{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:CROOXXDSUS7JPKCFYXMD5PLXVW","short_pith_number":"pith:CROOXXDS","canonical_record":{"source":{"id":"2602.09131","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-09T19:22:51Z","cross_cats_sorted":[],"title_canon_sha256":"ef7c939239cf93470ce725a8dfcc31c5a08371ae31768bc29e0ac1f54ee0fbb2","abstract_canon_sha256":"c47d53ca08afe85487b3bc7e3140989e0f19127f87fda1ab093185466435e9a7"},"schema_version":"1.0"},"canonical_sha256":"145cebdc72a4be97a845c5d83ebd77adb15bcb2ca6c8a77af2d325c70f8d6395","source":{"kind":"arxiv","id":"2602.09131","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.09131","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"arxiv_version","alias_value":"2602.09131v2","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.09131","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"pith_short_12","alias_value":"CROOXXDSUS7J","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"pith_short_16","alias_value":"CROOXXDSUS7JPKCF","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"pith_short_8","alias_value":"CROOXXDS","created_at":"2026-06-19T16:09:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:CROOXXDSUS7JPKCFYXMD5PLXVW","target":"record","payload":{"canonical_record":{"source":{"id":"2602.09131","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-09T19:22:51Z","cross_cats_sorted":[],"title_canon_sha256":"ef7c939239cf93470ce725a8dfcc31c5a08371ae31768bc29e0ac1f54ee0fbb2","abstract_canon_sha256":"c47d53ca08afe85487b3bc7e3140989e0f19127f87fda1ab093185466435e9a7"},"schema_version":"1.0"},"canonical_sha256":"145cebdc72a4be97a845c5d83ebd77adb15bcb2ca6c8a77af2d325c70f8d6395","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-19T16:09:54.788540Z","signature_b64":"F6cy29vy+VSpZcDj3mGCb0GxzE6C1NEj1cbpaSd9NgjAIJ9kcJRDJrl7+WCa8YWiHsljS2cLoIlkKY15P/OeCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"145cebdc72a4be97a845c5d83ebd77adb15bcb2ca6c8a77af2d325c70f8d6395","last_reissued_at":"2026-06-19T16:09:54.788091Z","signature_status":"signed_v1","first_computed_at":"2026-06-19T16:09:54.788091Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2602.09131","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:09:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I+KyPTGaR/VUOYRTdmu63vciax0nWSrMHR5vXGvAkzDryw2a4cNFg3FxYMxDXfi8N2JBBuGjvIZZPhAN4fMdCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:47:11.554073Z"},"content_sha256":"8e82fc11cb4d1b78de2baefb78acb82c14b4f59cf29a22e20b4e572f1d29e7f2","schema_version":"1.0","event_id":"sha256:8e82fc11cb4d1b78de2baefb78acb82c14b4f59cf29a22e20b4e572f1d29e7f2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:CROOXXDSUS7JPKCFYXMD5PLXVW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PICASSO: Scaling CHERI Use-After-Free Protection to Millions of Allocations using Colored Capabilities","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"H{\\aa}kan Englund, Hossam ElAtali, Jonathan Woodruff, Merve G\\\"ulmez, N. Asokan, Ruben Sturm, Thomas Nyman","submitted_at":"2026-02-09T19:22:51Z","abstract_excerpt":"While the CHERI instruction-set architecture extensions for capabilities enable strong spatial memory safety, CHERI lacks built-in temporal safety, particularly for heap allocations. Prior attempts to augment CHERI with temporal safety fall short in terms of scalability, memory overhead, and incomplete security guarantees due to periodical sweeps of the system's memory to individually revoke stale capabilities. We address these limitations by introducing colored capabilities that add a controlled form of indirection to CHERI's capability model. This enables provenance tracking of capabilities "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.09131","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2602.09131/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:09:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FiYGoLmK8uS+cOxcTu/RFaW+BGfi9EjDj2zStkcp5NMbn/o4Xrl+gzeMBUSvQhmg7qv2Xy01qiNOpEKoIdVUDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:47:11.554583Z"},"content_sha256":"7b7050961c2c8f9678d5edc359e8f394633ff24e026c3a913d160068f487d0d4","schema_version":"1.0","event_id":"sha256:7b7050961c2c8f9678d5edc359e8f394633ff24e026c3a913d160068f487d0d4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CROOXXDSUS7JPKCFYXMD5PLXVW/bundle.json","state_url":"https://