{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:IT6O5PNVKBSGZXA3EPT32ZPLXD","short_pith_number":"pith:IT6O5PNV","canonical_record":{"source":{"id":"2608.00997","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-02T04:54:06Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"95787129433290f01526add6ed3b53af34b22f2233e79aa864ec400434cfb989","abstract_canon_sha256":"66f3ebd41e7a7be74267945677f17ca75100f01423dd87b10cc2ce4fb579e96c"},"schema_version":"1.0"},"canonical_sha256":"44fceebdb550646cdc1b23e7bd65ebb8edcf153b17d73543ff41cc81fa1b45db","source":{"kind":"arxiv","id":"2608.00997","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.00997","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"arxiv_version","alias_value":"2608.00997v1","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.00997","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"pith_short_12","alias_value":"IT6O5PNVKBSG","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"pith_short_16","alias_value":"IT6O5PNVKBSGZXA3","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"pith_short_8","alias_value":"IT6O5PNV","created_at":"2026-08-04T01:56:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:IT6O5PNVKBSGZXA3EPT32ZPLXD","target":"record","payload":{"canonical_record":{"source":{"id":"2608.00997","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-02T04:54:06Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"95787129433290f01526add6ed3b53af34b22f2233e79aa864ec400434cfb989","abstract_canon_sha256":"66f3ebd41e7a7be74267945677f17ca75100f01423dd87b10cc2ce4fb579e96c"},"schema_version":"1.0"},"canonical_sha256":"44fceebdb550646cdc1b23e7bd65ebb8edcf153b17d73543ff41cc81fa1b45db","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T01:56:11.294625Z","signature_b64":"LfUZ54fOQVrtnpER0JdvMAMprZviffe+qMWIDDbM+zDW7uDQBFvB00yBWlCm+fNu25QiGPqzRaUmSQiSXg/tDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"44fceebdb550646cdc1b23e7bd65ebb8edcf153b17d73543ff41cc81fa1b45db","last_reissued_at":"2026-08-04T01:56:11.293086Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T01:56:11.293086Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.00997","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T01:56:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"em4bOFgdocdrgudvd6roPqGGVhgt1bHSfwNVOGTw61gMtsGdnx4oKQV22hBzIAKZRBBk0UnI5ClcVru+XDO1BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:02:08.820366Z"},"content_sha256":"d5096c474f15ec6972cd69a5016ccdfc2416725c66af81f514d9a88c9e1cb2ee","schema_version":"1.0","event_id":"sha256:d5096c474f15ec6972cd69a5016ccdfc2416725c66af81f514d9a88c9e1cb2ee"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:IT6O5PNVKBSGZXA3EPT32ZPLXD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Gautam Bharti","submitted_at":"2026-08-02T04:54:06Z","abstract_excerpt":"Security studies of the Model Context Protocol (MCP) ecosystem share a design: each audits a registry at a single point in time. None reports how long the registry descriptions those audits judged stay current - a necessary condition for any description-level finding to still apply, though not a sufficient one: we measure the shelf-life of the audited text, not the validity of a security finding itself (Sec. 7.1). We reconstruct 120 observations of the official MCP registry over 88.6 days, covering 19,099 distinct servers as it grew from 3,510 to 18,966. Our central result is a policy one: you"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.00997","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.00997/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T01:56:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JuEpu+7imhP/pHsWwHREUNjYmtt3Rt0SVlhVZKTu+ezT7W994iD3Sa4AYdSfzfpO5QZglO7pwEdX6b3izYOfDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:02:08.820875Z"},"content_sha256":"d5f3f23ba0fb92dd70c4436a817aa206d2834d3ccb35cba0d186118ed9490322","schema_version":"1.0","event_id":"sha256:d5f3f23ba0fb92dd70c4436a817aa206d2834d3ccb35cba0d186118ed9490322"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IT6O5PNVKBSGZXA3EPT32ZPLXD/bundle.json","state_url":"https://pith.science/pith/IT6