{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:IYI6EM6SWMWBPFGIL5JLOOUPGU","short_pith_number":"pith:IYI6EM6S","canonical_record":{"source":{"id":"2605.22058","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-05-21T06:47:36Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7b5c65bba11d6b11a1dece902f92bde44d43fa311daa37a1ae4199bc6ad2ea43","abstract_canon_sha256":"4f4281bd2a8b29ed330ef521346b16de4099f7af3ef42c6ec5ade6de9f8a83df"},"schema_version":"1.0"},"canonical_sha256":"4611e233d2b32c1794c85f52b73a8f353b364c6a2272fdba64043ba6418ea714","source":{"kind":"arxiv","id":"2605.22058","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.22058","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"arxiv_version","alias_value":"2605.22058v1","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.22058","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"pith_short_12","alias_value":"IYI6EM6SWMWB","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"pith_short_16","alias_value":"IYI6EM6SWMWBPFGI","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"pith_short_8","alias_value":"IYI6EM6S","created_at":"2026-05-22T01:04:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:IYI6EM6SWMWBPFGIL5JLOOUPGU","target":"record","payload":{"canonical_record":{"source":{"id":"2605.22058","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-05-21T06:47:36Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7b5c65bba11d6b11a1dece902f92bde44d43fa311daa37a1ae4199bc6ad2ea43","abstract_canon_sha256":"4f4281bd2a8b29ed330ef521346b16de4099f7af3ef42c6ec5ade6de9f8a83df"},"schema_version":"1.0"},"canonical_sha256":"4611e233d2b32c1794c85f52b73a8f353b364c6a2272fdba64043ba6418ea714","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-22T01:04:22.784733Z","signature_b64":"lf3s0H++Zw3umOAtQHHvYBZv/8q3WDYzD3K80a2ETc+k3vPFBUBRfQql6BCetcKWvVk38/q1vZqFEH79MQk3Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4611e233d2b32c1794c85f52b73a8f353b364c6a2272fdba64043ba6418ea714","last_reissued_at":"2026-05-22T01:04:22.784150Z","signature_status":"signed_v1","first_computed_at":"2026-05-22T01:04:22.784150Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.22058","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-22T01:04:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1j082GgNMwXWh8Znc6BMnDoF+vTklM5dasiQZ9NsEJHQecRFm9bJuc9KhS7OpHKBx0Svg4PDMQ6pasfhNKCNCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T02:48:59.863048Z"},"content_sha256":"4ffa3e4d21b47b0da1c3726c03d9d9bb1458db1199cd736fcb86719b6b456ec4","schema_version":"1.0","event_id":"sha256:4ffa3e4d21b47b0da1c3726c03d9d9bb1458db1199cd736fcb86719b6b456ec4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:IYI6EM6SWMWBPFGIL5JLOOUPGU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Finding Missing Input Validation in TEEs via LLM-Assisted Symbolic Execution","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Chengyan Ma, David Lo, Jieke Shi, Ruidong Han, Ye Liu, Yuqing Niu","submitted_at":"2026-05-21T06:47:36Z","abstract_excerpt":"Trusted Execution Environments (TEEs) provide hardware-enforced isolation that protects sensitive code and data from untrusted software. Despite their strong security guarantees, analyzing TEE applications remains challenging due to the high cost and complexity of configuring complete TEE build and runtime environments, as well as the limited observability imposed by hardware isolation. This paper presents SymTEE, a novel large language model (LLM)-assisted symbolic execution framework for detecting missing input validation issues in TEE applications without requiring real TEE setups. SymTEE b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.22058","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.22058/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-22T01:04:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CxSUUYoABkaaSOkJ2xYTuGNXNq9aFI2Bzl7KXFcjrAU4GOJ7qEr9ZqUSWbfpsGoCKspDRMWLpqLbBrJBTRrzCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T02:48:59.863486Z"},"content_sha256":"5b62dc79f7db689aeb0bdf352125a9db99d722e1f238ab26ef86e2f1111664f8","schema_version":"1.0","event_id":"sha256:5b62dc79f7db689aeb0bdf352125a9db99d722e1f238ab26ef86e2f1111664f8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IYI6EM6SWMWBPFGIL5JLOOUPGU/bundle.json","state_url":