{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:DSRFSHCDFBKMCANZKXONIPCUBM","short_pith_number":"pith:DSRFSHCD","canonical_record":{"source":{"id":"2607.16414","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T18:05:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6ad42b24aa488d8ad72f6ecc8de8d59296e0ea17c058d05e4868c9aed5b8bf2e","abstract_canon_sha256":"5c11bb96d9e726cab7291ff74da4976017b7fc20e472200f7caa90598263df62"},"schema_version":"1.0"},"canonical_sha256":"1ca2591c432854c101b955dcd43c540b13873cc5cb9de286ff65e1e3e83f89b6","source":{"kind":"arxiv","id":"2607.16414","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.16414","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"arxiv_version","alias_value":"2607.16414v1","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.16414","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"pith_short_12","alias_value":"DSRFSHCDFBKM","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"pith_short_16","alias_value":"DSRFSHCDFBKMCANZ","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"pith_short_8","alias_value":"DSRFSHCD","created_at":"2026-07-21T00:20:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:DSRFSHCDFBKMCANZKXONIPCUBM","target":"record","payload":{"canonical_record":{"source":{"id":"2607.16414","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T18:05:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6ad42b24aa488d8ad72f6ecc8de8d59296e0ea17c058d05e4868c9aed5b8bf2e","abstract_canon_sha256":"5c11bb96d9e726cab7291ff74da4976017b7fc20e472200f7caa90598263df62"},"schema_version":"1.0"},"canonical_sha256":"1ca2591c432854c101b955dcd43c540b13873cc5cb9de286ff65e1e3e83f89b6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-21T00:20:16.877467Z","signature_b64":"7gHBH+lSH3pBdy1aLsd2F/UbiNhzACB0EnZgLqInasRkszXL1F7X1TtGmaVeIcYXWsBlfvprWjEXKJlt9d/WAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1ca2591c432854c101b955dcd43c540b13873cc5cb9de286ff65e1e3e83f89b6","last_reissued_at":"2026-07-21T00:20:16.876583Z","signature_status":"signed_v1","first_computed_at":"2026-07-21T00:20:16.876583Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.16414","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T00:20:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MSGhU3gsHpl9W3ic00yGxupKOeVqCgwOJcvITWc+EztjVHc9tnTEby0vRODRi1rTnEcQmWTSYlW7hInFLq10DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T21:48:09.397499Z"},"content_sha256":"a411768e77ae610cc3e725b06578871210020921bc3c2a4c34d53d24eae1556a","schema_version":"1.0","event_id":"sha256:a411768e77ae610cc3e725b06578871210020921bc3c2a4c34d53d24eae1556a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:DSRFSHCDFBKMCANZKXONIPCUBM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Signal-based Model Access Risk Analysis for AI System Operations Security","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Amir Sadovnik, Anthony Ayodele, Chris Rugenstein, Donald Coulter, Edmon Begoli, Maria Mahbub, Steven Young","submitted_at":"2026-07-17T18:05:47Z","abstract_excerpt":"Artificial intelligence (AI) systems are now ubiquitous across domains such as security, finance, healthcare, consumer technology, and large-scale cloud services, where they process massive volumes of data and make consequential decisions daily. This widespread adoption has created a broad attack surface through which adversaries can manipulate, evade, extract information from, or otherwise subvert deployed models. Depending on system design and exposure, attackers may have very different forms of access: some observe only final decisions, while others receive confidence scores, intermediate r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.16414","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.16414/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T00:20:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B1MUGr8wpFdPVA6HTg11oJfe1/5KwiWeFVY5MRFX4IAArG57pfDkHjDgSS8hdBLtdEnH1ZwFdrly2tflaShzAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T21:48:09.397894Z"},"content_sha256":"7db0558f84cdaaa832533abe23288770034a120637b9a3d5dbc5c9de0ad03b24","schema_version":"1.0","event_id":"sha256:7db0558f84cdaaa832533abe23288770034a120637b9a3d5dbc5c9de0ad03b24"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DSRFSHCDFBKMCANZKXONIPCUBM/bundle.json","state_url