pith.science/pith/CROOXXDSUS7JPKCFYXMD5PLXVW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CROOXXDSUS7JPKCFYXMD5PLXVW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T04:47:11Z","links":{"resolver":"https://pith.science/pith/CROOXXDSUS7JPKCFYXMD5PLXVW","bundle":"https://pith.science/pith/CROOXXDSUS7JPKCFYXMD5PLXVW/bundle.json","state":"https://pith.science/pith/CROOXXDSUS7JPKCFYXMD5PLXVW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CROOXXDSUS7JPKCFYXMD5PLXVW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:CROOXXDSUS7JPKCFYXMD5PLXVW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c47d53ca08afe85487b3bc7e3140989e0f19127f87fda1ab093185466435e9a7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-09T19:22:51Z","title_canon_sha256":"ef7c939239cf93470ce725a8dfcc31c5a08371ae31768bc29e0ac1f54ee0fbb2"},"schema_version":"1.0","source":{"id":"2602.09131","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.09131","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"arxiv_version","alias_value":"2602.09131v2","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.09131","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"pith_short_12","alias_value":"CROOXXDSUS7J","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"pith_short_16","alias_value":"CROOXXDSUS7JPKCF","created_at":"2026-06-19T16:09:54Z"},{"alias_kind":"pith_short_8","alias_value":"CROOXXDS","created_at":"2026-06-19T16:09:54Z"}],"graph_snapshots":[{"event_id":"sha256:7b7050961c2c8f9678d5edc359e8f394633ff24e026c3a913d160068f487d0d4","target":"graph","created_at":"2026-06-19T16:09:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2602.09131/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While the CHERI instruction-set architecture extensions for capabilities enable strong spatial memory safety, CHERI lacks built-in temporal safety, particularly for heap allocations. Prior attempts to augment CHERI with temporal safety fall short in terms of scalability, memory overhead, and incomplete security guarantees due to periodical sweeps of the system's memory to individually revoke stale capabilities. We address these limitations by introducing colored capabilities that add a controlled form of indirection to CHERI's capability model. This enables provenance tracking of capabilities ","authors_text":"H{\\aa}kan Englund, Hossam ElAtali, Jonathan Woodruff, Merve G\\\"ulmez, N. Asokan, Ruben Sturm, Thomas Nyman","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-09T19:22:51Z","title":"PICASSO: Scaling CHERI Use-After-Free Protection to Millions of Allocations using Colored Capabilities"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.09131","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8e82fc11cb4d1b78de2baefb78acb82c14b4f59cf29a22e20b4e572f1d29e7f2","target":"record","created_at":"2026-06-19T16:09:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c47d53ca08afe85487b3bc7e3140989e0f19127f87fda1ab093185466435e9a7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-09T19:22:51Z","title_canon_sha256":"ef7c939239cf93470ce725a8dfcc31c5a08371ae31768bc29e0ac1f54ee0fbb2"},"schema_version":"1.0","source":{"id":"2602.09131","kind":"arxiv","version":2}},"canonical_sha256":"145cebdc72a4be97a845c5d83ebd77adb15bcb2ca6c8a77af2d325c70f8d6395","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"145cebdc72a4be97a845c5d83ebd77adb15bcb2ca6c8a77af2d325c70f8d6395","first_computed_at":"2026-06-19T16:09:54.788091Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-19T16:09:54.788091Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"F6cy29vy+VSpZcDj3mGCb0GxzE6C1NEj1cbpaSd9NgjAIJ9kcJRDJrl7+WCa8YWiHsljS2cLoIlkKY15P/OeCw==","signature_status":"signed_v1","signed_at":"2026-06-19T16:09:54.788540Z","signed_message":"canonical_sha256_bytes"},"source_id":"2602.09131","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8e82fc11cb4d1b78de2baefb78acb82c14b4f59cf29a22e20b4e572f1d29e7f2","sha256:7b7050961c2c8f9678d5edc359e8f394633ff24e026c3a913d160068f487d0d4"],"state_sha256":"4adb1279c7fce4e5d823ffc87b0d7975752c4c7e723778a4465cf0d6a6563d9e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Zkh16XdJFqjVaPK0LbSB5c8E7AQSbsbePQVblnh2GmaUluADpgd4vfZGEsmGPNqwgudfd0UAF3d4GnaH0fpEBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T04:47:11.560041Z","bundle_sha256":"5ab4886373b9400da06dddc557eea312357221000203c4231290778c2c7eda1b"}}