{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DLWVFFW3HXDEOGVVXRRJRXQM55","short_pith_number":"pith:DLWVFFW3","canonical_record":{"source":{"id":"2408.08549","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-08-16T06:31:44Z","cross_cats_sorted":[],"title_canon_sha256":"478f780808e7e29dc163eb20e6b2358930d39dca9c78c3523a01822dac5263f3","abstract_canon_sha256":"fe2897295d5258ad16153c1be1563e540205fe5149b2a42f1ba010443051f81d"},"schema_version":"1.0"},"canonical_sha256":"1aed5296db3dc6471ab5bc6298de0cef5f94e85a0385b798a521bf9ac616421b","source":{"kind":"arxiv","id":"2408.08549","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.08549","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"arxiv_version","alias_value":"2408.08549v1","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.08549","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"pith_short_12","alias_value":"DLWVFFW3HXDE","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"pith_short_16","alias_value":"DLWVFFW3HXDEOGVV","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"pith_short_8","alias_value":"DLWVFFW3","created_at":"2026-07-05T11:45:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DLWVFFW3HXDEOGVVXRRJRXQM55","target":"record","payload":{"canonical_record":{"source":{"id":"2408.08549","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-08-16T06:31:44Z","cross_cats_sorted":[],"title_canon_sha256":"478f780808e7e29dc163eb20e6b2358930d39dca9c78c3523a01822dac5263f3","abstract_canon_sha256":"fe2897295d5258ad16153c1be1563e540205fe5149b2a42f1ba010443051f81d"},"schema_version":"1.0"},"canonical_sha256":"1aed5296db3dc6471ab5bc6298de0cef5f94e85a0385b798a521bf9ac616421b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:45:28.855008Z","signature_b64":"S+J5TMwUVOaOUCiUtVqqi+cYLo4tzLdSzpf+bLnIh8+GRl70jB32tPGjcIlZyGcYWsnoK4TFozjpXT9mGcZ7BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1aed5296db3dc6471ab5bc6298de0cef5f94e85a0385b798a521bf9ac616421b","last_reissued_at":"2026-07-05T11:45:28.854477Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:45:28.854477Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.08549","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zegaB1RoE8KlqjODoPmChsE2pl8wJ3spQn4zGwVGHfe9n0tPBYiWA+ej4x/psUT0LyMJKk3kE5E0pkcfZEqpCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T16:31:14.748639Z"},"content_sha256":"64a933ec4abe1360e3d2f799f798ac3c80f1e9139d0f9a6315bd675dd18e94c6","schema_version":"1.0","event_id":"sha256:64a933ec4abe1360e3d2f799f798ac3c80f1e9139d0f9a6315bd675dd18e94c6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DLWVFFW3HXDEOGVVXRRJRXQM55","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Vulnerability Handling of AI-Generated Code -- Existing Solutions and Open Challenges","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Dieter Holstein, Fabian Schmidt, Sabrina Kaniewski, Tobias Heer","submitted_at":"2024-08-16T06:31:44Z","abstract_excerpt":"The increasing use of generative Artificial Intelligence (AI) in modern software engineering, particularly Large Language Models (LLMs) for code generation, has transformed professional software development by boosting productivity and automating development processes. This adoption, however, has highlighted a significant issue: the introduction of security vulnerabilities into the code. These vulnerabilities result, e.g., from flaws in the training data that propagate into the generated code, creating challenges in disclosing them. Traditional vulnerability handling processes often involve ex"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.08549","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.08549/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RACKmZzlgI/WssukP0Tyt2+IvnEG3rIfv8l3LLIGym4xxfd3PSCkZ2h69BiNHwVTOsvdSFrpLavtQuwdrk1xAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T16:31:14.750256Z"},"content_sha256":"ebc97bf29a8d086d465d6ca338ed12b366fc8c3320e01ef42521aad76b597392","schema_version":"1.0","event_id":"sha256:ebc97bf29a8d086d465d6ca338ed12b366fc8c3320e01ef42521aad76b597392"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DLWVFFW3HXDEOGVVXRRJRXQM55/bundle.json","state_url":"https://pith.science/pith/DLWVFFW3HXDEOGVVXRRJRXQM55/