{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:BB26EG75NJ4JR2ARV4X33BPG4Q","short_pith_number":"pith:BB26EG75","canonical_record":{"source":{"id":"2608.01639","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T03:19:24Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"ae75c0f53fd4dff444567044337eef58ce9b616698468d06e3cac438f01a48c5","abstract_canon_sha256":"5c8c52bb892d2782dc2e5c9ccb9f0cf9768f6cdfa3d02f71d8d58125861c7235"},"schema_version":"1.0"},"canonical_sha256":"0875e21bfd6a7898e811af2fbd85e6e406552dad5865d58c76340a6fa928c21d","source":{"kind":"arxiv","id":"2608.01639","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01639","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01639v1","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01639","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"pith_short_12","alias_value":"BB26EG75NJ4J","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"pith_short_16","alias_value":"BB26EG75NJ4JR2AR","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"pith_short_8","alias_value":"BB26EG75","created_at":"2026-08-04T02:06:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:BB26EG75NJ4JR2ARV4X33BPG4Q","target":"record","payload":{"canonical_record":{"source":{"id":"2608.01639","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T03:19:24Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"ae75c0f53fd4dff444567044337eef58ce9b616698468d06e3cac438f01a48c5","abstract_canon_sha256":"5c8c52bb892d2782dc2e5c9ccb9f0cf9768f6cdfa3d02f71d8d58125861c7235"},"schema_version":"1.0"},"canonical_sha256":"0875e21bfd6a7898e811af2fbd85e6e406552dad5865d58c76340a6fa928c21d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T02:06:18.852868Z","signature_b64":"cK/DZ8WBwUx7vuR6A37oLPyNkzuag/DaXNmuAFqoMwLMSTzxzBAXvAUrObCLF5GiGEUElXrfVrnwAgaH/StACA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0875e21bfd6a7898e811af2fbd85e6e406552dad5865d58c76340a6fa928c21d","last_reissued_at":"2026-08-04T02:06:18.851326Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T02:06:18.851326Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.01639","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:06:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ezvyaqy28y4Dbe7AkTEEJO2szhDUBV7bsKeNf8FHUNexNSJMsbUTQQrhfKJhH17wXp+HYM4x9F9alHR4SOjGAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T16:08:10.656454Z"},"content_sha256":"bf5522c8dfb2f583d7b9aab89a5cb2414d7f727636a5b030fd8aec971980ea20","schema_version":"1.0","event_id":"sha256:bf5522c8dfb2f583d7b9aab89a5cb2414d7f727636a5b030fd8aec971980ea20"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:BB26EG75NJ4JR2ARV4X33BPG4Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mutate to Bypass: Autonomous Endpoint Evasion via Knowledge-Driven Multi-Agent Orchestration","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Feng Dong, Haoyu Wang, Jun Chen, Qingyun Du, Weifeng Yuan, Wenbo Guo, Yang Liu","submitted_at":"2026-08-03T03:19:24Z","abstract_excerpt":"Public reports and open-source resources expose many EDR evasion techniques, but it remains unclear whether commercial Endpoint Detection and Response (EDR) systems can withstand these documented attacks. Evaluating them requires turning fragmented security knowledge into working payloads and refining those payloads from opaque alerts, tasks that existing automation does not address. We present AutoBypass, a knowledge-grounded, closed-loop multi-agent framework for automated EDR resilience assessment. A Detection-Aware Knowledge Base structures threat intelligence, expert analyses, and open-so"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01639","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.01639/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:06:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"57A0WtSqHwRgrOvbZb7vIG5P9QI5Wn2oN41CP1gROeh3AyfyyGB92sq6q9tb7bV2/YWMo26FqtzQp0P7ogOWCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T16:08:10.656969Z"},"content_sha256":"ca021fd91268c5576442e0929f898c4c4003b083482a645a8abdcf3e7257f3b1","schema_version":"1.0","event_id":"sha256:ca021fd91268c5576442e0929f898c4c4003b083482a645a8abdcf3e7257f3b1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BB26EG75NJ4JR2ARV4X33BPG4Q/bundle.json","state_url":"https://