{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:FG75AS3ILJUDE7SKOZ6HTDIMYM","short_pith_number":"pith:FG75AS3I","canonical_record":{"source":{"id":"2608.02001","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-03T10:03:29Z","cross_cats_sorted":[],"title_canon_sha256":"d49821e88eb08871348befd79a5b88ce45d4b2c274b4ea42a3f8affe3db7d5eb","abstract_canon_sha256":"b4478939f1d8604ef71045696a5c1de234db4f1dec4b236d7cfc5092a6f8df98"},"schema_version":"1.0"},"canonical_sha256":"29bfd04b685a68327e4a767c798d0cc30b6e6fcc8f6d4f7fef4a4ade01afb267","source":{"kind":"arxiv","id":"2608.02001","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.02001","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"arxiv_version","alias_value":"2608.02001v1","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.02001","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"pith_short_12","alias_value":"FG75AS3ILJUD","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"pith_short_16","alias_value":"FG75AS3ILJUDE7SK","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"pith_short_8","alias_value":"FG75AS3I","created_at":"2026-08-04T02:10:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:FG75AS3ILJUDE7SKOZ6HTDIMYM","target":"record","payload":{"canonical_record":{"source":{"id":"2608.02001","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-03T10:03:29Z","cross_cats_sorted":[],"title_canon_sha256":"d49821e88eb08871348befd79a5b88ce45d4b2c274b4ea42a3f8affe3db7d5eb","abstract_canon_sha256":"b4478939f1d8604ef71045696a5c1de234db4f1dec4b236d7cfc5092a6f8df98"},"schema_version":"1.0"},"canonical_sha256":"29bfd04b685a68327e4a767c798d0cc30b6e6fcc8f6d4f7fef4a4ade01afb267","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T02:10:28.278996Z","signature_b64":"OV8bNunw0IjgRB0eVyc9FKt1obJRtNHxt8wbcWHjo5uGEXngf8GakOok5KkT/bHcaiWsquQHprH895n2yvKeCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"29bfd04b685a68327e4a767c798d0cc30b6e6fcc8f6d4f7fef4a4ade01afb267","last_reissued_at":"2026-08-04T02:10:28.277253Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T02:10:28.277253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.02001","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:10:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LR7ZNPU9r+b8PzeQLLOCaZuYEvKB2iNTdv3jM8c6mOPnkvRrdlG07b41hqxZtMeyJB80u5rUeImNU3WzSBCPBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T22:40:10.831988Z"},"content_sha256":"4d74cf7ca24d566520d16089736de4cfc4518dc02f3d80f5a461d275684c499b","schema_version":"1.0","event_id":"sha256:4d74cf7ca24d566520d16089736de4cfc4518dc02f3d80f5a461d275684c499b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:FG75AS3ILJUDE7SKOZ6HTDIMYM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VulnGym: Benchmarking Coding Agents for Repository-Level Vulnerability Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Cuiyun Gao, Enze Hu, Hao Chen, Jiachen Liu, Keke Lian, Kexing Ji, Lei Zhang, Tian Dong, Wang Bin, Yongheng Liu","submitted_at":"2026-08-03T10:03:29Z","abstract_excerpt":"Recent advances in LLM-based vulnerability detection have shown promising results, while coding agents further extend this capability from isolated code snippets to complete repositories. This shift requires agents to autonomously explore repositories and locate vulnerability-relevant code, instead of performing detection on preselected functions. However, existing benchmarks primarily focus on vulnerability classification over preselected code snippets, limiting their ability to evaluate coding agents in repository-level vulnerability detection. Moreover, without fine-grained vulnerability tr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.02001","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.02001/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:10:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Za/mL0Qir2R+6e148EWcJxfi0h05+X7VQQauMHE/gq20UXfejp5H/ZKxD4S1XXLD3mJ4iTScHEZflq1DGQdEDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T22:40:10.832555Z"},"content_sha256":"f7969e84ff729aa25f095f3373cd1450abdf65408c484e79ad7eb8213e8c2d35","schema_version":"1.0","event_id":"sha256:f7969e84ff729aa25f095f3373cd1450abdf65408c484e79ad7eb8213e8c2d35"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FG75AS3ILJUDE7SKOZ6HTDIMYM/bundle.json","state_url":