{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:CIHSYREYA42HDU23UST4B663LA","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6b085d69a12d470725609cce75e3de6b58291a7b916686869c0706076bd9de38","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2026-05-19T21:12:45Z","title_canon_sha256":"7ede8c5036974381bb3d76f9951610622243fa69b96803d0636658c7d8fc542b"},"schema_version":"1.0","source":{"id":"2605.21532","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.21532","created_at":"2026-05-22T00:02:27Z"},{"alias_kind":"arxiv_version","alias_value":"2605.21532v1","created_at":"2026-05-22T00:02:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.21532","created_at":"2026-05-22T00:02:27Z"},{"alias_kind":"pith_short_12","alias_value":"CIHSYREYA42H","created_at":"2026-05-22T00:02:27Z"},{"alias_kind":"pith_short_16","alias_value":"CIHSYREYA42HDU23","created_at":"2026-05-22T00:02:27Z"},{"alias_kind":"pith_short_8","alias_value":"CIHSYREY","created_at":"2026-05-22T00:02:27Z"}],"graph_snapshots":[{"event_id":"sha256:73744d7d7e21c513d960e900bdad19d61ea44de6baa63d62cb9c88e8b489bf30","target":"graph","created_at":"2026-05-22T00:02:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.21532/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Code contracts provide a robust way to specify functional requirements of safety-critical software in embedded systems. For example, the ANSI/ISO C Specification Language (ACSL) can be used to specify the functional behavior of C code that is then formally verified by the Frama-C framework's Wp plugin. However, non-functional requirements, such as restrictions on control flow and data flow, are also important for embedded systems safety. Untrusted code developed by subcontractors, junior developers, or generated by large language models, can be verified by Wp but may nevertheless call unsafe f","authors_text":"Jesper Amilon, Karl Palmskog, Mattias Nyberg, Merlijn Sevenhuijsen","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2026-05-19T21:12:45Z","title":"Contract Based Verification of Non-functional Requirements for Embedded Automotive C Code"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.21532","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:006f37284df265e78e7ce6954dafdedad35c12571c38ba797158b6309342bc4a","target":"record","created_at":"2026-05-22T00:02:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6b085d69a12d470725609cce75e3de6b58291a7b916686869c0706076bd9de38","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2026-05-19T21:12:45Z","title_canon_sha256":"7ede8c5036974381bb3d76f9951610622243fa69b96803d0636658c7d8fc542b"},"schema_version":"1.0","source":{"id":"2605.21532","kind":"arxiv","version":1}},"canonical_sha256":"120f2c4498073471d35ba4a7c0fbdb580fc63a30f63a7d91e2248baf654664f2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"120f2c4498073471d35ba4a7c0fbdb580fc63a30f63a7d91e2248baf654664f2","first_computed_at":"2026-05-22T00:02:27.796565Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-22T00:02:27.796565Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7UuwMWh6OydL0vq4UpEzaMg20qHB79qX2KOyGd2VQzzcCu66AsbvwkZYPkVsCKe/3/NvBCsQJfvOXFkckLaBDg==","signature_status":"signed_v1","signed_at":"2026-05-22T00:02:27.797049Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.21532","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:006f37284df265e78e7ce6954dafdedad35c12571c38ba797158b6309342bc4a","sha256:73744d7d7e21c513d960e900bdad19d61ea44de6baa63d62cb9c88e8b489bf30","sha256:ee4530d422ac3753054bdced5907261c56a496e8b9e4e642c7b47b82fe5d005e"],"state_sha256":"faf675d550b6ca4c33605b8b2f65e379ebad863b873c90af354d81f11dafb95b"}