{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:H446ZKVILNUKOANRN43EFXUMMA","short_pith_number":"pith:H446ZKVI","canonical_record":{"source":{"id":"2506.07379","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.DC","submitted_at":"2025-06-09T02:58:42Z","cross_cats_sorted":[],"title_canon_sha256":"4460d71426656955def5cb28fe87a2edea885742da78721d323fcc80f182182e","abstract_canon_sha256":"dcd725dd9a2cc9775f7faeda7ea0b485fd3ad981d8c0cf7dfe84636c89febe90"},"schema_version":"1.0"},"canonical_sha256":"3f39ecaaa85b68a701b16f3642de8c6030d126af02443ea026545d9dc343d6b9","source":{"kind":"arxiv","id":"2506.07379","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07379","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07379v1","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07379","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_12","alias_value":"H446ZKVILNUK","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_16","alias_value":"H446ZKVILNUKOANR","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_8","alias_value":"H446ZKVI","created_at":"2026-07-05T11:18:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:H446ZKVILNUKOANRN43EFXUMMA","target":"record","payload":{"canonical_record":{"source":{"id":"2506.07379","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.DC","submitted_at":"2025-06-09T02:58:42Z","cross_cats_sorted":[],"title_canon_sha256":"4460d71426656955def5cb28fe87a2edea885742da78721d323fcc80f182182e","abstract_canon_sha256":"dcd725dd9a2cc9775f7faeda7ea0b485fd3ad981d8c0cf7dfe84636c89febe90"},"schema_version":"1.0"},"canonical_sha256":"3f39ecaaa85b68a701b16f3642de8c6030d126af02443ea026545d9dc343d6b9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:18:26.179574Z","signature_b64":"DE4Q4L4eFzpudbTZW6kLwhTdVyNlSMhfNv1aFiITM9C5VcDUkgOjav+4umYC324Q6uI7s8AELOPe58rL4sq+Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3f39ecaaa85b68a701b16f3642de8c6030d126af02443ea026545d9dc343d6b9","last_reissued_at":"2026-07-05T11:18:26.179106Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:18:26.179106Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.07379","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hmCvzf/fNvGr4q6YBTpqMc/llZjmsf6yPkR88T7OCIsYVGb2cphu+UIqW8h5CNeSfrC+AH29UAMiaavT/uKBAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:16:04.726245Z"},"content_sha256":"0b07a6d7a8fbb2bee9a88121854175831b0638c4ef042ff3aab3e5d3c2a616ac","schema_version":"1.0","event_id":"sha256:0b07a6d7a8fbb2bee9a88121854175831b0638c4ef042ff3aab3e5d3c2a616ac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:H446ZKVILNUKOANRN43EFXUMMA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Addressing tokens dynamic generation, propagation, storage and renewal to secure the GlideinWMS pilot based jobs and system","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.DC","authors_text":"Bruno Moreira Coimbra, Marco Mambelli","submitted_at":"2025-06-09T02:58:42Z","abstract_excerpt":"GlideinWMS has been one of the first middleware in the WLCG community to transition from X.509 to support also tokens. The first step was to get from the prototype in 2019 to using tokens in production in 2022. This paper will present the challenges introduced by the wider adoption of tokens and the evolution plans for securing the pilot infrastructure of GlideinWMS and supporting the new requirements. In the last couple of years, the GlideinWMS team supported the migration of experiments and resources to tokens. Inadequate support in the current infrastructure, more stringent requirements, an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07379","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.07379/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PkbdsHj+366zO/YVoih8CxZoLYo811UTWmo7S2poIkz1cm1VWwEBq4jlF7h5FmMAPnzWliEH0+t3OY+jsbkCDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:16:04.726745Z"},"content_sha256":"b67cc0325d4ade2bf05e2eab82e5d18233a99e698bbdee93f891aa385ad2ffef","schema_version":"1.0","event_id":"sha256:b67cc0325d4ade2bf05e2eab82e5d18233a99e698bbdee93f891aa385ad2ffef"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H446ZKVILNUKOANRN43EFXUMMA/bundle.json","state_url":"https://pith.science/pith/H446ZKVILNUKOANRN43EFXUMMA