{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:D7NYD2PQ32MGNQSAXVXIKKBCSK","short_pith_number":"pith:D7NYD2PQ","canonical_record":{"source":{"id":"2606.31408","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-30T09:35:28Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"fec5c27b34e2f7e1602fea85e56f05f73cdc7096717297ba1d3e1d4a85419180","abstract_canon_sha256":"d0fb350368df5b6bf5bfe1dcece05fd45016c7a400ded5947d73e55a6be8653a"},"schema_version":"1.0"},"canonical_sha256":"1fdb81e9f0de9866c240bd6e85282292a2afe47f5ea2b78f1fcfaae9920139d8","source":{"kind":"arxiv","id":"2606.31408","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.31408","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"arxiv_version","alias_value":"2606.31408v1","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.31408","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"pith_short_12","alias_value":"D7NYD2PQ32MG","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"pith_short_16","alias_value":"D7NYD2PQ32MGNQSA","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"pith_short_8","alias_value":"D7NYD2PQ","created_at":"2026-07-01T01:18:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:D7NYD2PQ32MGNQSAXVXIKKBCSK","target":"record","payload":{"canonical_record":{"source":{"id":"2606.31408","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-30T09:35:28Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"fec5c27b34e2f7e1602fea85e56f05f73cdc7096717297ba1d3e1d4a85419180","abstract_canon_sha256":"d0fb350368df5b6bf5bfe1dcece05fd45016c7a400ded5947d73e55a6be8653a"},"schema_version":"1.0"},"canonical_sha256":"1fdb81e9f0de9866c240bd6e85282292a2afe47f5ea2b78f1fcfaae9920139d8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-01T01:18:02.105151Z","signature_b64":"1isZEzX25eJmmLvORmLYvF70Jz04tZ5QGI4qThs61Ft29f2bMYIBo0YVc0Xa4vHtdRxG8NBQPRCyPKXCwJaiAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1fdb81e9f0de9866c240bd6e85282292a2afe47f5ea2b78f1fcfaae9920139d8","last_reissued_at":"2026-07-01T01:18:02.104759Z","signature_status":"signed_v1","first_computed_at":"2026-07-01T01:18:02.104759Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.31408","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-01T01:18:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WB2yTBjmavwwrkEFduF4Q59FOBcdmuSoGGjSNDFrf9O+PaG9a/Yn4C3m1Lkn1/v3dYZSF9abjtMhvGDamr5LCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T13:56:52.407702Z"},"content_sha256":"d6df76783410c3234b30a0f0409be80b88c6567d999546fbefcd3ae6277c61dc","schema_version":"1.0","event_id":"sha256:d6df76783410c3234b30a0f0409be80b88c6567d999546fbefcd3ae6277c61dc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:D7NYD2PQ32MGNQSAXVXIKKBCSK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"EnclaveX: End-to-End Confidential AI with CPU/GPU TEEs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Christof Fetzer (TU Dresden, Quoc Do Le (STACKIT Cloud), Robert Schambach (TU Dresden), Scontain GmbH), Sergei Arnautov (Scontain GmbH)","submitted_at":"2026-06-30T09:35:28Z","abstract_excerpt":"Large Language Models (LLMs) have rapidly proliferated, driving widespread adoption of AI applications. Most deployments rely on centralized infrastructures such as Microsoft Azure, Google Cloud, or AWS, requiring users to share sensitive data and training or fine-tuning code. This dependence raises significant security and privacy concerns, as cloud providers must be trusted to ensure confidentiality and integrity.\n  Trusted Execution Environments (TEEs) e.g., Intel SGX/TDX, AMD SEV-SNP, and ARM CCA have been introduced to mitigate these risks. More recently, NVIDIA has developed GPU TEEs (e."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.31408","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.31408/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-01T01:18:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dRj/O9+M36yiDK0ZNvcp1oOFjgsTJY+9P4VfwwSwcuDvLJ8unvtpM0Pi0IyvTSbt7FmnQgRKc/lzB95gGPzCDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T13:56:52.408065Z"},"content_sha256":"d737de327152adab60318822d3f45f78adb807fd5740b35b1bc6c0696f105ef9","schema_version":"1.0","event_id":"sha256:d737de327152adab60318822d3f45f78adb807fd5740b35b1bc6c0696f105ef9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D7NYD2PQ32MGNQSAXVXIKKBCSK/bundle.json","state_url":"https://pith.