{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HWKAD76UBG7DKC5ACD7X4E7B7I","short_pith_number":"pith:HWKAD76U","canonical_record":{"source":{"id":"2409.02074","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T17:22:00Z","cross_cats_sorted":["cs.HC","cs.LG","cs.SE"],"title_canon_sha256":"6e04414c4009392543a7c00d07a3f5a7372630d8196da44c0f4128f68a112d45","abstract_canon_sha256":"873a4b4cd4668ce4c2fd778432dc6732d1bbad66833c3490b7fb59b37585bccd"},"schema_version":"1.0"},"canonical_sha256":"3d9401ffd409be350ba010ff7e13e1fa361737d4033dc13cfe8ae03891441085","source":{"kind":"arxiv","id":"2409.02074","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.02074","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"arxiv_version","alias_value":"2409.02074v1","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.02074","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"pith_short_12","alias_value":"HWKAD76UBG7D","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"pith_short_16","alias_value":"HWKAD76UBG7DKC5A","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"pith_short_8","alias_value":"HWKAD76U","created_at":"2026-07-05T09:02:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HWKAD76UBG7DKC5ACD7X4E7B7I","target":"record","payload":{"canonical_record":{"source":{"id":"2409.02074","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T17:22:00Z","cross_cats_sorted":["cs.HC","cs.LG","cs.SE"],"title_canon_sha256":"6e04414c4009392543a7c00d07a3f5a7372630d8196da44c0f4128f68a112d45","abstract_canon_sha256":"873a4b4cd4668ce4c2fd778432dc6732d1bbad66833c3490b7fb59b37585bccd"},"schema_version":"1.0"},"canonical_sha256":"3d9401ffd409be350ba010ff7e13e1fa361737d4033dc13cfe8ae03891441085","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:02:38.326452Z","signature_b64":"2KQfk8y9hJwbr2IN35sgI/RvmoQHUi0/g6Zo+qzKqprT91m8aor2ZKnm4cQluFMTkhmbT6VJoM8bBYSPzfqQDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3d9401ffd409be350ba010ff7e13e1fa361737d4033dc13cfe8ae03891441085","last_reissued_at":"2026-07-05T09:02:38.325836Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:02:38.325836Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.02074","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OW249K1kH1yK+z5H82UP9P02VqnKR7XednjrZH9QlfEOy6FBGSmsunA1q348vTH7SYxlZaVEVKXuZ/FuMMkeDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:25:48.547157Z"},"content_sha256":"6530af12d31ddca376d0f14e2c2ae1249d8ba6177cfc78ea8e60a360e40c4f87","schema_version":"1.0","event_id":"sha256:6530af12d31ddca376d0f14e2c2ae1249d8ba6177cfc78ea8e60a360e40c4f87"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HWKAD76UBG7DKC5ACD7X4E7B7I","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RACONTEUR: A Knowledgeable, Insightful, and Portable LLM-Powered Shell Command Explainer","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.HC","cs.LG","cs.SE"],"primary_cat":"cs.CR","authors_text":"(2) Ant Group), Haiqin Weng (2), Jiangyi Deng (1), Tao Wei (2), Wenyuan Xu (1) ((1) Zhejiang University, Xinfeng Li (1), Yanjiao Chen (1), Yan Liu (2), Yijie Bai (1)","submitted_at":"2024-09-03T17:22:00Z","abstract_excerpt":"Malicious shell commands are linchpins to many cyber-attacks, but may not be easy to understand by security analysts due to complicated and often disguised code structures. Advances in large language models (LLMs) have unlocked the possibility of generating understandable explanations for shell commands. However, existing general-purpose LLMs suffer from a lack of expert knowledge and a tendency to hallucinate in the task of shell command explanation. In this paper, we present Raconteur, a knowledgeable, expressive and portable shell command explainer powered by LLM. Raconteur is infused with "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.02074","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.02074/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZlSv6ytUsqDUoYU0yt5WWnYtYAiUJTVuQg4p+W+1/whxY1mfPU4z2v24HaxmkaKbj/e6vLdW76VvmaxeSozsDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:25:48.547658Z"},"content_sha256":"2ca02bbe260873ff1d2be5460e106d8f9293ddbc9999204f15a580c7e7b370c9","schema_version":"1.0","event_id":"sha256:2ca02bbe260873ff1d2be5460e106d8f9293ddbc9999204f15a580c7e7b370c9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HWKAD76UBG7DKC5ACD7X4E7B7I/bundle.json","state_url":"https://pith.science/pith/HWKAD76UBG7DKC5ACD7X4E7B7I/