{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:7G326TAOLG6BXKYC2CVQ6L5MT5","short_pith_number":"pith:7G326TAO","canonical_record":{"source":{"id":"2605.20874","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-05-20T08:13:16Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"13807f48813e6fc04770467450c6f98977fe94c7cfac12b386220d8e46e1e727","abstract_canon_sha256":"aa838d7f44adde668d13f697f13e9e714c071c8e6ce6188a9fa89a43f2abdc6d"},"schema_version":"1.0"},"canonical_sha256":"f9b7af4c0e59bc1bab02d0ab0f2fac9f6f4fb2fad5b9a88b1a1b5273ef2ac7ee","source":{"kind":"arxiv","id":"2605.20874","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.20874","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"arxiv_version","alias_value":"2605.20874v1","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.20874","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"pith_short_12","alias_value":"7G326TAOLG6B","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"pith_short_16","alias_value":"7G326TAOLG6BXKYC","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"pith_short_8","alias_value":"7G326TAO","created_at":"2026-05-21T01:05:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:7G326TAOLG6BXKYC2CVQ6L5MT5","target":"record","payload":{"canonical_record":{"source":{"id":"2605.20874","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-05-20T08:13:16Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"13807f48813e6fc04770467450c6f98977fe94c7cfac12b386220d8e46e1e727","abstract_canon_sha256":"aa838d7f44adde668d13f697f13e9e714c071c8e6ce6188a9fa89a43f2abdc6d"},"schema_version":"1.0"},"canonical_sha256":"f9b7af4c0e59bc1bab02d0ab0f2fac9f6f4fb2fad5b9a88b1a1b5273ef2ac7ee","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-21T01:05:25.812696Z","signature_b64":"5ciSf7R7kIqPASaYnYik0FQd9VXSXdGi/eVjdrtqK0KP2LBiysQng8MKAHnG5X+Uaw7KTtqzdtZk1n+0uD+JDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f9b7af4c0e59bc1bab02d0ab0f2fac9f6f4fb2fad5b9a88b1a1b5273ef2ac7ee","last_reissued_at":"2026-05-21T01:05:25.811904Z","signature_status":"signed_v1","first_computed_at":"2026-05-21T01:05:25.811904Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.20874","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-21T01:05:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f/NiUVioKXTfeKpqdTsWdbGebqf98808CWqP8EC7vkse/dXHsaEOP0hg1XH+qx701U5SjAtHdJkE/VjoGHjdDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-23T02:04:19.110477Z"},"content_sha256":"fc05bd1a8ce08ecb508c593cb941536e7dabe0ec4ec714a17ffd3b2844704945","schema_version":"1.0","event_id":"sha256:fc05bd1a8ce08ecb508c593cb941536e7dabe0ec4ec714a17ffd3b2844704945"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:7G326TAOLG6BXKYC2CVQ6L5MT5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Governance by Construction for Generalist Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.AI","authors_text":"Alon Oved, Avi Yaeli, Harold Ship, Ido Levy, Iftach Shoham, Nir Mashkif, Offer Akrabi, Sami Marreed, Segev Shlomov, Sergey Zeltyn","submitted_at":"2026-05-20T08:13:16Z","abstract_excerpt":"Enterprise agents are increasingly expected to operate autonomously across tools and interfaces, yet production deployments require governance by construction. Systems must specify which actions are allowed, when human oversight is required, and what information may be exposed, without rebuilding the agent for each domain. This demo presents CUGA's policy system, a modular policy-as-code layer that composes with a generalist LLM agent to deliver predictable, auditable, and compliance-aware behavior in compound workflows without model fine-tuning. We present a runtime governance architecture th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.20874","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.20874/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-21T01:05:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VilwqeiRoySLLlq2hfEpovFeM/NQ/crPDhWYnUzy7IlGFC88Nd8mSq3HmVdFsHYUGayAv4ImCDTSbSItc8LoBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-23T02:04:19.110909Z"},"content_sha256":"7b724fbf9365309422d97b95180de5e19bba69f56ef0ea3268426bed2a623654","schema_version":"1.0","event_id":"sha256:7b724fbf9365309422d97b95180de5e19bba69f56ef0ea3268426bed2a623654"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7G326TAOLG6BXKYC2CVQ6L5MT5/bundle.json