science/pith/D7NYD2PQ32MGNQSAXVXIKKBCSK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D7NYD2PQ32MGNQSAXVXIKKBCSK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T13:56:52Z","links":{"resolver":"https://pith.science/pith/D7NYD2PQ32MGNQSAXVXIKKBCSK","bundle":"https://pith.science/pith/D7NYD2PQ32MGNQSAXVXIKKBCSK/bundle.json","state":"https://pith.science/pith/D7NYD2PQ32MGNQSAXVXIKKBCSK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D7NYD2PQ32MGNQSAXVXIKKBCSK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:D7NYD2PQ32MGNQSAXVXIKKBCSK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d0fb350368df5b6bf5bfe1dcece05fd45016c7a400ded5947d73e55a6be8653a","cross_cats_sorted":["cs.OS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-30T09:35:28Z","title_canon_sha256":"fec5c27b34e2f7e1602fea85e56f05f73cdc7096717297ba1d3e1d4a85419180"},"schema_version":"1.0","source":{"id":"2606.31408","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.31408","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"arxiv_version","alias_value":"2606.31408v1","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.31408","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"pith_short_12","alias_value":"D7NYD2PQ32MG","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"pith_short_16","alias_value":"D7NYD2PQ32MGNQSA","created_at":"2026-07-01T01:18:02Z"},{"alias_kind":"pith_short_8","alias_value":"D7NYD2PQ","created_at":"2026-07-01T01:18:02Z"}],"graph_snapshots":[{"event_id":"sha256:d737de327152adab60318822d3f45f78adb807fd5740b35b1bc6c0696f105ef9","target":"graph","created_at":"2026-07-01T01:18:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.31408/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have rapidly proliferated, driving widespread adoption of AI applications. Most deployments rely on centralized infrastructures such as Microsoft Azure, Google Cloud, or AWS, requiring users to share sensitive data and training or fine-tuning code. This dependence raises significant security and privacy concerns, as cloud providers must be trusted to ensure confidentiality and integrity.\n  Trusted Execution Environments (TEEs) e.g., Intel SGX/TDX, AMD SEV-SNP, and ARM CCA have been introduced to mitigate these risks. More recently, NVIDIA has developed GPU TEEs (e.","authors_text":"Christof Fetzer (TU Dresden, Quoc Do Le (STACKIT Cloud), Robert Schambach (TU Dresden), Scontain GmbH), Sergei Arnautov (Scontain GmbH)","cross_cats":["cs.OS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-30T09:35:28Z","title":"EnclaveX: End-to-End Confidential AI with CPU/GPU TEEs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.31408","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d6df76783410c3234b30a0f0409be80b88c6567d999546fbefcd3ae6277c61dc","target":"record","created_at":"2026-07-01T01:18:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d0fb350368df5b6bf5bfe1dcece05fd45016c7a400ded5947d73e55a6be8653a","cross_cats_sorted":["cs.OS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-30T09:35:28Z","title_canon_sha256":"fec5c27b34e2f7e1602fea85e56f05f73cdc7096717297ba1d3e1d4a85419180"},"schema_version":"1.0","source":{"id":"2606.31408","kind":"arxiv","version":1}},"canonical_sha256":"1fdb81e9f0de9866c240bd6e85282292a2afe47f5ea2b78f1fcfaae9920139d8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1fdb81e9f0de9866c240bd6e85282292a2afe47f5ea2b78f1fcfaae9920139d8","first_computed_at":"2026-07-01T01:18:02.104759Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-01T01:18:02.104759Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1isZEzX25eJmmLvORmLYvF70Jz04tZ5QGI4qThs61Ft29f2bMYIBo0YVc0Xa4vHtdRxG8NBQPRCyPKXCwJaiAw==","signature_status":"signed_v1","signed_at":"2026-07-01T01:18:02.105151Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.31408","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d6df76783410c3234b30a0f0409be80b88c6567d999546fbefcd3ae6277c61dc","sha256:d737de327152adab60318822d3f45f78adb807fd5740b35b1bc6c0696f105ef9"],"state_sha256":"55090e3d49aa1a60e0b9cce33692ecca55d992e30a3f261c4b1ec0cf0cac8d87"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OCDXqbydFalSTbExgJ0go4NobOIf/czORz3yh6YgGZCJcaAc+CBDdfbFLmnGYmhgInrQrEqFO45lL1gnYpzZDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T13:56:52.410432Z","bundle_sha256":"878eaa4a54fa9888a01c7887e3f5d987f770535c91018bebd874a206926a1ec3"}}