{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:IIWLNVHVAT27RGEESRQ6TWIVI3","short_pith_number":"pith:IIWLNVHV","canonical_record":{"source":{"id":"2103.09510","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-03-17T09:00:02Z","cross_cats_sorted":[],"title_canon_sha256":"6e75ba5688c4dc0160d688ee99ec90dbabfc942cb9f7ab070206a2754272fac3","abstract_canon_sha256":"f7a42a3cc399dbe4b8d238aa9cbb8aaf3cc9752e31f81e09f0a39d56642413b4"},"schema_version":"1.0"},"canonical_sha256":"422cb6d4f504f5f898849461e9d91546c3ea10aba6cdc6599b1907981b8c78bb","source":{"kind":"arxiv","id":"2103.09510","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.09510","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"arxiv_version","alias_value":"2103.09510v1","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.09510","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"pith_short_12","alias_value":"IIWLNVHVAT27","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"pith_short_16","alias_value":"IIWLNVHVAT27RGEE","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"pith_short_8","alias_value":"IIWLNVHV","created_at":"2026-07-05T08:01:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:IIWLNVHVAT27RGEESRQ6TWIVI3","target":"record","payload":{"canonical_record":{"source":{"id":"2103.09510","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-03-17T09:00:02Z","cross_cats_sorted":[],"title_canon_sha256":"6e75ba5688c4dc0160d688ee99ec90dbabfc942cb9f7ab070206a2754272fac3","abstract_canon_sha256":"f7a42a3cc399dbe4b8d238aa9cbb8aaf3cc9752e31f81e09f0a39d56642413b4"},"schema_version":"1.0"},"canonical_sha256":"422cb6d4f504f5f898849461e9d91546c3ea10aba6cdc6599b1907981b8c78bb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:01:55.610091Z","signature_b64":"nORSSZGF7ZWWBYTbF7xvikR4MMaqzdsBLqLvFlA0nriRMy8CBW5PqShIzeoznBwkS3lOyRX+r0hk+AEJ8dl0Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"422cb6d4f504f5f898849461e9d91546c3ea10aba6cdc6599b1907981b8c78bb","last_reissued_at":"2026-07-05T08:01:55.609574Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:01:55.609574Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.09510","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:01:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YrknvlYWfYwa163Rg8EJ1W7+b0GAva0/aqbxTsUvSNtBxsQlYQsVnTHMx6miwaYuqX62WgL992UveYk4ya7xDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:55:42.583837Z"},"content_sha256":"aa07f3137d81aace93ded1b6096a3055945d2f1b0a9c7e7068b6b86650070ab5","schema_version":"1.0","event_id":"sha256:aa07f3137d81aace93ded1b6096a3055945d2f1b0a9c7e7068b6b86650070ab5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:IIWLNVHVAT27RGEESRQ6TWIVI3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Extending SOUP to ML Models When DesigningCertified Medical Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Jere Hel\\'en, Tommi Mikkonen, Tuomas Granlund, Vlad Stirbu","submitted_at":"2021-03-17T09:00:02Z","abstract_excerpt":"Software of Unknown Provenance, SOUP, refers to a software component that is already developed and widely available from a 3rd party, and that has not been developed, to be integrated into a medical device. From regulatory perspective, SOUP software requires special considerations, as the developers' obligations related to design and implementation are not applied to it. In this paper, we consider the implications of extending the concept of SOUP to machine learning (ML) models. As the contribution, we propose practical means to manage the added complexity of 3rd party ML models in regulated d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.09510","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.09510/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:01:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r8xYYxN/AYHy3lTYooQjnMUFv+KTOYEXBieNTXvdlzAt1UvB/Z1osIJQaeMr9etiNshzJLnV8OMx3gpVFTZXDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:55:42.584203Z"},"content_sha256":"05a50113e2a9863b376d6dcc779f8944e4549e9501a9f23e2d94d619997c22fc","schema_version":"1.0","event_id":"sha256:05a50113e2a9863b376d6dcc779f8944e4549e9501a9f23e2d94d619997c22fc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IIWLNVHVAT27RGEESRQ6TWIVI3/bundle.json","state_url":"https://