{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JVPJRVPGNOQNKZWWFZQZTNJKGI","short_pith_number":"pith:JVPJRVPG","canonical_record":{"source":{"id":"2408.14357","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-08-26T15:31:58Z","cross_cats_sorted":[],"title_canon_sha256":"85f0384fadfda07903f2b2e497c303d03c521d81410065f805eb3aaa6a72eb99","abstract_canon_sha256":"19f8d213433e3cd11e448d508d8f9e1f8b94845b0bc74dd7ed647af6e598f297"},"schema_version":"1.0"},"canonical_sha256":"4d5e98d5e66ba0d566d62e6199b52a3221c6374ca3cd3ce9e9e1838943fafd37","source":{"kind":"arxiv","id":"2408.14357","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.14357","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"arxiv_version","alias_value":"2408.14357v1","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.14357","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"pith_short_12","alias_value":"JVPJRVPGNOQN","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"pith_short_16","alias_value":"JVPJRVPGNOQNKZWW","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"pith_short_8","alias_value":"JVPJRVPG","created_at":"2026-07-05T08:59:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JVPJRVPGNOQNKZWWFZQZTNJKGI","target":"record","payload":{"canonical_record":{"source":{"id":"2408.14357","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-08-26T15:31:58Z","cross_cats_sorted":[],"title_canon_sha256":"85f0384fadfda07903f2b2e497c303d03c521d81410065f805eb3aaa6a72eb99","abstract_canon_sha256":"19f8d213433e3cd11e448d508d8f9e1f8b94845b0bc74dd7ed647af6e598f297"},"schema_version":"1.0"},"canonical_sha256":"4d5e98d5e66ba0d566d62e6199b52a3221c6374ca3cd3ce9e9e1838943fafd37","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:59:19.718490Z","signature_b64":"PE0/Ii+uDt9VVDc0hshJD7VJsuY6/YOEJ0m9Ol7pqygzmNQbaRlbGQ+3yruWYyKG+eegd6YQ2MRKl+NtnvfFCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4d5e98d5e66ba0d566d62e6199b52a3221c6374ca3cd3ce9e9e1838943fafd37","last_reissued_at":"2026-07-05T08:59:19.717964Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:59:19.717964Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.14357","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:59:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4sAbQY7+pYB3H2daHsmKAh7oLXEH5Pr2IEtPzEyE3E96+r2PaoALznCBLVZ1tVmRC7LlCFG6n9568ofNH2HrAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T15:16:43.576721Z"},"content_sha256":"85af6381fde9009e161e4241b8ec591b3e4bd37896e0875244ad50717414ac0b","schema_version":"1.0","event_id":"sha256:85af6381fde9009e161e4241b8ec591b3e4bd37896e0875244ad50717414ac0b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JVPJRVPGNOQNKZWWFZQZTNJKGI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploring ChatGPT App Ecosystem: Distribution, Deployment and Security","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Chuan Yan, Guangdong Bai, Liuhuo Wan, Mark Huasong Meng, Ruomai Ren, Tian Yang Ooi","submitted_at":"2024-08-26T15:31:58Z","abstract_excerpt":"ChatGPT has enabled third-party developers to create plugins to expand ChatGPT's capabilities.These plugins are distributed through OpenAI's plugin store, making them easily accessible to users. With ChatGPT as the backbone, this app ecosystem has illustrated great business potential by offering users personalized services in a conversational manner. Nonetheless, many crucial aspects regarding app development, deployment, and security of this ecosystem have yet to be thoroughly studied in the research community, potentially hindering a broader adoption by both developers and users. In this wor"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.14357","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.14357/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:59:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"854/tCmLldDhyL9UkAEPgSG8RfSGnCKayrkHTLmDlet6na0Hr4o5RQQPzmMV/eOxZhUKoR8bTNG1PgR/vSP8DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T15:16:43.577647Z"},"content_sha256":"35f9b5d0a78362e1258ec83abc7658106d255c2506d34334b95523b89b08ecdb","schema_version":"1.0","event_id":"sha256:35f9b5d0a78362e1258ec83abc7658106d255c2506d34334b95523b89b08ecdb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JVPJRVPGNOQNKZWWFZQZTNJKGI/bundle.json","state_url":"https://pith