{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:IS74WVWBXDIKPF6KHVPOT37KBD","short_pith_number":"pith:IS74WVWB","canonical_record":{"source":{"id":"2605.15569","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T03:27:02Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"9716862c40dc72c9babece894642877e2251c82250bc7c791b888e39f99828f7","abstract_canon_sha256":"3bc11de74161834de3e08c3649eb009d7444b43a35ea36a5fc132a40d67ebae6"},"schema_version":"1.0"},"canonical_sha256":"44bfcb56c1b8d0a797ca3d5ee9efea08d94719ddb60484640aceeb9eb3845411","source":{"kind":"arxiv","id":"2605.15569","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.15569","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"arxiv_version","alias_value":"2605.15569v1","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.15569","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"pith_short_12","alias_value":"IS74WVWBXDIK","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"pith_short_16","alias_value":"IS74WVWBXDIKPF6K","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"pith_short_8","alias_value":"IS74WVWB","created_at":"2026-05-20T00:01:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:IS74WVWBXDIKPF6KHVPOT37KBD","target":"record","payload":{"canonical_record":{"source":{"id":"2605.15569","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T03:27:02Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"9716862c40dc72c9babece894642877e2251c82250bc7c791b888e39f99828f7","abstract_canon_sha256":"3bc11de74161834de3e08c3649eb009d7444b43a35ea36a5fc132a40d67ebae6"},"schema_version":"1.0"},"canonical_sha256":"44bfcb56c1b8d0a797ca3d5ee9efea08d94719ddb60484640aceeb9eb3845411","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-20T00:01:05.880926Z","signature_b64":"s3avgJXwOLn1cJDhP7k1Wn3M4QVYWc8XD0r1Bdu3wDNP9hWzqgPByLbKomKIP8Nk1/NX3jNP2iSuorFLveUJDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"44bfcb56c1b8d0a797ca3d5ee9efea08d94719ddb60484640aceeb9eb3845411","last_reissued_at":"2026-05-20T00:01:05.880039Z","signature_status":"signed_v1","first_computed_at":"2026-05-20T00:01:05.880039Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.15569","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T00:01:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ChuVI3f+zU8zaquT+eIqi0Z7Jl1soy+CnQog1LCmlL+qZ5u5tJl8MAa/n0hWYYAVRkTdTYiwfslpEJYKnxrABA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T22:36:08.972784Z"},"content_sha256":"2367650653114c1e33baa1a1910743859a800e8a4224590f68cdb94202e3e9d2","schema_version":"1.0","event_id":"sha256:2367650653114c1e33baa1a1910743859a800e8a4224590f68cdb94202e3e9d2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:IS74WVWBXDIKPF6KHVPOT37KBD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.SE"],"primary_cat":"cs.CR","authors_text":"Hong Yau Chong, Junfeng Yang, Penghui Li, Yinzhi Cao","submitted_at":"2026-05-15T03:27:02Z","abstract_excerpt":"Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating risks of privilege escalation where attackers can gain unauthorized access to resources or operations. Detecting such vulnerabilities is challenging due to complex cross-service interactions, polyglot codebases, and diverse privileged operations and permission checks. We present Neo, an agentic program analysis framework that combines large language models (LLMs) with classic pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.15569","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.15569/integrity.json","findings":[],"available":true,"detectors_run":[{"name":"ai_meta_artifact","ran_at":"2026-05-19T19:34:35.255219Z","status":"skipped","version":"1.0.0","findings_count":0},{"name":"claim_evidence","ran_at":"2026-05-19T17:41:56.080203Z","status":"completed","version":"1.0.0","findings_count":0}],"snapshot_sha256":"2dda7964121593c1b03127e0da6fbe17aba2c422a91541da799e88a4e865402b"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T00:01:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FTkTaVoNz683vXMxLcoNSo0tdjLMD7yt16NbeZzqrHIYdU5s3KlzaBWji5rx9dCvfYK4iGja3dig7vkWs+3JBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T22:36:08.973554Z"},"content_sha256":"aba9d3b8f1986805c4bdfc4552a6fe6c83edefa04752913a5c30dd539f00aff2","schema_version":"1.0","event_id":"sha256:aba9d3b8f1986805c4bdfc4552a6fe6c83edefa04752913a5c30dd539f00aff2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IS74WVWBXDIKPF6KHVPOT37KBD/bundle