pith.science/pith/IIWLNVHVAT27RGEESRQ6TWIVI3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IIWLNVHVAT27RGEESRQ6TWIVI3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T03:55:42Z","links":{"resolver":"https://pith.science/pith/IIWLNVHVAT27RGEESRQ6TWIVI3","bundle":"https://pith.science/pith/IIWLNVHVAT27RGEESRQ6TWIVI3/bundle.json","state":"https://pith.science/pith/IIWLNVHVAT27RGEESRQ6TWIVI3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IIWLNVHVAT27RGEESRQ6TWIVI3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:IIWLNVHVAT27RGEESRQ6TWIVI3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f7a42a3cc399dbe4b8d238aa9cbb8aaf3cc9752e31f81e09f0a39d56642413b4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-03-17T09:00:02Z","title_canon_sha256":"6e75ba5688c4dc0160d688ee99ec90dbabfc942cb9f7ab070206a2754272fac3"},"schema_version":"1.0","source":{"id":"2103.09510","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.09510","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"arxiv_version","alias_value":"2103.09510v1","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.09510","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"pith_short_12","alias_value":"IIWLNVHVAT27","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"pith_short_16","alias_value":"IIWLNVHVAT27RGEE","created_at":"2026-07-05T08:01:55Z"},{"alias_kind":"pith_short_8","alias_value":"IIWLNVHV","created_at":"2026-07-05T08:01:55Z"}],"graph_snapshots":[{"event_id":"sha256:05a50113e2a9863b376d6dcc779f8944e4549e9501a9f23e2d94d619997c22fc","target":"graph","created_at":"2026-07-05T08:01:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.09510/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software of Unknown Provenance, SOUP, refers to a software component that is already developed and widely available from a 3rd party, and that has not been developed, to be integrated into a medical device. From regulatory perspective, SOUP software requires special considerations, as the developers' obligations related to design and implementation are not applied to it. In this paper, we consider the implications of extending the concept of SOUP to machine learning (ML) models. As the contribution, we propose practical means to manage the added complexity of 3rd party ML models in regulated d","authors_text":"Jere Hel\\'en, Tommi Mikkonen, Tuomas Granlund, Vlad Stirbu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-03-17T09:00:02Z","title":"Extending SOUP to ML Models When DesigningCertified Medical Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.09510","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aa07f3137d81aace93ded1b6096a3055945d2f1b0a9c7e7068b6b86650070ab5","target":"record","created_at":"2026-07-05T08:01:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f7a42a3cc399dbe4b8d238aa9cbb8aaf3cc9752e31f81e09f0a39d56642413b4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-03-17T09:00:02Z","title_canon_sha256":"6e75ba5688c4dc0160d688ee99ec90dbabfc942cb9f7ab070206a2754272fac3"},"schema_version":"1.0","source":{"id":"2103.09510","kind":"arxiv","version":1}},"canonical_sha256":"422cb6d4f504f5f898849461e9d91546c3ea10aba6cdc6599b1907981b8c78bb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"422cb6d4f504f5f898849461e9d91546c3ea10aba6cdc6599b1907981b8c78bb","first_computed_at":"2026-07-05T08:01:55.609574Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:01:55.609574Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nORSSZGF7ZWWBYTbF7xvikR4MMaqzdsBLqLvFlA0nriRMy8CBW5PqShIzeoznBwkS3lOyRX+r0hk+AEJ8dl0Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:01:55.610091Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.09510","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aa07f3137d81aace93ded1b6096a3055945d2f1b0a9c7e7068b6b86650070ab5","sha256:05a50113e2a9863b376d6dcc779f8944e4549e9501a9f23e2d94d619997c22fc"],"state_sha256":"a2f7931657d88897139b3aeeb26054f150e50860e6df77d87330bfcbc1be68c3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iypdkHPo5lKccrEHlgzM2UqyO4+u8oE0B08h/T1IVMrEjQTp3aXSVo7nv40/gw7QedomvXynHDCS+SVzJpb6Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T03:55:42.586161Z","bundle_sha256":"a6fd81d24272e093d38277dd762b496a66c43b7345141c3eaf4a0b153c53f6da"}}