{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CK4X3352E6XSVRGXLOYJZCSQPL","short_pith_number":"pith:CK4X3352","canonical_record":{"source":{"id":"2512.04259","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-12-03T20:54:24Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"74d061ec566a2d087e0b87a76c18ae81bb3ca33ee21baf44c8a7640e9a0ec93f","abstract_canon_sha256":"bfccad2ac15d4ee851cd148e0d67a797b3ecf9217b7007d8ec251e4fedf2d02e"},"schema_version":"1.0"},"canonical_sha256":"12b97defba27af2ac4d75bb09c8a507ac438f19b37ce375cfd5b991d44aed6b0","source":{"kind":"arxiv","id":"2512.04259","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2512.04259","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"arxiv_version","alias_value":"2512.04259v2","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2512.04259","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"pith_short_12","alias_value":"CK4X3352E6XS","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"pith_short_16","alias_value":"CK4X3352E6XSVRGX","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"pith_short_8","alias_value":"CK4X3352","created_at":"2026-06-04T01:09:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CK4X3352E6XSVRGXLOYJZCSQPL","target":"record","payload":{"canonical_record":{"source":{"id":"2512.04259","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-12-03T20:54:24Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"74d061ec566a2d087e0b87a76c18ae81bb3ca33ee21baf44c8a7640e9a0ec93f","abstract_canon_sha256":"bfccad2ac15d4ee851cd148e0d67a797b3ecf9217b7007d8ec251e4fedf2d02e"},"schema_version":"1.0"},"canonical_sha256":"12b97defba27af2ac4d75bb09c8a507ac438f19b37ce375cfd5b991d44aed6b0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-04T01:09:39.980486Z","signature_b64":"6jjkKaD17XuTUl6Jw7KPdMYGp0WmzQmPfDVzIsrRaP24qs2HSIhPCbV1UXyabaOb3cNiWyrit0Su6REhkHTNDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"12b97defba27af2ac4d75bb09c8a507ac438f19b37ce375cfd5b991d44aed6b0","last_reissued_at":"2026-06-04T01:09:39.979954Z","signature_status":"signed_v1","first_computed_at":"2026-06-04T01:09:39.979954Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2512.04259","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-04T01:09:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uhP0ygI59iuUBvSTC1yaCAHq/hlhKhmaFXfBKxAzTbKCE3K2yG2Tq29oTR/jr6ZJFWZmvE2CE7U1rbB5frs4AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T07:45:39.008251Z"},"content_sha256":"781e73a007839c39e6c75259e95ee06ef08812b595dcb7843c6d476db163250a","schema_version":"1.0","event_id":"sha256:781e73a007839c39e6c75259e95ee06ef08812b595dcb7843c6d476db163250a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CK4X3352E6XSVRGXLOYJZCSQPL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"WildCode Revisited: A Comprehensive Empirical Study on the Security of LLM-Generated Code","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Abdelwahab Hamou-Lhadj, Alexander Da Re, Kobra Khanmohammadi, Nicholas Rebelo Melo, Pooria Roy, Raphael Khoury, Wilfried Patrick Konan","submitted_at":"2025-12-03T20:54:24Z","abstract_excerpt":"LLM models are increasingly used to generate code, but the quality and security of this code are often uncertain. Several recent studies have raised alarm bells, indicating that such AI-generated code may be particularly vulnerable to cyberattacks. However, most of these studies rely on code that is generated specifically for the study, which raises questions about the realism of such experiments. In this study, we perform a large-scale empirical analysis of real-life code generated by ChatGPT. We evaluate code generated by ChatGPT both with respect to correctness and security and delve into t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2512.04259","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2512.04259/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-04T01:09:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2sSWCkLe9H8eWWsfsiAr7GkAkA/cVa5zElJ49qpZoIRgRPSlq9OnKX4gntDCQM4yyixLIEW8xGBxotmLDetHBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T07:45:39.008639Z"},"content_sha256":"6d85da1de98aad02efc5a154612a03240c5ac3525a3b020e308ea2729e1aa9e3","schema_version":"1.0","event_id":"sha256:6d85da1de98aad02efc5a154612a03240c5ac3525a3b020e308ea2729e1aa9e3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CK4X3352E6XSVRGXLOYJZCSQPL/bundle.json","state_url