"https://pith.science/pith/IYI6EM6SWMWBPFGIL5JLOOUPGU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IYI6EM6SWMWBPFGIL5JLOOUPGU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-31T02:48:59Z","links":{"resolver":"https://pith.science/pith/IYI6EM6SWMWBPFGIL5JLOOUPGU","bundle":"https://pith.science/pith/IYI6EM6SWMWBPFGIL5JLOOUPGU/bundle.json","state":"https://pith.science/pith/IYI6EM6SWMWBPFGIL5JLOOUPGU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IYI6EM6SWMWBPFGIL5JLOOUPGU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:IYI6EM6SWMWBPFGIL5JLOOUPGU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4f4281bd2a8b29ed330ef521346b16de4099f7af3ef42c6ec5ade6de9f8a83df","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-05-21T06:47:36Z","title_canon_sha256":"7b5c65bba11d6b11a1dece902f92bde44d43fa311daa37a1ae4199bc6ad2ea43"},"schema_version":"1.0","source":{"id":"2605.22058","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.22058","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"arxiv_version","alias_value":"2605.22058v1","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.22058","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"pith_short_12","alias_value":"IYI6EM6SWMWB","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"pith_short_16","alias_value":"IYI6EM6SWMWBPFGI","created_at":"2026-05-22T01:04:22Z"},{"alias_kind":"pith_short_8","alias_value":"IYI6EM6S","created_at":"2026-05-22T01:04:22Z"}],"graph_snapshots":[{"event_id":"sha256:5b62dc79f7db689aeb0bdf352125a9db99d722e1f238ab26ef86e2f1111664f8","target":"graph","created_at":"2026-05-22T01:04:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.22058/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Trusted Execution Environments (TEEs) provide hardware-enforced isolation that protects sensitive code and data from untrusted software. Despite their strong security guarantees, analyzing TEE applications remains challenging due to the high cost and complexity of configuring complete TEE build and runtime environments, as well as the limited observability imposed by hardware isolation. This paper presents SymTEE, a novel large language model (LLM)-assisted symbolic execution framework for detecting missing input validation issues in TEE applications without requiring real TEE setups. SymTEE b","authors_text":"Chengyan Ma, David Lo, Jieke Shi, Ruidong Han, Ye Liu, Yuqing Niu","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-05-21T06:47:36Z","title":"Finding Missing Input Validation in TEEs via LLM-Assisted Symbolic Execution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.22058","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4ffa3e4d21b47b0da1c3726c03d9d9bb1458db1199cd736fcb86719b6b456ec4","target":"record","created_at":"2026-05-22T01:04:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4f4281bd2a8b29ed330ef521346b16de4099f7af3ef42c6ec5ade6de9f8a83df","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-05-21T06:47:36Z","title_canon_sha256":"7b5c65bba11d6b11a1dece902f92bde44d43fa311daa37a1ae4199bc6ad2ea43"},"schema_version":"1.0","source":{"id":"2605.22058","kind":"arxiv","version":1}},"canonical_sha256":"4611e233d2b32c1794c85f52b73a8f353b364c6a2272fdba64043ba6418ea714","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4611e233d2b32c1794c85f52b73a8f353b364c6a2272fdba64043ba6418ea714","first_computed_at":"2026-05-22T01:04:22.784150Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-22T01:04:22.784150Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lf3s0H++Zw3umOAtQHHvYBZv/8q3WDYzD3K80a2ETc+k3vPFBUBRfQql6BCetcKWvVk38/q1vZqFEH79MQk3Cw==","signature_status":"signed_v1","signed_at":"2026-05-22T01:04:22.784733Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.22058","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4ffa3e4d21b47b0da1c3726c03d9d9bb1458db1199cd736fcb86719b6b456ec4","sha256:5b62dc79f7db689aeb0bdf352125a9db99d722e1f238ab26ef86e2f1111664f8"],"state_sha256":"920eacd17b89cf13f27a1cf8e1b8d24fba03c54f69fa7a575bada42c462918fa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HCAJHeLvrsNDF6lZ4Q4V9phXSaw2NdJ99ibMsjDEiE0FjrPokt43uoUwq4o66kvIS1WR7SViGZdNJ1aKUyDECw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-31T02:48:59.865513Z","bundle_sha256":"33a5557967f496f7c65d8647f1fba11d2d66bda5fc2be8e3f9cbb6038c9a9640"}}