.json","state_url":"https://pith.science/pith/IS74WVWBXDIKPF6KHVPOT37KBD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IS74WVWBXDIKPF6KHVPOT37KBD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T22:36:08Z","links":{"resolver":"https://pith.science/pith/IS74WVWBXDIKPF6KHVPOT37KBD","bundle":"https://pith.science/pith/IS74WVWBXDIKPF6KHVPOT37KBD/bundle.json","state":"https://pith.science/pith/IS74WVWBXDIKPF6KHVPOT37KBD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IS74WVWBXDIKPF6KHVPOT37KBD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:IS74WVWBXDIKPF6KHVPOT37KBD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3bc11de74161834de3e08c3649eb009d7444b43a35ea36a5fc132a40d67ebae6","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T03:27:02Z","title_canon_sha256":"9716862c40dc72c9babece894642877e2251c82250bc7c791b888e39f99828f7"},"schema_version":"1.0","source":{"id":"2605.15569","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.15569","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"arxiv_version","alias_value":"2605.15569v1","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.15569","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"pith_short_12","alias_value":"IS74WVWBXDIK","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"pith_short_16","alias_value":"IS74WVWBXDIKPF6K","created_at":"2026-05-20T00:01:05Z"},{"alias_kind":"pith_short_8","alias_value":"IS74WVWB","created_at":"2026-05-20T00:01:05Z"}],"graph_snapshots":[{"event_id":"sha256:aba9d3b8f1986805c4bdfc4552a6fe6c83edefa04752913a5c30dd539f00aff2","target":"graph","created_at":"2026-05-20T00:01:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[{"findings_count":0,"name":"ai_meta_artifact","ran_at":"2026-05-19T19:34:35.255219Z","status":"skipped","version":"1.0.0"},{"findings_count":0,"name":"claim_evidence","ran_at":"2026-05-19T17:41:56.080203Z","status":"completed","version":"1.0.0"}],"endpoint":"/pith/2605.15569/integrity.json","findings":[],"snapshot_sha256":"2dda7964121593c1b03127e0da6fbe17aba2c422a91541da799e88a4e865402b","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating risks of privilege escalation where attackers can gain unauthorized access to resources or operations. Detecting such vulnerabilities is challenging due to complex cross-service interactions, polyglot codebases, and diverse privileged operations and permission checks. We present Neo, an agentic program analysis framework that combines large language models (LLMs) with classic pro","authors_text":"Hong Yau Chong, Junfeng Yang, Penghui Li, Yinzhi Cao","cross_cats":["cs.AI","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T03:27:02Z","title":"Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.15569","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2367650653114c1e33baa1a1910743859a800e8a4224590f68cdb94202e3e9d2","target":"record","created_at":"2026-05-20T00:01:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3bc11de74161834de3e08c3649eb009d7444b43a35ea36a5fc132a40d67ebae6","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T03:27:02Z","title_canon_sha256":"9716862c40dc72c9babece894642877e2251c82250bc7c791b888e39f99828f7"},"schema_version":"1.0","source":{"id":"2605.15569","kind":"arxiv","version":1}},"canonical_sha256":"44bfcb56c1b8d0a797ca3d5ee9efea08d94719ddb60484640aceeb9eb3845411","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"44bfcb56c1b8d0a797ca3d5ee9efea08d94719ddb60484640aceeb9eb3845411","first_computed_at":"2026-05-20T00:01:05.880039Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-20T00:01:05.880039Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"s3avgJXwOLn1cJDhP7k1Wn3M4QVYWc8XD0r1Bdu3wDNP9hWzqgPByLbKomKIP8Nk1/NX3jNP2iSuorFLveUJDw==","signature_status":"signed_v1","signed_at":"2026-05-20T00:01:05.880926Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.15569","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2367650653114c1e33baa1a1910743859a800e8a4224590f68cdb94202e3e9d2","sha256:aba9d3b8f1986805c4bdfc4552a6fe6c83edefa04752913a5c30dd539f00aff2"],"state_sha256":"33e4a50fb96a6d9ce60048c0b667b290a77296d1a1d9ccccae122fa474b4978a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l40/iZ7Pz0/+pDSuX/VDlAqM69cnUlFNWza5JFiTG+EVjlaV3J9ry6KhYDJ6A4sqoPLhPbSzaG0rizGUR1zSBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T22:36:08.977234Z","bundle_sha256":"eb9858533a9e721ae34fe03cc13bf8824eb1839847ed7a3e11264c15bf0965b2"}}