{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:KF4Y4NVUV5QFCVS2SU4RWUB2VP","short_pith_number":"pith:KF4Y4NVU","schema_version":"1.0","canonical_sha256":"51798e36b4af6051565a95391b503aabf479b7d22e6cf68c6d3ee3b7cc537164","source":{"kind":"arxiv","id":"2608.00801","version":1},"attestation_state":"computed","paper":{"title":"Hardware-rooted attestation for AI-agent evidence: composing IETF RATS with action evidence packages","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Anton Sokolov","submitted_at":"2026-08-01T18:01:36Z","abstract_excerpt":"An action evidence package (AEP) is a signed, append-only record of what an AI agent did, who or what authorised the action, and what the outcome was. It is a software-layer artefact: it tells a verifier the story of an action as the agent's own runtime reports it. This note argues that software attestation of this kind is necessary but not sufficient. When a verifier's question shifts from \"what does the agent claim it did?\" to \"did the specific model version the operator claims to have deployed actually produce this output, on unmodified hardware?\", the AEP alone cannot answer. The missing e"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2608.00801","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-01T18:01:36Z","cross_cats_sorted":[],"title_canon_sha256":"d299d72f6d97911a29b43eda14cf5dd39c2532fa6e1c8df41f9f0a2b6f39fc83","abstract_canon_sha256":"9f0406419073235f2a3c25120e4b0d602da33aea000ac203d486d7221c8a77cb"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T01:55:10.486028Z","signature_b64":"YKJ4+g+Yzj1I6acVnyJwn8PrKVo5ZLhLaM7Q+2Do+tj4wgzDhIufJ+hYDGPIclcIAe2l9Md+ITOUc8aVF3b8Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"51798e36b4af6051565a95391b503aabf479b7d22e6cf68c6d3ee3b7cc537164","last_reissued_at":"2026-08-04T01:55:10.484519Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T01:55:10.484519Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Hardware-rooted attestation for AI-agent evidence: composing IETF RATS with action evidence packages","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Anton Sokolov","submitted_at":"2026-08-01T18:01:36Z","abstract_excerpt":"An action evidence package (AEP) is a signed, append-only record of what an AI agent did, who or what authorised the action, and what the outcome was. It is a software-layer artefact: it tells a verifier the story of an action as the agent's own runtime reports it. This note argues that software attestation of this kind is necessary but not sufficient. When a verifier's question shifts from \"what does the agent claim it did?\" to \"did the specific model version the operator claims to have deployed actually produce this output, on unmodified hardware?\", the AEP alone cannot answer. The missing e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.00801","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.00801/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2608.00801","created_at":"2026-08-04T01:55:10.485819+00:00"},{"alias_kind":"arxiv_version","alias_value":"2608.00801v1","created_at":"2026-08-04T01:55:10.485819+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.00801","created_at":"2026-08-04T01:55:10.485819+00:00"},{"alias_kind":"pith_short_12","alias_value":"KF4Y4NVUV5QF","created_at":"2026-08-04T01:55:10.485819+00:00"},{"alias_kind":"pith_short_16","alias_value":"KF4Y4NVUV5QFCVS2","created_at":"2026-08-04T01:55:10.485819+00:00"},{"alias_kind":"pith_short_8","alias_value":"KF4Y4NVU","created_at":"2026-08-04T01:55:10.485819+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP","json":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP.json","graph_json":"https://pith.science/api/pith-number/KF4Y4NVUV5QFCVS2SU4RWUB2VP/graph.json","events_json":"https://pith.science/api/pith-number/KF4Y4NVUV5QFCVS2SU4RWUB2VP/events.json","paper":"https://pith.science/paper/KF4Y4NVU"},"agent_actions":{"view_html":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP","download_json":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP.json","view_paper":"https://pith.science/paper/KF4Y4NVU","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2608.00801&json=true","fetch_graph":"https://pith.science/api/pith-number/KF4Y4NVUV5QFCVS2SU4RWUB2VP/graph.json","fetch_events":"https://pith.science/api/pith-number/KF4Y4NVUV5QFCVS2SU4RWUB2VP/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP/action/timestamp_anchor","attest_storage":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP/action/storage_attestation","attest_author":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP/action/author_attestation","sign_citation":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP/action/citation_signature","submit_replication":"https://pith.science/pith/KF4Y4NVUV5QFCVS2SU4RWUB2VP/action/replication_record"}},"created_at":"2026-08-04T01:55:10.485819+00:00","updated_at":"2026-08-04T01:55:10.485819+00:00"}