{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7DU2KGEJYAEB6A6YESNK547QYS","short_pith_number":"pith:7DU2KGEJ","canonical_record":{"source":{"id":"2403.12671","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-19T12:13:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"acdbceb07ff68f707ad8a3dae56a2ba9b69f4a490981446ab9a746a23e0c12b3","abstract_canon_sha256":"528fc3ffb0e6758fa7c0499096b461d66cda02cd0233b2086fe7523898b5d2ef"},"schema_version":"1.0"},"canonical_sha256":"f8e9a51889c0081f03d8249aaef3f0c4a24ed92f7c897c9a130f5b7a3cd9e289","source":{"kind":"arxiv","id":"2403.12671","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.12671","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"arxiv_version","alias_value":"2403.12671v1","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.12671","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"pith_short_12","alias_value":"7DU2KGEJYAEB","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"pith_short_16","alias_value":"7DU2KGEJYAEB6A6Y","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"pith_short_8","alias_value":"7DU2KGEJ","created_at":"2026-07-05T07:58:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7DU2KGEJYAEB6A6YESNK547QYS","target":"record","payload":{"canonical_record":{"source":{"id":"2403.12671","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-19T12:13:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"acdbceb07ff68f707ad8a3dae56a2ba9b69f4a490981446ab9a746a23e0c12b3","abstract_canon_sha256":"528fc3ffb0e6758fa7c0499096b461d66cda02cd0233b2086fe7523898b5d2ef"},"schema_version":"1.0"},"canonical_sha256":"f8e9a51889c0081f03d8249aaef3f0c4a24ed92f7c897c9a130f5b7a3cd9e289","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:58:05.268137Z","signature_b64":"cSDuFg6Kc4IRGhzSF1j8M7mIoTdYclxzSXVcfR18mv6/QyXHH46V2rN02aVez0yGG9inRRGgK269dswT2uDDBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f8e9a51889c0081f03d8249aaef3f0c4a24ed92f7c897c9a130f5b7a3cd9e289","last_reissued_at":"2026-07-05T07:58:05.267679Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:58:05.267679Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.12671","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:58:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aJnVL9Pr0Jludaz+AYfUYW/Rx4cW4IfM/TG4hH+Wnb4QFQpaxmn9DZKgH7e3fijOR9ZWeVM0oD6frtJ1tZ4UCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:25:42.574164Z"},"content_sha256":"7aae0591586a4465866758e815e045cc277b3da733242902061cf38d27d7a59d","schema_version":"1.0","event_id":"sha256:7aae0591586a4465866758e815e045cc277b3da733242902061cf38d27d7a59d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7DU2KGEJYAEB6A6YESNK547QYS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Enhancing Security of AI-Based Code Synthesis with GitHub Copilot via Cheap and Efficient Prompt-Engineering","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Ale\\v{s} Smr\\v{c}ka, Ivan Homoliak, Jakub Res, Kamil Malinka, Martin Pere\\v{s}\\'ini, Petr Hanacek","submitted_at":"2024-03-19T12:13:33Z","abstract_excerpt":"AI assistants for coding are on the rise. However one of the reasons developers and companies avoid harnessing their full potential is the questionable security of the generated code. This paper first reviews the current state-of-the-art and identifies areas for improvement on this issue. Then, we propose a systematic approach based on prompt-altering methods to achieve better code security of (even proprietary black-box) AI-based code generators such as GitHub Copilot, while minimizing the complexity of the application from the user point-of-view, the computational resources, and operational "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.12671","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.12671/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:58:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XCj9IEC/d2URtGXVM4Us3d+QFwNLAFRQgvWLDKC/AT1N0OM0e4PqmdzY+HM/Bf/rShSyCpHHkKLs2NgCrepfAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:25:42.580714Z"},"content_sha256":"cd3ae556ab9271847d3a4c9e694773355c3d354dd4dde8c5c8ece8e83f8d7f07","schema_version":"1.0","event_id":"sha256:cd3ae556ab9271847d3a4c9e694773355c3d354dd4dde8c5c8ece8e83f8d7f07"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7DU2KGEJYAEB6A6YESNK547QYS/bundle.json","state_url":"https://