":"https://pith.science/pith/CK4X3352E6XSVRGXLOYJZCSQPL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CK4X3352E6XSVRGXLOYJZCSQPL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T07:45:39Z","links":{"resolver":"https://pith.science/pith/CK4X3352E6XSVRGXLOYJZCSQPL","bundle":"https://pith.science/pith/CK4X3352E6XSVRGXLOYJZCSQPL/bundle.json","state":"https://pith.science/pith/CK4X3352E6XSVRGXLOYJZCSQPL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CK4X3352E6XSVRGXLOYJZCSQPL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CK4X3352E6XSVRGXLOYJZCSQPL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bfccad2ac15d4ee851cd148e0d67a797b3ecf9217b7007d8ec251e4fedf2d02e","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-12-03T20:54:24Z","title_canon_sha256":"74d061ec566a2d087e0b87a76c18ae81bb3ca33ee21baf44c8a7640e9a0ec93f"},"schema_version":"1.0","source":{"id":"2512.04259","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2512.04259","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"arxiv_version","alias_value":"2512.04259v2","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2512.04259","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"pith_short_12","alias_value":"CK4X3352E6XS","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"pith_short_16","alias_value":"CK4X3352E6XSVRGX","created_at":"2026-06-04T01:09:39Z"},{"alias_kind":"pith_short_8","alias_value":"CK4X3352","created_at":"2026-06-04T01:09:39Z"}],"graph_snapshots":[{"event_id":"sha256:6d85da1de98aad02efc5a154612a03240c5ac3525a3b020e308ea2729e1aa9e3","target":"graph","created_at":"2026-06-04T01:09:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2512.04259/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM models are increasingly used to generate code, but the quality and security of this code are often uncertain. Several recent studies have raised alarm bells, indicating that such AI-generated code may be particularly vulnerable to cyberattacks. However, most of these studies rely on code that is generated specifically for the study, which raises questions about the realism of such experiments. In this study, we perform a large-scale empirical analysis of real-life code generated by ChatGPT. We evaluate code generated by ChatGPT both with respect to correctness and security and delve into t","authors_text":"Abdelwahab Hamou-Lhadj, Alexander Da Re, Kobra Khanmohammadi, Nicholas Rebelo Melo, Pooria Roy, Raphael Khoury, Wilfried Patrick Konan","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-12-03T20:54:24Z","title":"WildCode Revisited: A Comprehensive Empirical Study on the Security of LLM-Generated Code"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2512.04259","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:781e73a007839c39e6c75259e95ee06ef08812b595dcb7843c6d476db163250a","target":"record","created_at":"2026-06-04T01:09:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bfccad2ac15d4ee851cd148e0d67a797b3ecf9217b7007d8ec251e4fedf2d02e","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-12-03T20:54:24Z","title_canon_sha256":"74d061ec566a2d087e0b87a76c18ae81bb3ca33ee21baf44c8a7640e9a0ec93f"},"schema_version":"1.0","source":{"id":"2512.04259","kind":"arxiv","version":2}},"canonical_sha256":"12b97defba27af2ac4d75bb09c8a507ac438f19b37ce375cfd5b991d44aed6b0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"12b97defba27af2ac4d75bb09c8a507ac438f19b37ce375cfd5b991d44aed6b0","first_computed_at":"2026-06-04T01:09:39.979954Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-04T01:09:39.979954Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6jjkKaD17XuTUl6Jw7KPdMYGp0WmzQmPfDVzIsrRaP24qs2HSIhPCbV1UXyabaOb3cNiWyrit0Su6REhkHTNDw==","signature_status":"signed_v1","signed_at":"2026-06-04T01:09:39.980486Z","signed_message":"canonical_sha256_bytes"},"source_id":"2512.04259","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:781e73a007839c39e6c75259e95ee06ef08812b595dcb7843c6d476db163250a","sha256:6d85da1de98aad02efc5a154612a03240c5ac3525a3b020e308ea2729e1aa9e3"],"state_sha256":"87ad289a798e119708ab5726aeaf3b1dca2fb8ee0ce539c07f111c833167a9cc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YwfxHdDSThi8iJVTERpRHAUJ7mCISb2+Siekg+lSo/LYoURdgMo9tJBneFOQmHuWF3p1W80/PvgH2s62cSu0AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T07:45:39.010667Z","bundle_sha256":"fa476281cef84fe0152ec5b853c78c314728d32a56602047432f276e00a1358c"}}