{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:IK7DKOSHYW5F4ZX2XAGAMAZKHS","short_pith_number":"pith:IK7DKOSH","canonical_record":{"source":{"id":"2607.20759","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T22:20:02Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"4272df8916303d85725e25e6eb338a7fa4bbd2d57110765941be3845a97066c7","abstract_canon_sha256":"c3a162b8c0895fab1f9fa7f39fc563a794a3f545a42a84ea5dc5877606c9097e"},"schema_version":"1.0"},"canonical_sha256":"42be353a47c5ba5e66fab80c06032a3cb5637ce83d0b69ef41837862bac92d3b","source":{"kind":"arxiv","id":"2607.20759","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.20759","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"arxiv_version","alias_value":"2607.20759v1","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.20759","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"pith_short_12","alias_value":"IK7DKOSHYW5F","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"pith_short_16","alias_value":"IK7DKOSHYW5F4ZX2","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"pith_short_8","alias_value":"IK7DKOSH","created_at":"2026-07-24T00:23:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:IK7DKOSHYW5F4ZX2XAGAMAZKHS","target":"record","payload":{"canonical_record":{"source":{"id":"2607.20759","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T22:20:02Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"4272df8916303d85725e25e6eb338a7fa4bbd2d57110765941be3845a97066c7","abstract_canon_sha256":"c3a162b8c0895fab1f9fa7f39fc563a794a3f545a42a84ea5dc5877606c9097e"},"schema_version":"1.0"},"canonical_sha256":"42be353a47c5ba5e66fab80c06032a3cb5637ce83d0b69ef41837862bac92d3b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-24T00:23:33.011392Z","signature_b64":"WfzFV49qlksOAXLfJwE3S67lK1EcPMbOxPNYAA3rgOrtDnHu3oQ/aBOqFI69/Z1BWBv8IcnNvqi1Mpvktc/xCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"42be353a47c5ba5e66fab80c06032a3cb5637ce83d0b69ef41837862bac92d3b","last_reissued_at":"2026-07-24T00:23:33.010459Z","signature_status":"signed_v1","first_computed_at":"2026-07-24T00:23:33.010459Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.20759","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-24T00:23:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/bfCHrFrI/pNMeF1kJMnZosHhTvdF0CYa/MCJgoe678rd5UR3qaxxwD2HDU+839P9G2FPJFKJlr1q8aZq/4fDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:01:03.129934Z"},"content_sha256":"39a1ed4fbd5baca034dec3824af0b96a28f1c79c7257be926700fb9c9b71e64d","schema_version":"1.0","event_id":"sha256:39a1ed4fbd5baca034dec3824af0b96a28f1c79c7257be926700fb9c9b71e64d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:IK7DKOSHYW5F4ZX2XAGAMAZKHS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.SE"],"primary_cat":"cs.CR","authors_text":"Ankur Singh, Jinqiu Yang, Tse-Hsun Chen","submitted_at":"2026-07-22T22:20:02Z","abstract_excerpt":"AI coding agents powered by LLMs are increasingly integrated into real-world software development, where they generate, edit, and execute code with autonomous access to local files and tools. Coding agents inherit security risks from both the LLM backbone, where adversarial prompts, poisoned training data, and backdoor triggers can cause models to emit insecure or attacker-chosen code, and their agentic architecture, where tool-using autonomy enables induced misuse of external APIs, data exfiltration, and persistent compromise of development environments. This paper presents a systematic evalu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.20759","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.20759/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-24T00:23:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b33VPTwZDj0jf9hb/zbgI5SFh+vxfpwR16ZipwO3fDiRaCuJx+LzCNin00czlIbBpDk2V68C/f5jcXSNkwafCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:01:03.130954Z"},"content_sha256":"b91974bd6e9c6d716b168498ee8f2fb1fe17a599a311f7089f7f096479b8a5aa","schema_version":"1.0","event_id":"sha256:b91974bd6e9c6d716b168498ee8f2fb1fe17a599a311f7089f7f096479b8a5aa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IK7DKOSHYW5F4ZX2XAGAMAZKHS