pith.science/pith/7DU2KGEJYAEB6A6YESNK547QYS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7DU2KGEJYAEB6A6YESNK547QYS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T17:25:42Z","links":{"resolver":"https://pith.science/pith/7DU2KGEJYAEB6A6YESNK547QYS","bundle":"https://pith.science/pith/7DU2KGEJYAEB6A6YESNK547QYS/bundle.json","state":"https://pith.science/pith/7DU2KGEJYAEB6A6YESNK547QYS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7DU2KGEJYAEB6A6YESNK547QYS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7DU2KGEJYAEB6A6YESNK547QYS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"528fc3ffb0e6758fa7c0499096b461d66cda02cd0233b2086fe7523898b5d2ef","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-19T12:13:33Z","title_canon_sha256":"acdbceb07ff68f707ad8a3dae56a2ba9b69f4a490981446ab9a746a23e0c12b3"},"schema_version":"1.0","source":{"id":"2403.12671","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.12671","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"arxiv_version","alias_value":"2403.12671v1","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.12671","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"pith_short_12","alias_value":"7DU2KGEJYAEB","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"pith_short_16","alias_value":"7DU2KGEJYAEB6A6Y","created_at":"2026-07-05T07:58:05Z"},{"alias_kind":"pith_short_8","alias_value":"7DU2KGEJ","created_at":"2026-07-05T07:58:05Z"}],"graph_snapshots":[{"event_id":"sha256:cd3ae556ab9271847d3a4c9e694773355c3d354dd4dde8c5c8ece8e83f8d7f07","target":"graph","created_at":"2026-07-05T07:58:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.12671/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI assistants for coding are on the rise. However one of the reasons developers and companies avoid harnessing their full potential is the questionable security of the generated code. This paper first reviews the current state-of-the-art and identifies areas for improvement on this issue. Then, we propose a systematic approach based on prompt-altering methods to achieve better code security of (even proprietary black-box) AI-based code generators such as GitHub Copilot, while minimizing the complexity of the application from the user point-of-view, the computational resources, and operational ","authors_text":"Ale\\v{s} Smr\\v{c}ka, Ivan Homoliak, Jakub Res, Kamil Malinka, Martin Pere\\v{s}\\'ini, Petr Hanacek","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-19T12:13:33Z","title":"Enhancing Security of AI-Based Code Synthesis with GitHub Copilot via Cheap and Efficient Prompt-Engineering"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.12671","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7aae0591586a4465866758e815e045cc277b3da733242902061cf38d27d7a59d","target":"record","created_at":"2026-07-05T07:58:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"528fc3ffb0e6758fa7c0499096b461d66cda02cd0233b2086fe7523898b5d2ef","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-19T12:13:33Z","title_canon_sha256":"acdbceb07ff68f707ad8a3dae56a2ba9b69f4a490981446ab9a746a23e0c12b3"},"schema_version":"1.0","source":{"id":"2403.12671","kind":"arxiv","version":1}},"canonical_sha256":"f8e9a51889c0081f03d8249aaef3f0c4a24ed92f7c897c9a130f5b7a3cd9e289","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f8e9a51889c0081f03d8249aaef3f0c4a24ed92f7c897c9a130f5b7a3cd9e289","first_computed_at":"2026-07-05T07:58:05.267679Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:58:05.267679Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cSDuFg6Kc4IRGhzSF1j8M7mIoTdYclxzSXVcfR18mv6/QyXHH46V2rN02aVez0yGG9inRRGgK269dswT2uDDBw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:58:05.268137Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.12671","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7aae0591586a4465866758e815e045cc277b3da733242902061cf38d27d7a59d","sha256:cd3ae556ab9271847d3a4c9e694773355c3d354dd4dde8c5c8ece8e83f8d7f07"],"state_sha256":"45dfa74b36e9cb9b0d537b87bc3327718257158b769dc75be71f4b7ff2ddf49f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JEEvOKBc0qYBVOs9h8CAt1OfppM+6XFOVc8DS8/JFTGPvJc8KZ/xZ+1i2V06kZ+rLYEmp9Hy2zxtyYcFPsklBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T17:25:42.591433Z","bundle_sha256":"1a895bebffcd25bd68a537c292774f14efbbab9693f2b0d11ce4ef416810a2c5"}}