{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DSEQGYJAJTFSQW5QOWESOK5DDS","short_pith_number":"pith:DSEQGYJA","canonical_record":{"source":{"id":"2411.03346","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T16:20:32Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"f6ed34b3e58fe1601e6a94445a6fd2d310976edffbd671608783330d134a0da1","abstract_canon_sha256":"272df57b2f1c66ca75e9d3b3a48739834c272d4a69a87386c7c2e3341041b3d2"},"schema_version":"1.0"},"canonical_sha256":"1c890361204ccb285bb07589272ba31c90bbc929cdaf9cfc7dbceaa4782a7e9a","source":{"kind":"arxiv","id":"2411.03346","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.03346","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"arxiv_version","alias_value":"2411.03346v2","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.03346","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"pith_short_12","alias_value":"DSEQGYJAJTFS","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"pith_short_16","alias_value":"DSEQGYJAJTFSQW5Q","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"pith_short_8","alias_value":"DSEQGYJA","created_at":"2026-07-05T09:38:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DSEQGYJAJTFSQW5QOWESOK5DDS","target":"record","payload":{"canonical_record":{"source":{"id":"2411.03346","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T16:20:32Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"f6ed34b3e58fe1601e6a94445a6fd2d310976edffbd671608783330d134a0da1","abstract_canon_sha256":"272df57b2f1c66ca75e9d3b3a48739834c272d4a69a87386c7c2e3341041b3d2"},"schema_version":"1.0"},"canonical_sha256":"1c890361204ccb285bb07589272ba31c90bbc929cdaf9cfc7dbceaa4782a7e9a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:38:32.025384Z","signature_b64":"Gfp1H7/W4GDFh1IgKd/Gt5LOn02tbp0CSFbKlZj9/TsoFiNaOjZWMsHFyB34CQ0Gi+cHWYYO6LYeRIpvqcSCAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1c890361204ccb285bb07589272ba31c90bbc929cdaf9cfc7dbceaa4782a7e9a","last_reissued_at":"2026-07-05T09:38:32.024884Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:38:32.024884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.03346","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4uwuJWy45n8SUmp9cNiCEMMdz71eftBvRJlfZqI32Zu8KtXf4SG7A4bYKVc80b7PEF4iEtpkQUF3o0PnqTunCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:07:19.496036Z"},"content_sha256":"31e1b1684ff99d0884cd90afba6626f2fda8091879f6c0711e8549992c8e267a","schema_version":"1.0","event_id":"sha256:31e1b1684ff99d0884cd90afba6626f2fda8091879f6c0711e8549992c8e267a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DSEQGYJAJTFSQW5QOWESOK5DDS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fixing Security Vulnerabilities with AI in OSS-Fuzz","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Abhik Roychoudhury, Abhishek Arya, Dominic Berzin, Dongge Liu, Jiawei Wang, Martin Mirchev, Oliver Chang, Yuntong Zhang","submitted_at":"2024-11-03T16:20:32Z","abstract_excerpt":"Critical open source software systems undergo significant validation in the form of lengthy fuzz campaigns. The fuzz campaigns typically conduct a biased random search over the domain of program inputs, to find inputs which crash the software system. Such fuzzing is useful to enhance the security of software systems in general since even closed source software may use open source components. Hence testing open source software is of paramount importance. Currently OSS-Fuzz is the most significant and widely used infrastructure for continuous validation of open source systems. Unfortunately even"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.03346","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.03346/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+qHxH4JNvjzh04Rs5+eAkaoIhrWbDRT2N3WYsQ97nM5eLMryQ2vZwqOymJ7jgSVTLTq05kdZOj4aQ11IKGOkBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:07:19.496534Z"},"content_sha256":"083d8825c0074392a71c59c112a829fe1781ea9f9f46a369f6127f7b612047b4","schema_version":"1.0","event_id":"sha256:083d8825c0074392a71c59c112a829fe1781ea9f9f46a369f6127f7b612047b4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DSEQGYJAJTFSQW5QOWESOK5DDS/bundle.json","state_url":"https://pith.science/pith/DSEQGYJAJTFSQW5QOWESOK5DDS