/bundle.json","state_url":"https://pith.science/pith/IK7DKOSHYW5F4ZX2XAGAMAZKHS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IK7DKOSHYW5F4ZX2XAGAMAZKHS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T11:01:03Z","links":{"resolver":"https://pith.science/pith/IK7DKOSHYW5F4ZX2XAGAMAZKHS","bundle":"https://pith.science/pith/IK7DKOSHYW5F4ZX2XAGAMAZKHS/bundle.json","state":"https://pith.science/pith/IK7DKOSHYW5F4ZX2XAGAMAZKHS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IK7DKOSHYW5F4ZX2XAGAMAZKHS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:IK7DKOSHYW5F4ZX2XAGAMAZKHS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c3a162b8c0895fab1f9fa7f39fc563a794a3f545a42a84ea5dc5877606c9097e","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T22:20:02Z","title_canon_sha256":"4272df8916303d85725e25e6eb338a7fa4bbd2d57110765941be3845a97066c7"},"schema_version":"1.0","source":{"id":"2607.20759","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.20759","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"arxiv_version","alias_value":"2607.20759v1","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.20759","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"pith_short_12","alias_value":"IK7DKOSHYW5F","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"pith_short_16","alias_value":"IK7DKOSHYW5F4ZX2","created_at":"2026-07-24T00:23:33Z"},{"alias_kind":"pith_short_8","alias_value":"IK7DKOSH","created_at":"2026-07-24T00:23:33Z"}],"graph_snapshots":[{"event_id":"sha256:b91974bd6e9c6d716b168498ee8f2fb1fe17a599a311f7089f7f096479b8a5aa","target":"graph","created_at":"2026-07-24T00:23:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.20759/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI coding agents powered by LLMs are increasingly integrated into real-world software development, where they generate, edit, and execute code with autonomous access to local files and tools. Coding agents inherit security risks from both the LLM backbone, where adversarial prompts, poisoned training data, and backdoor triggers can cause models to emit insecure or attacker-chosen code, and their agentic architecture, where tool-using autonomy enables induced misuse of external APIs, data exfiltration, and persistent compromise of development environments. This paper presents a systematic evalu","authors_text":"Ankur Singh, Jinqiu Yang, Tse-Hsun Chen","cross_cats":["cs.AI","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.20759","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:39a1ed4fbd5baca034dec3824af0b96a28f1c79c7257be926700fb9c9b71e64d","target":"record","created_at":"2026-07-24T00:23:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c3a162b8c0895fab1f9fa7f39fc563a794a3f545a42a84ea5dc5877606c9097e","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T22:20:02Z","title_canon_sha256":"4272df8916303d85725e25e6eb338a7fa4bbd2d57110765941be3845a97066c7"},"schema_version":"1.0","source":{"id":"2607.20759","kind":"arxiv","version":1}},"canonical_sha256":"42be353a47c5ba5e66fab80c06032a3cb5637ce83d0b69ef41837862bac92d3b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"42be353a47c5ba5e66fab80c06032a3cb5637ce83d0b69ef41837862bac92d3b","first_computed_at":"2026-07-24T00:23:33.010459Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-24T00:23:33.010459Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WfzFV49qlksOAXLfJwE3S67lK1EcPMbOxPNYAA3rgOrtDnHu3oQ/aBOqFI69/Z1BWBv8IcnNvqi1Mpvktc/xCA==","signature_status":"signed_v1","signed_at":"2026-07-24T00:23:33.011392Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.20759","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:39a1ed4fbd5baca034dec3824af0b96a28f1c79c7257be926700fb9c9b71e64d","sha256:b91974bd6e9c6d716b168498ee8f2fb1fe17a599a311f7089f7f096479b8a5aa"],"state_sha256":"0e7d8b2a25fb30544b62b024817f4569173165c866f4bd20653abefbeda452e3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VsMjoUT1kDfAGW1AYASUHst8LKBEV5R6qR59ucCpfxIdhDuDN4VGhrvs0melDucNN+OL/jNcLxZd8WxiEj0sBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T11:01:03.138841Z","bundle_sha256":"bb40b1dc9e9bb749701ffc25e74a9fc6f9f71504e8ae26d17000d9a466511eaa"}}