{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DZ4D4IKH7VPBYK5BVSFNYM6TOR","short_pith_number":"pith:DZ4D4IKH","canonical_record":{"source":{"id":"2505.01028","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-02T05:55:56Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"434f34b600da7d1d65b43cbf523508e6d101b35ea0fecb800bc52c3af9fa64e8","abstract_canon_sha256":"5f4b991fa46f4083b67dd0d1f0f4f1eb812fdf7170bf0e5562722f00660f12f0"},"schema_version":"1.0"},"canonical_sha256":"1e783e2147fd5e1c2ba1ac8adc33d3744669eb9dec25a9b97bac48113b242f66","source":{"kind":"arxiv","id":"2505.01028","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.01028","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"arxiv_version","alias_value":"2505.01028v1","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.01028","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"pith_short_12","alias_value":"DZ4D4IKH7VPB","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"pith_short_16","alias_value":"DZ4D4IKH7VPBYK5B","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"pith_short_8","alias_value":"DZ4D4IKH","created_at":"2026-07-05T10:57:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DZ4D4IKH7VPBYK5BVSFNYM6TOR","target":"record","payload":{"canonical_record":{"source":{"id":"2505.01028","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-02T05:55:56Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"434f34b600da7d1d65b43cbf523508e6d101b35ea0fecb800bc52c3af9fa64e8","abstract_canon_sha256":"5f4b991fa46f4083b67dd0d1f0f4f1eb812fdf7170bf0e5562722f00660f12f0"},"schema_version":"1.0"},"canonical_sha256":"1e783e2147fd5e1c2ba1ac8adc33d3744669eb9dec25a9b97bac48113b242f66","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:57:43.845441Z","signature_b64":"lj+xjEUnOWrGxRhb0CbdOFwUpe7cltwc5w+rfVBytUtEkSdkyWbizuT4U4xWAHeiECk+0siqkNH6PrbxzbyLCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1e783e2147fd5e1c2ba1ac8adc33d3744669eb9dec25a9b97bac48113b242f66","last_reissued_at":"2026-07-05T10:57:43.844914Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:57:43.844914Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.01028","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kiHoAf0+NjKqoUxHV7l1qU8rRhqFq4gMfBvhQjhEajWVAmU5GFZASfVsNj1yhG1xiDuFK9IY88g/WbcLKUDBCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T23:03:17.275985Z"},"content_sha256":"4eae53051b29ee01179f7f9e7473eb536171ce2c9ed61c786b6635e0366174da","schema_version":"1.0","event_id":"sha256:4eae53051b29ee01179f7f9e7473eb536171ce2c9ed61c786b6635e0366174da"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DZ4D4IKH7VPBYK5BVSFNYM6TOR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adaptive Wizard for Removing Cross-Tier Misconfigurations in Active Directory","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.AI","authors_text":"Hung Nguyen, Huy Q. Ngo, Mingyu Guo","submitted_at":"2025-05-02T05:55:56Z","abstract_excerpt":"Security vulnerabilities in Windows Active Directory (AD) systems are typically modeled using an attack graph and hardening AD systems involves an iterative workflow: security teams propose an edge to remove, and IT operations teams manually review these fixes before implementing the removal. As verification requires significant manual effort, we formulate an Adaptive Path Removal Problem to minimize the number of steps in this iterative removal process. In our model, a wizard proposes an attack path in each step and presents it as a set of multiple-choice options to the IT admin. The IT admin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.01028","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.01028/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7wiyYzUXruO/3jSbCQZkzPzALKm3/nFKSPyLcU1SZ4b4sACWP72KrJs551Yis/c3zbk1SL3IlTy8Qr2Yj2j6Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T23:03:17.276308Z"},"content_sha256":"9601903b6c0542b264b80688d0173ca11037e9360d5ddf63c12d389b9e69b6fe","schema_version":"1.0","event_id":"sha256:9601903b6c0542b264b80688d0173ca11037e9360d5ddf63c12d389b9e69b6fe"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DZ4D4IKH7VPBYK5BVSFNYM6TOR/bundle.json","state_url":"https://pith.science/pith/DZ4D4IKH7VPBYK5BVSFNYM