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DSEQGYJAJTFSQW5QOWESOK5DDS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T17:07:19Z","links":{"resolver":"https://pith.science/pith/DSEQGYJAJTFSQW5QOWESOK5DDS","bundle":"https://pith.science/pith/DSEQGYJAJTFSQW5QOWESOK5DDS/bundle.json","state":"https://pith.science/pith/DSEQGYJAJTFSQW5QOWESOK5DDS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DSEQGYJAJTFSQW5QOWESOK5DDS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DSEQGYJAJTFSQW5QOWESOK5DDS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"272df57b2f1c66ca75e9d3b3a48739834c272d4a69a87386c7c2e3341041b3d2","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T16:20:32Z","title_canon_sha256":"f6ed34b3e58fe1601e6a94445a6fd2d310976edffbd671608783330d134a0da1"},"schema_version":"1.0","source":{"id":"2411.03346","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.03346","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"arxiv_version","alias_value":"2411.03346v2","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.03346","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"pith_short_12","alias_value":"DSEQGYJAJTFS","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"pith_short_16","alias_value":"DSEQGYJAJTFSQW5Q","created_at":"2026-07-05T09:38:32Z"},{"alias_kind":"pith_short_8","alias_value":"DSEQGYJA","created_at":"2026-07-05T09:38:32Z"}],"graph_snapshots":[{"event_id":"sha256:083d8825c0074392a71c59c112a829fe1781ea9f9f46a369f6127f7b612047b4","target":"graph","created_at":"2026-07-05T09:38:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.03346/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Critical open source software systems undergo significant validation in the form of lengthy fuzz campaigns. The fuzz campaigns typically conduct a biased random search over the domain of program inputs, to find inputs which crash the software system. Such fuzzing is useful to enhance the security of software systems in general since even closed source software may use open source components. Hence testing open source software is of paramount importance. Currently OSS-Fuzz is the most significant and widely used infrastructure for continuous validation of open source systems. Unfortunately even","authors_text":"Abhik Roychoudhury, Abhishek Arya, Dominic Berzin, Dongge Liu, Jiawei Wang, Martin Mirchev, Oliver Chang, Yuntong Zhang","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T16:20:32Z","title":"Fixing Security Vulnerabilities with AI in OSS-Fuzz"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.03346","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:31e1b1684ff99d0884cd90afba6626f2fda8091879f6c0711e8549992c8e267a","target":"record","created_at":"2026-07-05T09:38:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"272df57b2f1c66ca75e9d3b3a48739834c272d4a69a87386c7c2e3341041b3d2","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T16:20:32Z","title_canon_sha256":"f6ed34b3e58fe1601e6a94445a6fd2d310976edffbd671608783330d134a0da1"},"schema_version":"1.0","source":{"id":"2411.03346","kind":"arxiv","version":2}},"canonical_sha256":"1c890361204ccb285bb07589272ba31c90bbc929cdaf9cfc7dbceaa4782a7e9a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1c890361204ccb285bb07589272ba31c90bbc929cdaf9cfc7dbceaa4782a7e9a","first_computed_at":"2026-07-05T09:38:32.024884Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:38:32.024884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Gfp1H7/W4GDFh1IgKd/Gt5LOn02tbp0CSFbKlZj9/TsoFiNaOjZWMsHFyB34CQ0Gi+cHWYYO6LYeRIpvqcSCAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:38:32.025384Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.03346","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:31e1b1684ff99d0884cd90afba6626f2fda8091879f6c0711e8549992c8e267a","sha256:083d8825c0074392a71c59c112a829fe1781ea9f9f46a369f6127f7b612047b4"],"state_sha256":"5eecdfb4ba5ea6fcb194047fb7fbca4ebed7feb407bda48bac1d08898a98c7ff"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/4DPSJoYVheOrQ/PPIVmn8Ykrq64wx1MiusFB+LFhgysA1Az2PWgOTtvWlZ10CE1ymIEc8o8/12piE4rXrCGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T17:07:19.500210Z","bundle_sha256":"7a873c1554504b06e936ed655ab39df60b3192537b65e7ef6a466759d21c169a"}}