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DLWVFFW3HXDEOGVVXRRJRXQM55/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T16:31:14Z","links":{"resolver":"https://pith.science/pith/DLWVFFW3HXDEOGVVXRRJRXQM55","bundle":"https://pith.science/pith/DLWVFFW3HXDEOGVVXRRJRXQM55/bundle.json","state":"https://pith.science/pith/DLWVFFW3HXDEOGVVXRRJRXQM55/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DLWVFFW3HXDEOGVVXRRJRXQM55/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DLWVFFW3HXDEOGVVXRRJRXQM55","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fe2897295d5258ad16153c1be1563e540205fe5149b2a42f1ba010443051f81d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-08-16T06:31:44Z","title_canon_sha256":"478f780808e7e29dc163eb20e6b2358930d39dca9c78c3523a01822dac5263f3"},"schema_version":"1.0","source":{"id":"2408.08549","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.08549","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"arxiv_version","alias_value":"2408.08549v1","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.08549","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"pith_short_12","alias_value":"DLWVFFW3HXDE","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"pith_short_16","alias_value":"DLWVFFW3HXDEOGVV","created_at":"2026-07-05T11:45:28Z"},{"alias_kind":"pith_short_8","alias_value":"DLWVFFW3","created_at":"2026-07-05T11:45:28Z"}],"graph_snapshots":[{"event_id":"sha256:ebc97bf29a8d086d465d6ca338ed12b366fc8c3320e01ef42521aad76b597392","target":"graph","created_at":"2026-07-05T11:45:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.08549/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The increasing use of generative Artificial Intelligence (AI) in modern software engineering, particularly Large Language Models (LLMs) for code generation, has transformed professional software development by boosting productivity and automating development processes. This adoption, however, has highlighted a significant issue: the introduction of security vulnerabilities into the code. These vulnerabilities result, e.g., from flaws in the training data that propagate into the generated code, creating challenges in disclosing them. Traditional vulnerability handling processes often involve ex","authors_text":"Dieter Holstein, Fabian Schmidt, Sabrina Kaniewski, Tobias Heer","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-08-16T06:31:44Z","title":"Vulnerability Handling of AI-Generated Code -- Existing Solutions and Open Challenges"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.08549","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:64a933ec4abe1360e3d2f799f798ac3c80f1e9139d0f9a6315bd675dd18e94c6","target":"record","created_at":"2026-07-05T11:45:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fe2897295d5258ad16153c1be1563e540205fe5149b2a42f1ba010443051f81d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-08-16T06:31:44Z","title_canon_sha256":"478f780808e7e29dc163eb20e6b2358930d39dca9c78c3523a01822dac5263f3"},"schema_version":"1.0","source":{"id":"2408.08549","kind":"arxiv","version":1}},"canonical_sha256":"1aed5296db3dc6471ab5bc6298de0cef5f94e85a0385b798a521bf9ac616421b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1aed5296db3dc6471ab5bc6298de0cef5f94e85a0385b798a521bf9ac616421b","first_computed_at":"2026-07-05T11:45:28.854477Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:45:28.854477Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S+J5TMwUVOaOUCiUtVqqi+cYLo4tzLdSzpf+bLnIh8+GRl70jB32tPGjcIlZyGcYWsnoK4TFozjpXT9mGcZ7BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:45:28.855008Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.08549","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:64a933ec4abe1360e3d2f799f798ac3c80f1e9139d0f9a6315bd675dd18e94c6","sha256:ebc97bf29a8d086d465d6ca338ed12b366fc8c3320e01ef42521aad76b597392"],"state_sha256":"f0cfabc11edb8f598e674d32cab4bddb5a7351fe5550187b25426eba8956a84d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QZur5nWXKE3Z5iZSRh2WhyaKSLrTlt8+HYgfmlALRQY4vWTDGSsR//nccSNzSIBIU3mmQQaYSz4USk5oo7a4CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T16:31:14.767558Z","bundle_sha256":"beeff558e935433edb213fec50ab121eecff9d1678a5113ba10e0e7696376978"}}