pith.science/pith/BB26EG75NJ4JR2ARV4X33BPG4Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BB26EG75NJ4JR2ARV4X33BPG4Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T16:08:10Z","links":{"resolver":"https://pith.science/pith/BB26EG75NJ4JR2ARV4X33BPG4Q","bundle":"https://pith.science/pith/BB26EG75NJ4JR2ARV4X33BPG4Q/bundle.json","state":"https://pith.science/pith/BB26EG75NJ4JR2ARV4X33BPG4Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BB26EG75NJ4JR2ARV4X33BPG4Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:BB26EG75NJ4JR2ARV4X33BPG4Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c8c52bb892d2782dc2e5c9ccb9f0cf9768f6cdfa3d02f71d8d58125861c7235","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T03:19:24Z","title_canon_sha256":"ae75c0f53fd4dff444567044337eef58ce9b616698468d06e3cac438f01a48c5"},"schema_version":"1.0","source":{"id":"2608.01639","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01639","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01639v1","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01639","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"pith_short_12","alias_value":"BB26EG75NJ4J","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"pith_short_16","alias_value":"BB26EG75NJ4JR2AR","created_at":"2026-08-04T02:06:18Z"},{"alias_kind":"pith_short_8","alias_value":"BB26EG75","created_at":"2026-08-04T02:06:18Z"}],"graph_snapshots":[{"event_id":"sha256:ca021fd91268c5576442e0929f898c4c4003b083482a645a8abdcf3e7257f3b1","target":"graph","created_at":"2026-08-04T02:06:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.01639/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Public reports and open-source resources expose many EDR evasion techniques, but it remains unclear whether commercial Endpoint Detection and Response (EDR) systems can withstand these documented attacks. Evaluating them requires turning fragmented security knowledge into working payloads and refining those payloads from opaque alerts, tasks that existing automation does not address. We present AutoBypass, a knowledge-grounded, closed-loop multi-agent framework for automated EDR resilience assessment. A Detection-Aware Knowledge Base structures threat intelligence, expert analyses, and open-so","authors_text":"Feng Dong, Haoyu Wang, Jun Chen, Qingyun Du, Weifeng Yuan, Wenbo Guo, Yang Liu","cross_cats":["cs.OS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T03:19:24Z","title":"Mutate to Bypass: Autonomous Endpoint Evasion via Knowledge-Driven Multi-Agent Orchestration"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01639","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bf5522c8dfb2f583d7b9aab89a5cb2414d7f727636a5b030fd8aec971980ea20","target":"record","created_at":"2026-08-04T02:06:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c8c52bb892d2782dc2e5c9ccb9f0cf9768f6cdfa3d02f71d8d58125861c7235","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T03:19:24Z","title_canon_sha256":"ae75c0f53fd4dff444567044337eef58ce9b616698468d06e3cac438f01a48c5"},"schema_version":"1.0","source":{"id":"2608.01639","kind":"arxiv","version":1}},"canonical_sha256":"0875e21bfd6a7898e811af2fbd85e6e406552dad5865d58c76340a6fa928c21d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0875e21bfd6a7898e811af2fbd85e6e406552dad5865d58c76340a6fa928c21d","first_computed_at":"2026-08-04T02:06:18.851326Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T02:06:18.851326Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cK/DZ8WBwUx7vuR6A37oLPyNkzuag/DaXNmuAFqoMwLMSTzxzBAXvAUrObCLF5GiGEUElXrfVrnwAgaH/StACA==","signature_status":"signed_v1","signed_at":"2026-08-04T02:06:18.852868Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.01639","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bf5522c8dfb2f583d7b9aab89a5cb2414d7f727636a5b030fd8aec971980ea20","sha256:ca021fd91268c5576442e0929f898c4c4003b083482a645a8abdcf3e7257f3b1"],"state_sha256":"ee6f153efa124035064f4980bb01c0461f35d89849a713964ef9b6bdd3ea2f80"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2kyezuhFUxYj1sYbITnTd9/Kr5hL5zJSQO0Z/iHeEyi5eD2FxRKiwlVdJsyDS95Ig1HcpHRXyAqXoSoH0QeqAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T16:08:10.662413Z","bundle_sha256":"f3198bd114eb5887bda974b9dd682f34eae4094c6bd4531dc72be099a4658530"}}