6TOR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DZ4D4IKH7VPBYK5BVSFNYM6TOR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T23:03:17Z","links":{"resolver":"https://pith.science/pith/DZ4D4IKH7VPBYK5BVSFNYM6TOR","bundle":"https://pith.science/pith/DZ4D4IKH7VPBYK5BVSFNYM6TOR/bundle.json","state":"https://pith.science/pith/DZ4D4IKH7VPBYK5BVSFNYM6TOR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DZ4D4IKH7VPBYK5BVSFNYM6TOR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DZ4D4IKH7VPBYK5BVSFNYM6TOR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5f4b991fa46f4083b67dd0d1f0f4f1eb812fdf7170bf0e5562722f00660f12f0","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-02T05:55:56Z","title_canon_sha256":"434f34b600da7d1d65b43cbf523508e6d101b35ea0fecb800bc52c3af9fa64e8"},"schema_version":"1.0","source":{"id":"2505.01028","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.01028","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"arxiv_version","alias_value":"2505.01028v1","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.01028","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"pith_short_12","alias_value":"DZ4D4IKH7VPB","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"pith_short_16","alias_value":"DZ4D4IKH7VPBYK5B","created_at":"2026-07-05T10:57:43Z"},{"alias_kind":"pith_short_8","alias_value":"DZ4D4IKH","created_at":"2026-07-05T10:57:43Z"}],"graph_snapshots":[{"event_id":"sha256:9601903b6c0542b264b80688d0173ca11037e9360d5ddf63c12d389b9e69b6fe","target":"graph","created_at":"2026-07-05T10:57:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.01028/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security vulnerabilities in Windows Active Directory (AD) systems are typically modeled using an attack graph and hardening AD systems involves an iterative workflow: security teams propose an edge to remove, and IT operations teams manually review these fixes before implementing the removal. As verification requires significant manual effort, we formulate an Adaptive Path Removal Problem to minimize the number of steps in this iterative removal process. In our model, a wizard proposes an attack path in each step and presents it as a set of multiple-choice options to the IT admin. The IT admin","authors_text":"Hung Nguyen, Huy Q. Ngo, Mingyu Guo","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-02T05:55:56Z","title":"Adaptive Wizard for Removing Cross-Tier Misconfigurations in Active Directory"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.01028","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4eae53051b29ee01179f7f9e7473eb536171ce2c9ed61c786b6635e0366174da","target":"record","created_at":"2026-07-05T10:57:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5f4b991fa46f4083b67dd0d1f0f4f1eb812fdf7170bf0e5562722f00660f12f0","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-02T05:55:56Z","title_canon_sha256":"434f34b600da7d1d65b43cbf523508e6d101b35ea0fecb800bc52c3af9fa64e8"},"schema_version":"1.0","source":{"id":"2505.01028","kind":"arxiv","version":1}},"canonical_sha256":"1e783e2147fd5e1c2ba1ac8adc33d3744669eb9dec25a9b97bac48113b242f66","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1e783e2147fd5e1c2ba1ac8adc33d3744669eb9dec25a9b97bac48113b242f66","first_computed_at":"2026-07-05T10:57:43.844914Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:57:43.844914Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lj+xjEUnOWrGxRhb0CbdOFwUpe7cltwc5w+rfVBytUtEkSdkyWbizuT4U4xWAHeiECk+0siqkNH6PrbxzbyLCA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:57:43.845441Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.01028","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4eae53051b29ee01179f7f9e7473eb536171ce2c9ed61c786b6635e0366174da","sha256:9601903b6c0542b264b80688d0173ca11037e9360d5ddf63c12d389b9e69b6fe"],"state_sha256":"14ff6f2ca40c8fca94be923f0117ab4624df8bf023c6bd4282fd5abd375cbe7f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zNQD15OMm2QssDOZUy8J4VTZL2KeEUAYJMwsnXQ2IWbjQc0z57tZYsei6MMVn8S4p2HceNNZOATL3DvgEvKzDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T23:03:17.280324Z","bundle_sha256":"f84f288656bf070c2b2871b40d3d35d86a61e6ca5c08897819e8e0e0ab38d418"}}