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H446ZKVILNUKOANRN43EFXUMMA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T12:16:04Z","links":{"resolver":"https://pith.science/pith/H446ZKVILNUKOANRN43EFXUMMA","bundle":"https://pith.science/pith/H446ZKVILNUKOANRN43EFXUMMA/bundle.json","state":"https://pith.science/pith/H446ZKVILNUKOANRN43EFXUMMA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H446ZKVILNUKOANRN43EFXUMMA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:H446ZKVILNUKOANRN43EFXUMMA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dcd725dd9a2cc9775f7faeda7ea0b485fd3ad981d8c0cf7dfe84636c89febe90","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.DC","submitted_at":"2025-06-09T02:58:42Z","title_canon_sha256":"4460d71426656955def5cb28fe87a2edea885742da78721d323fcc80f182182e"},"schema_version":"1.0","source":{"id":"2506.07379","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07379","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07379v1","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07379","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_12","alias_value":"H446ZKVILNUK","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_16","alias_value":"H446ZKVILNUKOANR","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_8","alias_value":"H446ZKVI","created_at":"2026-07-05T11:18:26Z"}],"graph_snapshots":[{"event_id":"sha256:b67cc0325d4ade2bf05e2eab82e5d18233a99e698bbdee93f891aa385ad2ffef","target":"graph","created_at":"2026-07-05T11:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07379/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"GlideinWMS has been one of the first middleware in the WLCG community to transition from X.509 to support also tokens. The first step was to get from the prototype in 2019 to using tokens in production in 2022. This paper will present the challenges introduced by the wider adoption of tokens and the evolution plans for securing the pilot infrastructure of GlideinWMS and supporting the new requirements. In the last couple of years, the GlideinWMS team supported the migration of experiments and resources to tokens. Inadequate support in the current infrastructure, more stringent requirements, an","authors_text":"Bruno Moreira Coimbra, Marco Mambelli","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.DC","submitted_at":"2025-06-09T02:58:42Z","title":"Addressing tokens dynamic generation, propagation, storage and renewal to secure the GlideinWMS pilot based jobs and system"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07379","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0b07a6d7a8fbb2bee9a88121854175831b0638c4ef042ff3aab3e5d3c2a616ac","target":"record","created_at":"2026-07-05T11:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dcd725dd9a2cc9775f7faeda7ea0b485fd3ad981d8c0cf7dfe84636c89febe90","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.DC","submitted_at":"2025-06-09T02:58:42Z","title_canon_sha256":"4460d71426656955def5cb28fe87a2edea885742da78721d323fcc80f182182e"},"schema_version":"1.0","source":{"id":"2506.07379","kind":"arxiv","version":1}},"canonical_sha256":"3f39ecaaa85b68a701b16f3642de8c6030d126af02443ea026545d9dc343d6b9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3f39ecaaa85b68a701b16f3642de8c6030d126af02443ea026545d9dc343d6b9","first_computed_at":"2026-07-05T11:18:26.179106Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:18:26.179106Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DE4Q4L4eFzpudbTZW6kLwhTdVyNlSMhfNv1aFiITM9C5VcDUkgOjav+4umYC324Q6uI7s8AELOPe58rL4sq+Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:18:26.179574Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07379","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0b07a6d7a8fbb2bee9a88121854175831b0638c4ef042ff3aab3e5d3c2a616ac","sha256:b67cc0325d4ade2bf05e2eab82e5d18233a99e698bbdee93f891aa385ad2ffef"],"state_sha256":"d73abe00cf749b6b5b291c0f169448b1283a6fcd01e9b7bf7f87f7257be8bf26"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aNu+jESJ1IN/CFlFwOIeE/NvST1KUj0IhbIEDEmil3yDjYTWYkX+Pz9Q8blBwENWRdic5iA2/f/RC+wGiycyDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T12:16:04.732254Z","bundle_sha256":"5906249ac77c9661efc7fd8b0a5c3b0af66b2030a6146b38853d2d47e4a32eec"}}