{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:I4ZTPQDU45RNANETQRGHX3Q4O4","short_pith_number":"pith:I4ZTPQDU","canonical_record":{"source":{"id":"2608.02670","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T14:26:12Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6a4d9f8109fe4ef6baac6eb518ad02d5ad2d069bc08f32cc83acd435ccc3d992","abstract_canon_sha256":"8a0c8ebdb60af07a94abf16c2f2aaf61f197e6fe5c98d9d356027345d398ca99"},"schema_version":"1.0"},"canonical_sha256":"473337c074e762d03493844c7bee1c773ed4898b35dbd27875251ad53a44457f","source":{"kind":"arxiv","id":"2608.02670","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.02670","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"arxiv_version","alias_value":"2608.02670v1","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.02670","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"pith_short_12","alias_value":"I4ZTPQDU45RN","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"pith_short_16","alias_value":"I4ZTPQDU45RNANET","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"pith_short_8","alias_value":"I4ZTPQDU","created_at":"2026-08-05T00:38:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:I4ZTPQDU45RNANETQRGHX3Q4O4","target":"record","payload":{"canonical_record":{"source":{"id":"2608.02670","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T14:26:12Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6a4d9f8109fe4ef6baac6eb518ad02d5ad2d069bc08f32cc83acd435ccc3d992","abstract_canon_sha256":"8a0c8ebdb60af07a94abf16c2f2aaf61f197e6fe5c98d9d356027345d398ca99"},"schema_version":"1.0"},"canonical_sha256":"473337c074e762d03493844c7bee1c773ed4898b35dbd27875251ad53a44457f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T00:38:38.913292Z","signature_b64":"vZb5WU3sPyJPraXdo+E7y/pvFlS7fqp0vuPBkoxj78TRhoCSXx6xWxNEzH4HHlN5m1XGMY9VjfE2EvvxnGhiDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"473337c074e762d03493844c7bee1c773ed4898b35dbd27875251ad53a44457f","last_reissued_at":"2026-08-05T00:38:38.910796Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T00:38:38.910796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.02670","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:38:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wEgLTFLFD1qI4zG2vMXJDaooSBT5kEWb2DRYIeCkydS8qGH26z50x5rvtx9I24Cfu3ixCVF1UQ4aHf5ekoY0DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T09:43:57.668919Z"},"content_sha256":"d9a32aa83f33c59616fc8f0a175732bbf4e8bd51e8b9cff6de94cd2ee54e1029","schema_version":"1.0","event_id":"sha256:d9a32aa83f33c59616fc8f0a175732bbf4e8bd51e8b9cff6de94cd2ee54e1029"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:I4ZTPQDU45RNANETQRGHX3Q4O4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Dotan Davidovich, Hai Rozencwajg, Or Hiltch, Yair Amar","submitted_at":"2026-08-02T14:26:12Z","abstract_excerpt":"Coding agents increasingly run inside organizations whose security controls (scoped credentials, restricted egress, read-only filesystems, non-root execution) constrain them like any other software. Existing benchmarks, however, evaluate agents almost exclusively in permissive sandboxes, so it is unknown how performance changes when policy is enforced. In this work, we evaluate 12 coding agents on Terminal-Bench 2.1 across nested security policy levels derived from common real-world enterprise restrictions. Hardening is never free but far from uniform: under the strictest policy, success losse"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.02670","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.02670/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:38:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1EoyqPm0lAVnU9JiVv8/Sysp/TDtb02w0MHRvHS4a9C8BuuCQ2gzkAp1K4EdzPX6Ojo1fh8gM1K1SvndXXJUAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T09:43:57.669807Z"},"content_sha256":"2a3f827a3d11b741fc50804df0a38b5397b04ebed8c5c993a488ad8e150770b3","schema_version":"1.0","event_id":"sha256:2a3f827a3d11b741fc50804df0a38b5397b04ebed8c5c993a488ad8e150770b3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I4ZTPQDU45RNANETQRGHX3Q4O4/bundle.json","state