{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:L2QPOM632RJVSGRJYTZFYZAVET","short_pith_number":"pith:L2QPOM63","canonical_record":{"source":{"id":"2112.10893","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T22:45:27Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0765c36e562736aabd593d908cc88d1487cbf45dcdcca2627809a54cd60440ef","abstract_canon_sha256":"13b524af20d56946c4fe6f05a080554fcbbb1289368819da27691a4131c638ae"},"schema_version":"1.0"},"canonical_sha256":"5ea0f733dbd453591a29c4f25c641524c0dfd497c517fc3c4e7e0869788c69de","source":{"kind":"arxiv","id":"2112.10893","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.10893","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"arxiv_version","alias_value":"2112.10893v2","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.10893","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"pith_short_12","alias_value":"L2QPOM632RJV","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"pith_short_16","alias_value":"L2QPOM632RJVSGRJ","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"pith_short_8","alias_value":"L2QPOM63","created_at":"2026-07-05T03:48:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:L2QPOM632RJVSGRJYTZFYZAVET","target":"record","payload":{"canonical_record":{"source":{"id":"2112.10893","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T22:45:27Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0765c36e562736aabd593d908cc88d1487cbf45dcdcca2627809a54cd60440ef","abstract_canon_sha256":"13b524af20d56946c4fe6f05a080554fcbbb1289368819da27691a4131c638ae"},"schema_version":"1.0"},"canonical_sha256":"5ea0f733dbd453591a29c4f25c641524c0dfd497c517fc3c4e7e0869788c69de","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:48:10.067313Z","signature_b64":"tvbdl+zUyEtbFj+S5Ho3QDvWZMYFFLJHmwAcsNrY6wValbwmYghbUnDuBpKsQPd93+RLdi/t4EqDNoGzWlizAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5ea0f733dbd453591a29c4f25c641524c0dfd497c517fc3c4e7e0869788c69de","last_reissued_at":"2026-07-05T03:48:10.066878Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:48:10.066878Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.10893","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:48:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KDN9y+RJsCpl9QZpdpBRMW7YKX2cVBPAhUyXemEvSN2w3TnuaefII7NqZJXp4Fb5cjc2BT+Mb615mqbnE/TIDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T06:56:16.647886Z"},"content_sha256":"e72158b630fbf70dccafe2f7ac8260d7095ea9474377488dc6227db687381435","schema_version":"1.0","event_id":"sha256:e72158b630fbf70dccafe2f7ac8260d7095ea9474377488dc6227db687381435"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:L2QPOM632RJVSGRJYTZFYZAVET","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VELVET: a noVel Ensemble Learning approach to automatically locate VulnErable sTatements","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.SE","authors_text":"Alessandro Morari, Baishakhi Ray, Gail Kaiser, Jim Laredo, Sahil Suneja, Yangruibo Ding, Yunhui Zheng","submitted_at":"2021-12-20T22:45:27Z","abstract_excerpt":"Automatically locating vulnerable statements in source code is crucial to assure software security and alleviate developers' debugging efforts. This becomes even more important in today's software ecosystem, where vulnerable code can flow easily and unwittingly within and across software repositories like GitHub. Across such millions of lines of code, traditional static and dynamic approaches struggle to scale. Although existing machine-learning-based approaches look promising in such a setting, most work detects vulnerable code at a higher granularity -- at the method or file level. Thus, dev"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.10893","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.10893/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:48:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"39Fxv0wZpCfPP47iypTIHRXgOWZ6jv2+Nnwo05BLZHfNxCuZR1NNAIHN8zJBVyHl1CWeQE28Ir/h2fXWR8osCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T06:56:16.648253Z"},"content_sha256":"e285d83cef6de2c3a5bc56cada88b82aeab534ce7ef296893dc5231bfb32e404","schema_version":"1.0","event_id":"sha256:e285d83cef6de2c3a5bc56cada88b82aeab534ce7ef296893dc5231bfb32e404"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L2QPOM632RJVSGRJYTZFYZAVET/bundle.json","state