O5PNVKBSGZXA3EPT32ZPLXD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IT6O5PNVKBSGZXA3EPT32ZPLXD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T21:02:08Z","links":{"resolver":"https://pith.science/pith/IT6O5PNVKBSGZXA3EPT32ZPLXD","bundle":"https://pith.science/pith/IT6O5PNVKBSGZXA3EPT32ZPLXD/bundle.json","state":"https://pith.science/pith/IT6O5PNVKBSGZXA3EPT32ZPLXD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IT6O5PNVKBSGZXA3EPT32ZPLXD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:IT6O5PNVKBSGZXA3EPT32ZPLXD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"66f3ebd41e7a7be74267945677f17ca75100f01423dd87b10cc2ce4fb579e96c","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-02T04:54:06Z","title_canon_sha256":"95787129433290f01526add6ed3b53af34b22f2233e79aa864ec400434cfb989"},"schema_version":"1.0","source":{"id":"2608.00997","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.00997","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"arxiv_version","alias_value":"2608.00997v1","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.00997","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"pith_short_12","alias_value":"IT6O5PNVKBSG","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"pith_short_16","alias_value":"IT6O5PNVKBSGZXA3","created_at":"2026-08-04T01:56:11Z"},{"alias_kind":"pith_short_8","alias_value":"IT6O5PNV","created_at":"2026-08-04T01:56:11Z"}],"graph_snapshots":[{"event_id":"sha256:d5f3f23ba0fb92dd70c4436a817aa206d2834d3ccb35cba0d186118ed9490322","target":"graph","created_at":"2026-08-04T01:56:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.00997/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security studies of the Model Context Protocol (MCP) ecosystem share a design: each audits a registry at a single point in time. None reports how long the registry descriptions those audits judged stay current - a necessary condition for any description-level finding to still apply, though not a sufficient one: we measure the shelf-life of the audited text, not the validity of a security finding itself (Sec. 7.1). We reconstruct 120 observations of the official MCP registry over 88.6 days, covering 19,099 distinct servers as it grew from 3,510 to 18,966. Our central result is a policy one: you","authors_text":"Gautam Bharti","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-02T04:54:06Z","title":"Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.00997","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d5096c474f15ec6972cd69a5016ccdfc2416725c66af81f514d9a88c9e1cb2ee","target":"record","created_at":"2026-08-04T01:56:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"66f3ebd41e7a7be74267945677f17ca75100f01423dd87b10cc2ce4fb579e96c","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-02T04:54:06Z","title_canon_sha256":"95787129433290f01526add6ed3b53af34b22f2233e79aa864ec400434cfb989"},"schema_version":"1.0","source":{"id":"2608.00997","kind":"arxiv","version":1}},"canonical_sha256":"44fceebdb550646cdc1b23e7bd65ebb8edcf153b17d73543ff41cc81fa1b45db","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"44fceebdb550646cdc1b23e7bd65ebb8edcf153b17d73543ff41cc81fa1b45db","first_computed_at":"2026-08-04T01:56:11.293086Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T01:56:11.293086Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LfUZ54fOQVrtnpER0JdvMAMprZviffe+qMWIDDbM+zDW7uDQBFvB00yBWlCm+fNu25QiGPqzRaUmSQiSXg/tDA==","signature_status":"signed_v1","signed_at":"2026-08-04T01:56:11.294625Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.00997","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d5096c474f15ec6972cd69a5016ccdfc2416725c66af81f514d9a88c9e1cb2ee","sha256:d5f3f23ba0fb92dd70c4436a817aa206d2834d3ccb35cba0d186118ed9490322"],"state_sha256":"ac3e7177d0e98efaae368926117fa415825f33b39a339d197be5af99f9f1584d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vBOyL04kxBk8qfOQVeY7NmRSAoDaANPBbnupasZ7nRxAfMn++g0b6W29adCk4qLiPxfGBMuUG/SytLBvltV9Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T21:02:08.824602Z","bundle_sha256":"f99741d878f68c1d7998667f2fe3841488501d4e99fd3b759c7917ddad48a6ea"}}