","state_url":"https://pith.science/pith/7G326TAOLG6BXKYC2CVQ6L5MT5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7G326TAOLG6BXKYC2CVQ6L5MT5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-23T02:04:19Z","links":{"resolver":"https://pith.science/pith/7G326TAOLG6BXKYC2CVQ6L5MT5","bundle":"https://pith.science/pith/7G326TAOLG6BXKYC2CVQ6L5MT5/bundle.json","state":"https://pith.science/pith/7G326TAOLG6BXKYC2CVQ6L5MT5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7G326TAOLG6BXKYC2CVQ6L5MT5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:7G326TAOLG6BXKYC2CVQ6L5MT5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aa838d7f44adde668d13f697f13e9e714c071c8e6ce6188a9fa89a43f2abdc6d","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-05-20T08:13:16Z","title_canon_sha256":"13807f48813e6fc04770467450c6f98977fe94c7cfac12b386220d8e46e1e727"},"schema_version":"1.0","source":{"id":"2605.20874","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.20874","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"arxiv_version","alias_value":"2605.20874v1","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.20874","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"pith_short_12","alias_value":"7G326TAOLG6B","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"pith_short_16","alias_value":"7G326TAOLG6BXKYC","created_at":"2026-05-21T01:05:25Z"},{"alias_kind":"pith_short_8","alias_value":"7G326TAO","created_at":"2026-05-21T01:05:25Z"}],"graph_snapshots":[{"event_id":"sha256:7b724fbf9365309422d97b95180de5e19bba69f56ef0ea3268426bed2a623654","target":"graph","created_at":"2026-05-21T01:05:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.20874/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Enterprise agents are increasingly expected to operate autonomously across tools and interfaces, yet production deployments require governance by construction. Systems must specify which actions are allowed, when human oversight is required, and what information may be exposed, without rebuilding the agent for each domain. This demo presents CUGA's policy system, a modular policy-as-code layer that composes with a generalist LLM agent to deliver predictable, auditable, and compliance-aware behavior in compound workflows without model fine-tuning. We present a runtime governance architecture th","authors_text":"Alon Oved, Avi Yaeli, Harold Ship, Ido Levy, Iftach Shoham, Nir Mashkif, Offer Akrabi, Sami Marreed, Segev Shlomov, Sergey Zeltyn","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-05-20T08:13:16Z","title":"Governance by Construction for Generalist Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.20874","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fc05bd1a8ce08ecb508c593cb941536e7dabe0ec4ec714a17ffd3b2844704945","target":"record","created_at":"2026-05-21T01:05:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aa838d7f44adde668d13f697f13e9e714c071c8e6ce6188a9fa89a43f2abdc6d","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-05-20T08:13:16Z","title_canon_sha256":"13807f48813e6fc04770467450c6f98977fe94c7cfac12b386220d8e46e1e727"},"schema_version":"1.0","source":{"id":"2605.20874","kind":"arxiv","version":1}},"canonical_sha256":"f9b7af4c0e59bc1bab02d0ab0f2fac9f6f4fb2fad5b9a88b1a1b5273ef2ac7ee","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f9b7af4c0e59bc1bab02d0ab0f2fac9f6f4fb2fad5b9a88b1a1b5273ef2ac7ee","first_computed_at":"2026-05-21T01:05:25.811904Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-21T01:05:25.811904Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5ciSf7R7kIqPASaYnYik0FQd9VXSXdGi/eVjdrtqK0KP2LBiysQng8MKAHnG5X+Uaw7KTtqzdtZk1n+0uD+JDg==","signature_status":"signed_v1","signed_at":"2026-05-21T01:05:25.812696Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.20874","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fc05bd1a8ce08ecb508c593cb941536e7dabe0ec4ec714a17ffd3b2844704945","sha256:7b724fbf9365309422d97b95180de5e19bba69f56ef0ea3268426bed2a623654"],"state_sha256":"d5af7f9aabb1a1766f9ea3667eba501f453adbea193df02879bdf24db630368f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kr9tSiYtDONxe0yambdlzoqw6RkVnASUBaoTh81rh864G64fDv96PbxARQG6Y3iAAHiuOp0gDc7jCqPxt5SSDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-23T02:04:19.113176Z","bundle_sha256":"ec9e7341fc07d65ae737a58d3404fe469f21fc2563a178b7823a584dc748d168"}}