_url":"https://pith.science/pith/L2QPOM632RJVSGRJYTZFYZAVET/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L2QPOM632RJVSGRJYTZFYZAVET/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T06:56:16Z","links":{"resolver":"https://pith.science/pith/L2QPOM632RJVSGRJYTZFYZAVET","bundle":"https://pith.science/pith/L2QPOM632RJVSGRJYTZFYZAVET/bundle.json","state":"https://pith.science/pith/L2QPOM632RJVSGRJYTZFYZAVET/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L2QPOM632RJVSGRJYTZFYZAVET/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:L2QPOM632RJVSGRJYTZFYZAVET","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"13b524af20d56946c4fe6f05a080554fcbbb1289368819da27691a4131c638ae","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T22:45:27Z","title_canon_sha256":"0765c36e562736aabd593d908cc88d1487cbf45dcdcca2627809a54cd60440ef"},"schema_version":"1.0","source":{"id":"2112.10893","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.10893","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"arxiv_version","alias_value":"2112.10893v2","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.10893","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"pith_short_12","alias_value":"L2QPOM632RJV","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"pith_short_16","alias_value":"L2QPOM632RJVSGRJ","created_at":"2026-07-05T03:48:10Z"},{"alias_kind":"pith_short_8","alias_value":"L2QPOM63","created_at":"2026-07-05T03:48:10Z"}],"graph_snapshots":[{"event_id":"sha256:e285d83cef6de2c3a5bc56cada88b82aeab534ce7ef296893dc5231bfb32e404","target":"graph","created_at":"2026-07-05T03:48:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.10893/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Automatically locating vulnerable statements in source code is crucial to assure software security and alleviate developers' debugging efforts. This becomes even more important in today's software ecosystem, where vulnerable code can flow easily and unwittingly within and across software repositories like GitHub. Across such millions of lines of code, traditional static and dynamic approaches struggle to scale. Although existing machine-learning-based approaches look promising in such a setting, most work detects vulnerable code at a higher granularity -- at the method or file level. Thus, dev","authors_text":"Alessandro Morari, Baishakhi Ray, Gail Kaiser, Jim Laredo, Sahil Suneja, Yangruibo Ding, Yunhui Zheng","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T22:45:27Z","title":"VELVET: a noVel Ensemble Learning approach to automatically locate VulnErable sTatements"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.10893","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e72158b630fbf70dccafe2f7ac8260d7095ea9474377488dc6227db687381435","target":"record","created_at":"2026-07-05T03:48:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"13b524af20d56946c4fe6f05a080554fcbbb1289368819da27691a4131c638ae","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T22:45:27Z","title_canon_sha256":"0765c36e562736aabd593d908cc88d1487cbf45dcdcca2627809a54cd60440ef"},"schema_version":"1.0","source":{"id":"2112.10893","kind":"arxiv","version":2}},"canonical_sha256":"5ea0f733dbd453591a29c4f25c641524c0dfd497c517fc3c4e7e0869788c69de","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5ea0f733dbd453591a29c4f25c641524c0dfd497c517fc3c4e7e0869788c69de","first_computed_at":"2026-07-05T03:48:10.066878Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:48:10.066878Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tvbdl+zUyEtbFj+S5Ho3QDvWZMYFFLJHmwAcsNrY6wValbwmYghbUnDuBpKsQPd93+RLdi/t4EqDNoGzWlizAg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:48:10.067313Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.10893","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e72158b630fbf70dccafe2f7ac8260d7095ea9474377488dc6227db687381435","sha256:e285d83cef6de2c3a5bc56cada88b82aeab534ce7ef296893dc5231bfb32e404"],"state_sha256":"b82be45f3af5b18415d94da758fa2bee7495900ad168f1fee24fea57d34eacf7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"52thJWsKOYetTMpZ3tQmb4mxiwD9iIFPIzmYWpnaMJKw8yQ+WSQaeX+/Yea9sSZUBp2oXKWThHKr5U9poJzfBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T06:56:16.650506Z","bundle_sha256":"f87294d599d2cea391329913a38a42d7984bde643491d302e8ace2d8a545c39f"}}