_url":"https://pith.science/pith/I4ZTPQDU45RNANETQRGHX3Q4O4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I4ZTPQDU45RNANETQRGHX3Q4O4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T09:43:57Z","links":{"resolver":"https://pith.science/pith/I4ZTPQDU45RNANETQRGHX3Q4O4","bundle":"https://pith.science/pith/I4ZTPQDU45RNANETQRGHX3Q4O4/bundle.json","state":"https://pith.science/pith/I4ZTPQDU45RNANETQRGHX3Q4O4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I4ZTPQDU45RNANETQRGHX3Q4O4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:I4ZTPQDU45RNANETQRGHX3Q4O4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8a0c8ebdb60af07a94abf16c2f2aaf61f197e6fe5c98d9d356027345d398ca99","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T14:26:12Z","title_canon_sha256":"6a4d9f8109fe4ef6baac6eb518ad02d5ad2d069bc08f32cc83acd435ccc3d992"},"schema_version":"1.0","source":{"id":"2608.02670","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.02670","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"arxiv_version","alias_value":"2608.02670v1","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.02670","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"pith_short_12","alias_value":"I4ZTPQDU45RN","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"pith_short_16","alias_value":"I4ZTPQDU45RNANET","created_at":"2026-08-05T00:38:38Z"},{"alias_kind":"pith_short_8","alias_value":"I4ZTPQDU","created_at":"2026-08-05T00:38:38Z"}],"graph_snapshots":[{"event_id":"sha256:2a3f827a3d11b741fc50804df0a38b5397b04ebed8c5c993a488ad8e150770b3","target":"graph","created_at":"2026-08-05T00:38:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.02670/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Coding agents increasingly run inside organizations whose security controls (scoped credentials, restricted egress, read-only filesystems, non-root execution) constrain them like any other software. Existing benchmarks, however, evaluate agents almost exclusively in permissive sandboxes, so it is unknown how performance changes when policy is enforced. In this work, we evaluate 12 coding agents on Terminal-Bench 2.1 across nested security policy levels derived from common real-world enterprise restrictions. Hardening is never free but far from uniform: under the strictest policy, success losse","authors_text":"Dotan Davidovich, Hai Rozencwajg, Or Hiltch, Yair Amar","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.02670","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d9a32aa83f33c59616fc8f0a175732bbf4e8bd51e8b9cff6de94cd2ee54e1029","target":"record","created_at":"2026-08-05T00:38:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8a0c8ebdb60af07a94abf16c2f2aaf61f197e6fe5c98d9d356027345d398ca99","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T14:26:12Z","title_canon_sha256":"6a4d9f8109fe4ef6baac6eb518ad02d5ad2d069bc08f32cc83acd435ccc3d992"},"schema_version":"1.0","source":{"id":"2608.02670","kind":"arxiv","version":1}},"canonical_sha256":"473337c074e762d03493844c7bee1c773ed4898b35dbd27875251ad53a44457f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"473337c074e762d03493844c7bee1c773ed4898b35dbd27875251ad53a44457f","first_computed_at":"2026-08-05T00:38:38.910796Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T00:38:38.910796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vZb5WU3sPyJPraXdo+E7y/pvFlS7fqp0vuPBkoxj78TRhoCSXx6xWxNEzH4HHlN5m1XGMY9VjfE2EvvxnGhiDw==","signature_status":"signed_v1","signed_at":"2026-08-05T00:38:38.913292Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.02670","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d9a32aa83f33c59616fc8f0a175732bbf4e8bd51e8b9cff6de94cd2ee54e1029","sha256:2a3f827a3d11b741fc50804df0a38b5397b04ebed8c5c993a488ad8e150770b3"],"state_sha256":"c992b4b9e4639ca3edc662f03b1efb7feff6192edc9d8b0a0ed4971a132d4204"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8ChjkoKy9LSPxJGQIQsiTeVjJtnzTzNqhtFIditzk2sMgGtDaHatQwp1PiCClwqYNuwEMv7pQiSAfXUB9sQ/BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T09:43:57.676546Z","bundle_sha256":"78ffa02caf9c9b4d4a584493dd1646c33f1f9ca01d214b12806c18fe3b731eaf"}}