.science/pith/JVPJRVPGNOQNKZWWFZQZTNJKGI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JVPJRVPGNOQNKZWWFZQZTNJKGI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T15:16:43Z","links":{"resolver":"https://pith.science/pith/JVPJRVPGNOQNKZWWFZQZTNJKGI","bundle":"https://pith.science/pith/JVPJRVPGNOQNKZWWFZQZTNJKGI/bundle.json","state":"https://pith.science/pith/JVPJRVPGNOQNKZWWFZQZTNJKGI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JVPJRVPGNOQNKZWWFZQZTNJKGI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JVPJRVPGNOQNKZWWFZQZTNJKGI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"19f8d213433e3cd11e448d508d8f9e1f8b94845b0bc74dd7ed647af6e598f297","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-08-26T15:31:58Z","title_canon_sha256":"85f0384fadfda07903f2b2e497c303d03c521d81410065f805eb3aaa6a72eb99"},"schema_version":"1.0","source":{"id":"2408.14357","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.14357","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"arxiv_version","alias_value":"2408.14357v1","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.14357","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"pith_short_12","alias_value":"JVPJRVPGNOQN","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"pith_short_16","alias_value":"JVPJRVPGNOQNKZWW","created_at":"2026-07-05T08:59:19Z"},{"alias_kind":"pith_short_8","alias_value":"JVPJRVPG","created_at":"2026-07-05T08:59:19Z"}],"graph_snapshots":[{"event_id":"sha256:35f9b5d0a78362e1258ec83abc7658106d255c2506d34334b95523b89b08ecdb","target":"graph","created_at":"2026-07-05T08:59:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.14357/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"ChatGPT has enabled third-party developers to create plugins to expand ChatGPT's capabilities.These plugins are distributed through OpenAI's plugin store, making them easily accessible to users. With ChatGPT as the backbone, this app ecosystem has illustrated great business potential by offering users personalized services in a conversational manner. Nonetheless, many crucial aspects regarding app development, deployment, and security of this ecosystem have yet to be thoroughly studied in the research community, potentially hindering a broader adoption by both developers and users. In this wor","authors_text":"Chuan Yan, Guangdong Bai, Liuhuo Wan, Mark Huasong Meng, Ruomai Ren, Tian Yang Ooi","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-08-26T15:31:58Z","title":"Exploring ChatGPT App Ecosystem: Distribution, Deployment and Security"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.14357","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:85af6381fde9009e161e4241b8ec591b3e4bd37896e0875244ad50717414ac0b","target":"record","created_at":"2026-07-05T08:59:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"19f8d213433e3cd11e448d508d8f9e1f8b94845b0bc74dd7ed647af6e598f297","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-08-26T15:31:58Z","title_canon_sha256":"85f0384fadfda07903f2b2e497c303d03c521d81410065f805eb3aaa6a72eb99"},"schema_version":"1.0","source":{"id":"2408.14357","kind":"arxiv","version":1}},"canonical_sha256":"4d5e98d5e66ba0d566d62e6199b52a3221c6374ca3cd3ce9e9e1838943fafd37","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4d5e98d5e66ba0d566d62e6199b52a3221c6374ca3cd3ce9e9e1838943fafd37","first_computed_at":"2026-07-05T08:59:19.717964Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:59:19.717964Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PE0/Ii+uDt9VVDc0hshJD7VJsuY6/YOEJ0m9Ol7pqygzmNQbaRlbGQ+3yruWYyKG+eegd6YQ2MRKl+NtnvfFCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:59:19.718490Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.14357","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:85af6381fde9009e161e4241b8ec591b3e4bd37896e0875244ad50717414ac0b","sha256:35f9b5d0a78362e1258ec83abc7658106d255c2506d34334b95523b89b08ecdb"],"state_sha256":"a6c1b612765fd93a218f354d0265d18d324d1bf5270f8d20af97ddb914c18ef8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h2MAsvQEB5BJNn0uH9eMWXq6S8P/rfMYiIIcYa9vGWGBCt1jva1+Z9/yX+ojbKia+f04IjZ3//AymrKnqZy6CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T15:16:43.588376Z","bundle_sha256":"077e55a3b99b3ea53c6c023a97ded95fd4a050ba047ffec9b79795ea326ec731"}}