{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HNC4QP6OSW7HIHRSJRSW5AKRBY","short_pith_number":"pith:HNC4QP6O","canonical_record":{"source":{"id":"2506.11697","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-06-13T11:59:04Z","cross_cats_sorted":[],"title_canon_sha256":"5d4e82122e4ea1305967b78d53893b120d52f2238bed54e6e1677897efee6881","abstract_canon_sha256":"a2ce667492d6f066d61fb7fb330a20a4c098f3a1a1d01e3918b936a4a7af0ee8"},"schema_version":"1.0"},"canonical_sha256":"3b45c83fce95be741e324c656e81510e2b4bc0e2ead0fe8894cfbbb54fb5299c","source":{"kind":"arxiv","id":"2506.11697","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.11697","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"arxiv_version","alias_value":"2506.11697v1","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.11697","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"pith_short_12","alias_value":"HNC4QP6OSW7H","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"pith_short_16","alias_value":"HNC4QP6OSW7HIHRS","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"pith_short_8","alias_value":"HNC4QP6O","created_at":"2026-07-05T11:21:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HNC4QP6OSW7HIHRSJRSW5AKRBY","target":"record","payload":{"canonical_record":{"source":{"id":"2506.11697","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-06-13T11:59:04Z","cross_cats_sorted":[],"title_canon_sha256":"5d4e82122e4ea1305967b78d53893b120d52f2238bed54e6e1677897efee6881","abstract_canon_sha256":"a2ce667492d6f066d61fb7fb330a20a4c098f3a1a1d01e3918b936a4a7af0ee8"},"schema_version":"1.0"},"canonical_sha256":"3b45c83fce95be741e324c656e81510e2b4bc0e2ead0fe8894cfbbb54fb5299c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:21:09.352852Z","signature_b64":"69A0pL6CltzAnEb32KP0KHEvjvcpEuKZSDtBfY51Motzs72X62yYUq/4dnI/B6ML9jBFdBD7q8bHy9SfWPIADw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3b45c83fce95be741e324c656e81510e2b4bc0e2ead0fe8894cfbbb54fb5299c","last_reissued_at":"2026-07-05T11:21:09.352369Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:21:09.352369Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.11697","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:21:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qTRPr5Uq4n2CIQHk1NgrTSEU1Oc7IGvUlG9jLNwB5/67sHp9I7XeBkaUaSjJlqmkY+SPzt24hoUaKbsQ2+C9BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:23:42.985849Z"},"content_sha256":"f1655478438f0c8f41e6fc95c448345949ea0f8504fe33f3d27ae28b61013c8e","schema_version":"1.0","event_id":"sha256:f1655478438f0c8f41e6fc95c448345949ea0f8504fe33f3d27ae28b61013c8e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HNC4QP6OSW7HIHRSJRSW5AKRBY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Automated Vulnerability Repair: Methods, Tools, and Assessments","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Bin Yuan, Deqing Zou, Hai Jin, Kedie Shu, Shenghua Guan, Shouhuai Xu, Yiwei Hu, Zhen Li","submitted_at":"2025-06-13T11:59:04Z","abstract_excerpt":"The increasing complexity of software has led to the steady growth of vulnerabilities. Vulnerability repair investigates how to fix software vulnerabilities. Manual vulnerability repair is labor-intensive and time-consuming because it relies on human experts, highlighting the importance of Automated Vulnerability Repair (AVR). In this SoK, we present the systematization of AVR methods through the three steps of AVR workflow: vulnerability analysis, patch generation, and patch validation. We assess AVR tools for C/C++ and Java programs as they have been widely studied by the community. Since ex"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.11697","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.11697/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:21:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FVJB5PnhAzSSujwcf7a2op88zotYH6Yzp4IQflHV1OhjpxhZxHDT5vcFvy/Ji8s97JrJeuLSzqDjEqQnuwtpDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:23:42.986466Z"},"content_sha256":"67cf13ddb2e2a264745740afaa4b600b81e37b5167ed34f5cf88b3401fa4f842","schema_version":"1.0","event_id":"sha256:67cf13ddb2e2a264745740afaa4b600b81e37b5167ed34f5cf88b3401fa4f842"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HNC4QP6OSW7HIHRSJRSW5AKRBY/bundle.json","state_url":"https://