai Chen, Lwin Khin Shar, Martin Weyssow, Ratnadira Widyasari, Tan Bui, Ting Zhang, Yan Naing Tun, Yikun Li","submitted_at":"2025-04-07T03:04:16Z","abstract_excerpt":"Large language models (LLMs) have shown promising performance in software vulnerability detection, yet their reasoning capabilities remain unreliable. We propose R2Vul, a method that combines reinforcement learning from AI feedback (RLAIF) and structured reasoning distillation to teach small code LLMs to detect vulnerabilities while generating security-aware explanations. Unlike prior chain-of-thought and instruction tuning approaches, R2Vul rewards well-founded over deceptively plausible vulnerability explanations through RLAIF, which results in more precise detection and high-quality reasoni"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.04699","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.04699/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:49:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+i2R5NW09t+byZ4DJL0/f5Q3rwmyObXdq0BgbdHXLYmtmmMyBf3rQXOD0PQFjnmmuPWen8IeGUJ3r2N4SYYDBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:09:22.799291Z"},"content_sha256":"d6432f188747695bea99a8bcc1c6b15186bed803e2ddd19f4ca0e7a6d001fc27","schema_version":"1.0","event_id":"sha256:d6432f188747695bea99a8bcc1c6b15186bed803e2ddd19f4ca0e7a6d001fc27"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6HRB2ER3FU4MNXDLOVUVFGYUFP/bundle.json","state_url":"https://pith.science/pith/6HRB2ER3FU4MNXDLOVUVFGYUFP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6HRB2ER3FU4MNXDLOVUVFGYUFP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T10:09:22Z","links":{"resolver":"https://pith.science/pith/6HRB2ER3FU4MNXDLOVUVFGYUFP","bundle":"https://pith.science/pith/6HRB2ER3FU4MNXDLOVUVFGYUFP/bundle.json","state":"https://pith.science/pith/6HRB2ER3FU4MNXDLOVUVFGYUFP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6HRB2ER3FU4MNXDLOVUVFGYUFP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:6HRB2ER3FU4MNXDLOVUVFGYUFP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b813e50ee865db6c4c5545b8a3a48b7cce6dffe0ccdc80ed17a694cfa18e0ad6","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-04-07T03:04:16Z","title_canon_sha256":"1c27f7653b817f5a9f713ae25ee39b846a928cf1e975ae399704f3b8b143c5e4"},"schema_version":"1.0","source":{"id":"2504.04699","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.04699","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"arxiv_version","alias_value":"2504.04699v2","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.04699","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"pith_short_12","alias_value":"6HRB2ER3FU4M","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"pith_short_16","alias_value":"6HRB2ER3FU4MNXDL","created_at":"2026-07-05T11:49:52Z"},{"alias_kind":"pith_short_8","alias_value":"6HRB2ER3","created_at":"2026-07-05T11:49:52Z"}],"graph_snapshots":[{"event_id":"sha256:d6432f188747695bea99a8bcc1c6b15186bed803e2ddd19f4ca0e7a6d001fc27","target":"graph","created_at":"2026-07-05T11:49:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.04699/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have shown promising performance in software vulnerability detection, yet their reasoning capabilities remain unreliable. We propose R2Vul, a method that combines reinforcement learning from AI feedback (RLAIF) and structured reasoning distillation to teach small code LLMs to detect vulnerabilities while generating security-aware explanations. Unlike prior chain-of-thought and instruction tuning approaches, R2Vul rewards well-founded over deceptively plausible vulnerability explanations through RLAIF, which results in more precise detection and high-quality reasoni","authors_text":"Ang Han Wei, Chengran Yang, David Lo, Eng Lieh Ouh, Frank Liauw, Huihui Huang, Huu Hung Nguyen, Junkai Chen, Lwin Khin Shar, Martin Weyssow, Ratnadira Widyasari, Tan Bui, Ting Zhang, Yan Naing Tun, Yikun Li","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-04-07T03:04:16Z","title":"R2Vul: Learning to Reason about Software Vulnerabilities with Reinforcement Learning and Structured Reasoning Distillation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.04699","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:97d49de0d89e001cbc7b1b1a3ea65fe6849698e567536ca2f86430faf776807e","target":"record","created_at":"2026-07-05T11:49:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b813e50ee865db6c4c5545b8a3a48b7cce6dffe0ccdc80ed17a694cfa18e0ad6","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-04-07T03:04:16Z","title_canon_sha256":"1c27f7653b817f5a9f713ae25ee39b846a928cf1e975ae399704f3b8b143c5e4"},"schema_version":"1.0","source":{"id":"2504.04699","kind":"arxiv","version":2}},"canonical_sha256":"f1e21d123b2d38c6dc6b7569529b142bcef47afb20e5daabcf78e643f74265fc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1e21d123b2d38c6dc6b7569529b142bcef47afb20e5daabcf78e643f74265fc","first_computed_at":"2026-07-05T11:49:52.923741Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:49:52.923741Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6Z791mS9GRmtpIbfmnDFAbjZ5q1/Na68TKcjD1eSKr0q9V839lrWxJw3OC/k3vX/Uq2kVOeZeldca5bb8jIJAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:49:52.924334Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.04699","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:97d49de0d89e001cbc7b1b1a3ea65fe6849698e567536ca2f86430faf776807e","sha256:d6432f188747695bea99a8bcc1c6b15186bed803e2ddd19f4ca0e7a6d001fc27"],"state_sha256":"c984b155c9ca510e01a480d1709f7e8ac1a2a643d84fbbfba2a5cf7233f93366"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zxlgnlIFqWkfrCaxv5GuVZpM2c/v/vZOy+kifXN6IgrqzDwUgODpvjnaB1s/Rc6ygObO5BX+b4tMZDrDUhqnDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T10:09:22.801294Z","bundle_sha256":"89c30021fa79bbf85cbe84fb2cbea2977566e4aaa673ffe5453324dd1a6fbdc3"}}