{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:AGB2FBCTT2YMMIQYDNHUIFN6IE","short_pith_number":"pith:AGB2FBCT","canonical_record":{"source":{"id":"2108.09293","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-20T17:30:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"336cbd064358023f335ff04b9bbc2869c1d39306b1f7fdb405f68d8a0cedf914","abstract_canon_sha256":"a097fcf8221a26b2a6b90882f8196293c5377dab9fc4873c53e60886cf91d140"},"schema_version":"1.0"},"canonical_sha256":"0183a284539eb0c622181b4f4415be4103a244237799e40303d686ef63daabb6","source":{"kind":"arxiv","id":"2108.09293","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.09293","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"arxiv_version","alias_value":"2108.09293v3","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.09293","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"pith_short_12","alias_value":"AGB2FBCTT2YM","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"pith_short_16","alias_value":"AGB2FBCTT2YMMIQY","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"pith_short_8","alias_value":"AGB2FBCT","created_at":"2026-07-05T03:41:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:AGB2FBCTT2YMMIQYDNHUIFN6IE","target":"record","payload":{"canonical_record":{"source":{"id":"2108.09293","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-20T17:30:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"336cbd064358023f335ff04b9bbc2869c1d39306b1f7fdb405f68d8a0cedf914","abstract_canon_sha256":"a097fcf8221a26b2a6b90882f8196293c5377dab9fc4873c53e60886cf91d140"},"schema_version":"1.0"},"canonical_sha256":"0183a284539eb0c622181b4f4415be4103a244237799e40303d686ef63daabb6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:41:26.591755Z","signature_b64":"NQOmL9f4xk83ITbGn/gT0UYh7FjPniwi/mmmn67UIZ3b5Fs/kteHSmJ+/1jIDwOpQHrHpIz/qFDTCugEbfCwCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0183a284539eb0c622181b4f4415be4103a244237799e40303d686ef63daabb6","last_reissued_at":"2026-07-05T03:41:26.591355Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:41:26.591355Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.09293","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:41:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iW9PBbssYOVRfwgnlAtyinytBzW8QhSIa5DvfdEn9V8ZDnPgve44n73RPmzwtuC6zihXWWh/vShu2Wq74qS1AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:29:30.531275Z"},"content_sha256":"a8ca99c82e463c228b65decbec37b0a3ad55005b2b5e368d06069d72945c5a70","schema_version":"1.0","event_id":"sha256:a8ca99c82e463c228b65decbec37b0a3ad55005b2b5e368d06069d72945c5a70"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:AGB2FBCTT2YMMIQYDNHUIFN6IE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Baleegh Ahmad, Benjamin Tan, Brendan Dolan-Gavitt, Hammond Pearce, Ramesh Karri","submitted_at":"2021-08-20T17:30:33Z","abstract_excerpt":"There is burgeoning interest in designing AI-based systems to assist humans in designing computing systems, including tools that automatically generate computer code. The most notable of these comes in the form of the first self-described `AI pair programmer', GitHub Copilot, a language model trained over open-source GitHub code. However, code often contains bugs - and so, given the vast quantity of unvetted code that Copilot has processed, it is certain that the language model will have learned from exploitable, buggy code. This raises concerns on the security of Copilot's code contributions."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.09293","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.09293/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:41:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tJCjeutrPwfEHOY2bPtB/D3HzyQXz8bxJuktzDWhxxH8z8Gr9+pbHTAN9QBFtpMTE14sTf40PdPKXJ9uLRrvCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:29:30.531761Z"},"content_sha256":"e75951dc86178084e9863714f5ba2c7cfc0999c48b7debd956b06741fd19956e","schema_version":"1.0","event_id":"sha256:e75951dc86178084e9863714f5ba2c7cfc0999c48b7debd956b06741fd19956e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AGB2FBCTT2YMMIQYDNHUIFN6IE/bundle.json","state_url":"https://pith.science/pith/AGB2FBCTT2YMMIQYDNHUIFN6IE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AGB2FBCTT2YMMIQYDNHUIFN6IE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T20:29:30Z","links":{"resolver":"https://pith.science/pith/AGB2FBCTT2YMMIQYDNHUIFN6IE","bundle":"https://pith.science/pith/AGB2FBCTT2YMMIQYDNHUIFN6IE/bundle.json","state":"https://pith.science/pith/AGB2FBCTT2YMMIQYDNHUIFN6IE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AGB2FBCTT2YMMIQYDNHUIFN6IE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:AGB2FBCTT2YMMIQYDNHUIFN6IE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a097fcf8221a26b2a6b90882f8196293c5377dab9fc4873c53e60886cf91d140","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-20T17:30:33Z","title_canon_sha256":"336cbd064358023f335ff04b9bbc2869c1d39306b1f7fdb405f68d8a0cedf914"},"schema_version":"1.0","source":{"id":"2108.09293","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.09293","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"arxiv_version","alias_value":"2108.09293v3","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.09293","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"pith_short_12","alias_value":"AGB2FBCTT2YM","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"pith_short_16","alias_value":"AGB2FBCTT2YMMIQY","created_at":"2026-07-05T03:41:26Z"},{"alias_kind":"pith_short_8","alias_value":"AGB2FBCT","created_at":"2026-07-05T03:41:26Z"}],"graph_snapshots":[{"event_id":"sha256:e75951dc86178084e9863714f5ba2c7cfc0999c48b7debd956b06741fd19956e","target":"graph","created_at":"2026-07-05T03:41:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.09293/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"There is burgeoning interest in designing AI-based systems to assist humans in designing computing systems, including tools that automatically generate computer code. The most notable of these comes in the form of the first self-described `AI pair programmer', GitHub Copilot, a language model trained over open-source GitHub code. However, code often contains bugs - and so, given the vast quantity of unvetted code that Copilot has processed, it is certain that the language model will have learned from exploitable, buggy code. This raises concerns on the security of Copilot's code contributions.","authors_text":"Baleegh Ahmad, Benjamin Tan, Brendan Dolan-Gavitt, Hammond Pearce, Ramesh Karri","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-20T17:30:33Z","title":"Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.09293","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a8ca99c82e463c228b65decbec37b0a3ad55005b2b5e368d06069d72945c5a70","target":"record","created_at":"2026-07-05T03:41:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a097fcf8221a26b2a6b90882f8196293c5377dab9fc4873c53e60886cf91d140","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-20T17:30:33Z","title_canon_sha256":"336cbd064358023f335ff04b9bbc2869c1d39306b1f7fdb405f68d8a0cedf914"},"schema_version":"1.0","source":{"id":"2108.09293","kind":"arxiv","version":3}},"canonical_sha256":"0183a284539eb0c622181b4f4415be4103a244237799e40303d686ef63daabb6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0183a284539eb0c622181b4f4415be4103a244237799e40303d686ef63daabb6","first_computed_at":"2026-07-05T03:41:26.591355Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:41:26.591355Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NQOmL9f4xk83ITbGn/gT0UYh7FjPniwi/mmmn67UIZ3b5Fs/kteHSmJ+/1jIDwOpQHrHpIz/qFDTCugEbfCwCA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:41:26.591755Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.09293","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a8ca99c82e463c228b65decbec37b0a3ad55005b2b5e368d06069d72945c5a70","sha256:e75951dc86178084e9863714f5ba2c7cfc0999c48b7debd956b06741fd19956e"],"state_sha256":"6a7e76bd06f0b3096971492cfe6a691e8a792edd1c0d00ff2b03b3f63383e036"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vXd3PehqFguJyzMmZg2kOt+wxfiResOwdBogNc2rNOOyDn1OGccYmyKbvcV0cqICB5b4Q7927TQhX0GaAfY8Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T20:29:30.537091Z","bundle_sha256":"2d36bd17d167d223f9a05b5b1cce70afe684fca1deaecf80743224af2ac19184"}}