pith.science/pith/HNC4QP6OSW7HIHRSJRSW5AKRBY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HNC4QP6OSW7HIHRSJRSW5AKRBY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T21:23:42Z","links":{"resolver":"https://pith.science/pith/HNC4QP6OSW7HIHRSJRSW5AKRBY","bundle":"https://pith.science/pith/HNC4QP6OSW7HIHRSJRSW5AKRBY/bundle.json","state":"https://pith.science/pith/HNC4QP6OSW7HIHRSJRSW5AKRBY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HNC4QP6OSW7HIHRSJRSW5AKRBY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HNC4QP6OSW7HIHRSJRSW5AKRBY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a2ce667492d6f066d61fb7fb330a20a4c098f3a1a1d01e3918b936a4a7af0ee8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-06-13T11:59:04Z","title_canon_sha256":"5d4e82122e4ea1305967b78d53893b120d52f2238bed54e6e1677897efee6881"},"schema_version":"1.0","source":{"id":"2506.11697","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.11697","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"arxiv_version","alias_value":"2506.11697v1","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.11697","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"pith_short_12","alias_value":"HNC4QP6OSW7H","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"pith_short_16","alias_value":"HNC4QP6OSW7HIHRS","created_at":"2026-07-05T11:21:09Z"},{"alias_kind":"pith_short_8","alias_value":"HNC4QP6O","created_at":"2026-07-05T11:21:09Z"}],"graph_snapshots":[{"event_id":"sha256:67cf13ddb2e2a264745740afaa4b600b81e37b5167ed34f5cf88b3401fa4f842","target":"graph","created_at":"2026-07-05T11:21:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.11697/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The increasing complexity of software has led to the steady growth of vulnerabilities. Vulnerability repair investigates how to fix software vulnerabilities. Manual vulnerability repair is labor-intensive and time-consuming because it relies on human experts, highlighting the importance of Automated Vulnerability Repair (AVR). In this SoK, we present the systematization of AVR methods through the three steps of AVR workflow: vulnerability analysis, patch generation, and patch validation. We assess AVR tools for C/C++ and Java programs as they have been widely studied by the community. Since ex","authors_text":"Bin Yuan, Deqing Zou, Hai Jin, Kedie Shu, Shenghua Guan, Shouhuai Xu, Yiwei Hu, Zhen Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-06-13T11:59:04Z","title":"SoK: Automated Vulnerability Repair: Methods, Tools, and Assessments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.11697","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f1655478438f0c8f41e6fc95c448345949ea0f8504fe33f3d27ae28b61013c8e","target":"record","created_at":"2026-07-05T11:21:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a2ce667492d6f066d61fb7fb330a20a4c098f3a1a1d01e3918b936a4a7af0ee8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-06-13T11:59:04Z","title_canon_sha256":"5d4e82122e4ea1305967b78d53893b120d52f2238bed54e6e1677897efee6881"},"schema_version":"1.0","source":{"id":"2506.11697","kind":"arxiv","version":1}},"canonical_sha256":"3b45c83fce95be741e324c656e81510e2b4bc0e2ead0fe8894cfbbb54fb5299c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3b45c83fce95be741e324c656e81510e2b4bc0e2ead0fe8894cfbbb54fb5299c","first_computed_at":"2026-07-05T11:21:09.352369Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:21:09.352369Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"69A0pL6CltzAnEb32KP0KHEvjvcpEuKZSDtBfY51Motzs72X62yYUq/4dnI/B6ML9jBFdBD7q8bHy9SfWPIADw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:21:09.352852Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.11697","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f1655478438f0c8f41e6fc95c448345949ea0f8504fe33f3d27ae28b61013c8e","sha256:67cf13ddb2e2a264745740afaa4b600b81e37b5167ed34f5cf88b3401fa4f842"],"state_sha256":"7dd4d51952110bdf730da609d6e5d19bbd8fb32e51696883a8bba33ac63ab1fc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xdChfN4TNsQ/8ucCdcLgn3bEmnArgZSzjcTUd2IBmMiFw0XouuTqgXx7jmp9R1jXaa2Bh/Yc6g1ZRPHfHm68BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T21:23:42.992187Z","bundle_sha256":"e51cd678d023143f3a5c083e384d2b98ed457835790613cd223ff6ac31c147fb"}}