"https://pith.science/pith/FG75AS3ILJUDE7SKOZ6HTDIMYM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FG75AS3ILJUDE7SKOZ6HTDIMYM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T22:40:10Z","links":{"resolver":"https://pith.science/pith/FG75AS3ILJUDE7SKOZ6HTDIMYM","bundle":"https://pith.science/pith/FG75AS3ILJUDE7SKOZ6HTDIMYM/bundle.json","state":"https://pith.science/pith/FG75AS3ILJUDE7SKOZ6HTDIMYM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FG75AS3ILJUDE7SKOZ6HTDIMYM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:FG75AS3ILJUDE7SKOZ6HTDIMYM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b4478939f1d8604ef71045696a5c1de234db4f1dec4b236d7cfc5092a6f8df98","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-03T10:03:29Z","title_canon_sha256":"d49821e88eb08871348befd79a5b88ce45d4b2c274b4ea42a3f8affe3db7d5eb"},"schema_version":"1.0","source":{"id":"2608.02001","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.02001","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"arxiv_version","alias_value":"2608.02001v1","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.02001","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"pith_short_12","alias_value":"FG75AS3ILJUD","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"pith_short_16","alias_value":"FG75AS3ILJUDE7SK","created_at":"2026-08-04T02:10:28Z"},{"alias_kind":"pith_short_8","alias_value":"FG75AS3I","created_at":"2026-08-04T02:10:28Z"}],"graph_snapshots":[{"event_id":"sha256:f7969e84ff729aa25f095f3373cd1450abdf65408c484e79ad7eb8213e8c2d35","target":"graph","created_at":"2026-08-04T02:10:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.02001/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in LLM-based vulnerability detection have shown promising results, while coding agents further extend this capability from isolated code snippets to complete repositories. This shift requires agents to autonomously explore repositories and locate vulnerability-relevant code, instead of performing detection on preselected functions. However, existing benchmarks primarily focus on vulnerability classification over preselected code snippets, limiting their ability to evaluate coding agents in repository-level vulnerability detection. Moreover, without fine-grained vulnerability tr","authors_text":"Cuiyun Gao, Enze Hu, Hao Chen, Jiachen Liu, Keke Lian, Kexing Ji, Lei Zhang, Tian Dong, Wang Bin, Yongheng Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-03T10:03:29Z","title":"VulnGym: Benchmarking Coding Agents for Repository-Level Vulnerability Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.02001","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4d74cf7ca24d566520d16089736de4cfc4518dc02f3d80f5a461d275684c499b","target":"record","created_at":"2026-08-04T02:10:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b4478939f1d8604ef71045696a5c1de234db4f1dec4b236d7cfc5092a6f8df98","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-03T10:03:29Z","title_canon_sha256":"d49821e88eb08871348befd79a5b88ce45d4b2c274b4ea42a3f8affe3db7d5eb"},"schema_version":"1.0","source":{"id":"2608.02001","kind":"arxiv","version":1}},"canonical_sha256":"29bfd04b685a68327e4a767c798d0cc30b6e6fcc8f6d4f7fef4a4ade01afb267","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"29bfd04b685a68327e4a767c798d0cc30b6e6fcc8f6d4f7fef4a4ade01afb267","first_computed_at":"2026-08-04T02:10:28.277253Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T02:10:28.277253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OV8bNunw0IjgRB0eVyc9FKt1obJRtNHxt8wbcWHjo5uGEXngf8GakOok5KkT/bHcaiWsquQHprH895n2yvKeCw==","signature_status":"signed_v1","signed_at":"2026-08-04T02:10:28.278996Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.02001","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4d74cf7ca24d566520d16089736de4cfc4518dc02f3d80f5a461d275684c499b","sha256:f7969e84ff729aa25f095f3373cd1450abdf65408c484e79ad7eb8213e8c2d35"],"state_sha256":"52453fff462e7eda0f22223a741fb2d2e9e3dca46ca6441a9a7c50e272670f5d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zh7VHKGFSwywYyobAFfm88OzSRwH1/aovyvTnMcTz+4Rr1iir1UYdKxw7WMi/Vxej6QtrL7Mo8dzu/qUe/5/BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T22:40:10.838796Z","bundle_sha256":"50852bf10af7c93919e7640d111b2b7d086919e12af758fd12cf216c3e14746c"}}