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HWKAD76UBG7DKC5ACD7X4E7B7I/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T11:25:48Z","links":{"resolver":"https://pith.science/pith/HWKAD76UBG7DKC5ACD7X4E7B7I","bundle":"https://pith.science/pith/HWKAD76UBG7DKC5ACD7X4E7B7I/bundle.json","state":"https://pith.science/pith/HWKAD76UBG7DKC5ACD7X4E7B7I/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HWKAD76UBG7DKC5ACD7X4E7B7I/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HWKAD76UBG7DKC5ACD7X4E7B7I","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"873a4b4cd4668ce4c2fd778432dc6732d1bbad66833c3490b7fb59b37585bccd","cross_cats_sorted":["cs.HC","cs.LG","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T17:22:00Z","title_canon_sha256":"6e04414c4009392543a7c00d07a3f5a7372630d8196da44c0f4128f68a112d45"},"schema_version":"1.0","source":{"id":"2409.02074","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.02074","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"arxiv_version","alias_value":"2409.02074v1","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.02074","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"pith_short_12","alias_value":"HWKAD76UBG7D","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"pith_short_16","alias_value":"HWKAD76UBG7DKC5A","created_at":"2026-07-05T09:02:38Z"},{"alias_kind":"pith_short_8","alias_value":"HWKAD76U","created_at":"2026-07-05T09:02:38Z"}],"graph_snapshots":[{"event_id":"sha256:2ca02bbe260873ff1d2be5460e106d8f9293ddbc9999204f15a580c7e7b370c9","target":"graph","created_at":"2026-07-05T09:02:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.02074/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious shell commands are linchpins to many cyber-attacks, but may not be easy to understand by security analysts due to complicated and often disguised code structures. Advances in large language models (LLMs) have unlocked the possibility of generating understandable explanations for shell commands. However, existing general-purpose LLMs suffer from a lack of expert knowledge and a tendency to hallucinate in the task of shell command explanation. In this paper, we present Raconteur, a knowledgeable, expressive and portable shell command explainer powered by LLM. Raconteur is infused with ","authors_text":"(2) Ant Group), Haiqin Weng (2), Jiangyi Deng (1), Tao Wei (2), Wenyuan Xu (1) ((1) Zhejiang University, Xinfeng Li (1), Yanjiao Chen (1), Yan Liu (2), Yijie Bai (1)","cross_cats":["cs.HC","cs.LG","cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T17:22:00Z","title":"RACONTEUR: A Knowledgeable, Insightful, and Portable LLM-Powered Shell Command Explainer"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.02074","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6530af12d31ddca376d0f14e2c2ae1249d8ba6177cfc78ea8e60a360e40c4f87","target":"record","created_at":"2026-07-05T09:02:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"873a4b4cd4668ce4c2fd778432dc6732d1bbad66833c3490b7fb59b37585bccd","cross_cats_sorted":["cs.HC","cs.LG","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-03T17:22:00Z","title_canon_sha256":"6e04414c4009392543a7c00d07a3f5a7372630d8196da44c0f4128f68a112d45"},"schema_version":"1.0","source":{"id":"2409.02074","kind":"arxiv","version":1}},"canonical_sha256":"3d9401ffd409be350ba010ff7e13e1fa361737d4033dc13cfe8ae03891441085","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3d9401ffd409be350ba010ff7e13e1fa361737d4033dc13cfe8ae03891441085","first_computed_at":"2026-07-05T09:02:38.325836Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:02:38.325836Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2KQfk8y9hJwbr2IN35sgI/RvmoQHUi0/g6Zo+qzKqprT91m8aor2ZKnm4cQluFMTkhmbT6VJoM8bBYSPzfqQDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:02:38.326452Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.02074","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6530af12d31ddca376d0f14e2c2ae1249d8ba6177cfc78ea8e60a360e40c4f87","sha256:2ca02bbe260873ff1d2be5460e106d8f9293ddbc9999204f15a580c7e7b370c9"],"state_sha256":"e7a0a899ccce603e6ec649ee46398aaa13c3cd381fceae75474c4df8869c7c68"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TZjeFnKxe+qtNBPezwjlPlJQPQCj3qyErATbVPXu4F7Mn2KO9IlOIJt0CoCw1nzU9S88aP+wKerNwSX1N8kXCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T11:25:48.554734Z","bundle_sha256":"5af2dc2aae2fa658a62052d9eea6e8f4a2acbbad9daeedbc935f55b06e8effea"}}