":"https://pith.science/pith/DSRFSHCDFBKMCANZKXONIPCUBM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DSRFSHCDFBKMCANZKXONIPCUBM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T21:48:09Z","links":{"resolver":"https://pith.science/pith/DSRFSHCDFBKMCANZKXONIPCUBM","bundle":"https://pith.science/pith/DSRFSHCDFBKMCANZKXONIPCUBM/bundle.json","state":"https://pith.science/pith/DSRFSHCDFBKMCANZKXONIPCUBM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DSRFSHCDFBKMCANZKXONIPCUBM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:DSRFSHCDFBKMCANZKXONIPCUBM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c11bb96d9e726cab7291ff74da4976017b7fc20e472200f7caa90598263df62","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T18:05:47Z","title_canon_sha256":"6ad42b24aa488d8ad72f6ecc8de8d59296e0ea17c058d05e4868c9aed5b8bf2e"},"schema_version":"1.0","source":{"id":"2607.16414","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.16414","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"arxiv_version","alias_value":"2607.16414v1","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.16414","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"pith_short_12","alias_value":"DSRFSHCDFBKM","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"pith_short_16","alias_value":"DSRFSHCDFBKMCANZ","created_at":"2026-07-21T00:20:16Z"},{"alias_kind":"pith_short_8","alias_value":"DSRFSHCD","created_at":"2026-07-21T00:20:16Z"}],"graph_snapshots":[{"event_id":"sha256:7db0558f84cdaaa832533abe23288770034a120637b9a3d5dbc5c9de0ad03b24","target":"graph","created_at":"2026-07-21T00:20:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.16414/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Artificial intelligence (AI) systems are now ubiquitous across domains such as security, finance, healthcare, consumer technology, and large-scale cloud services, where they process massive volumes of data and make consequential decisions daily. This widespread adoption has created a broad attack surface through which adversaries can manipulate, evade, extract information from, or otherwise subvert deployed models. Depending on system design and exposure, attackers may have very different forms of access: some observe only final decisions, while others receive confidence scores, intermediate r","authors_text":"Amir Sadovnik, Anthony Ayodele, Chris Rugenstein, Donald Coulter, Edmon Begoli, Maria Mahbub, Steven Young","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T18:05:47Z","title":"Signal-based Model Access Risk Analysis for AI System Operations Security"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.16414","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a411768e77ae610cc3e725b06578871210020921bc3c2a4c34d53d24eae1556a","target":"record","created_at":"2026-07-21T00:20:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c11bb96d9e726cab7291ff74da4976017b7fc20e472200f7caa90598263df62","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T18:05:47Z","title_canon_sha256":"6ad42b24aa488d8ad72f6ecc8de8d59296e0ea17c058d05e4868c9aed5b8bf2e"},"schema_version":"1.0","source":{"id":"2607.16414","kind":"arxiv","version":1}},"canonical_sha256":"1ca2591c432854c101b955dcd43c540b13873cc5cb9de286ff65e1e3e83f89b6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1ca2591c432854c101b955dcd43c540b13873cc5cb9de286ff65e1e3e83f89b6","first_computed_at":"2026-07-21T00:20:16.876583Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-21T00:20:16.876583Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7gHBH+lSH3pBdy1aLsd2F/UbiNhzACB0EnZgLqInasRkszXL1F7X1TtGmaVeIcYXWsBlfvprWjEXKJlt9d/WAg==","signature_status":"signed_v1","signed_at":"2026-07-21T00:20:16.877467Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.16414","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a411768e77ae610cc3e725b06578871210020921bc3c2a4c34d53d24eae1556a","sha256:7db0558f84cdaaa832533abe23288770034a120637b9a3d5dbc5c9de0ad03b24"],"state_sha256":"5eb60744d3c9872eb7655876ada81a6982c6efabe2b489a1b5c24efec4ae281c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0lv8TuXa9lmsLQ3kc9+y5wQGRoL4q5VoT8gAuik54MntgqSuCZKYQAtN1vaExIM1mhhsW80Fs5jilNCI0eyJAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T21:48:09.400816Z","bundle_sha256":"62666df81c710a644de55ecd19c33ddbf8322a0e14e48762e66c686497a831ab"}}