{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LDYL3RYLK5CJSUYUCL6WTZETDV","short_pith_number":"pith:LDYL3RYL","canonical_record":{"source":{"id":"2507.15241","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-21T04:55:34Z","cross_cats_sorted":[],"title_canon_sha256":"b742e642e9aaa8a26d114ea36d33d0f0af1672137700d063475e31c9ec050863","abstract_canon_sha256":"312b299c6fca35d74662992820a5b500931bf1ed1e0e038ef76f9b7182d1d784"},"schema_version":"1.0"},"canonical_sha256":"58f0bdc70b574499531412fd69e4931d538624503679da981b8c2d3186d295ad","source":{"kind":"arxiv","id":"2507.15241","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.15241","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"arxiv_version","alias_value":"2507.15241v1","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.15241","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"pith_short_12","alias_value":"LDYL3RYLK5CJ","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"pith_short_16","alias_value":"LDYL3RYLK5CJSUYU","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"pith_short_8","alias_value":"LDYL3RYL","created_at":"2026-07-05T11:40:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LDYL3RYLK5CJSUYUCL6WTZETDV","target":"record","payload":{"canonical_record":{"source":{"id":"2507.15241","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-21T04:55:34Z","cross_cats_sorted":[],"title_canon_sha256":"b742e642e9aaa8a26d114ea36d33d0f0af1672137700d063475e31c9ec050863","abstract_canon_sha256":"312b299c6fca35d74662992820a5b500931bf1ed1e0e038ef76f9b7182d1d784"},"schema_version":"1.0"},"canonical_sha256":"58f0bdc70b574499531412fd69e4931d538624503679da981b8c2d3186d295ad","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:40:20.890353Z","signature_b64":"8dYatNW0rjk2jpxwU9un6OhJWINj7twV84zw9TL1PN718Tycwgi0JRAYXgfxXju4utQTepCaIR68N4Gv0LvPCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"58f0bdc70b574499531412fd69e4931d538624503679da981b8c2d3186d295ad","last_reissued_at":"2026-07-05T11:40:20.889810Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:40:20.889810Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.15241","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:40:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z1jzBBGepg8coTzN+Jc1VnD9P+vj3IW9DqCSzB0WInWvMJifmB84v8GKAH4muIRz0558T1f/cXrlxS0Rd3QUCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:17:44.201835Z"},"content_sha256":"4085482251a181410b2f0259548699d5d1bad66d73482bda851dc5f319a6fa51","schema_version":"1.0","event_id":"sha256:4085482251a181410b2f0259548699d5d1bad66d73482bda851dc5f319a6fa51"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LDYL3RYLK5CJSUYUCL6WTZETDV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FaultLine: Automated Proof-of-Vulnerability Generation Using LLM Agents","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Baishakhi Ray, Roshanak Zilouchian Moghaddam, Vikram Nitin","submitted_at":"2025-07-21T04:55:34Z","abstract_excerpt":"Despite the critical threat posed by software security vulnerabilities, reports are often incomplete, lacking the proof-of-vulnerability (PoV) tests needed to validate fixes and prevent regressions. These tests are crucial not only for ensuring patches work, but also for helping developers understand how vulnerabilities can be exploited. Generating PoV tests is a challenging problem, requiring reasoning about the flow of control and data through deeply nested levels of a program.\n  We present FaultLine, an LLM agent workflow that uses a set of carefully designed reasoning steps, inspired by as"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.15241","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.15241/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:40:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tFa7VvX8hUl5WinQzS3myD8lk+/CCiW2wtrUnXSMDQHntnWT5TtBYt9JqWdY5TZ/kRbwWlmEllRa2Fr/ouLDCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:17:44.203286Z"},"content_sha256":"39a1c61609715ef1dceb298ffb3a582022e0e8bb9e084ae83893da2d982772ae","schema_version":"1.0","event_id":"sha256:39a1c61609715ef1dceb298ffb3a582022e0e8bb9e084ae83893da2d982772ae"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LDYL3RYLK5CJSUYUCL6WTZETDV/bundle.json","state_url":"https://pith.science/pith/LDYL3RYLK5CJSUYUCL6WTZETDV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LDYL3RYLK5CJSUYUCL6WTZETDV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T04:17:44Z","links":{"resolver":"https://pith.science/pith/LDYL3RYLK5CJSUYUCL6WTZETDV","bundle":"https://pith.science/pith/LDYL3RYLK5CJSUYUCL6WTZETDV/bundle.json","state":"https://pith.science/pith/LDYL3RYLK5CJSUYUCL6WTZETDV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LDYL3RYLK5CJSUYUCL6WTZETDV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LDYL3RYLK5CJSUYUCL6WTZETDV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"312b299c6fca35d74662992820a5b500931bf1ed1e0e038ef76f9b7182d1d784","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-21T04:55:34Z","title_canon_sha256":"b742e642e9aaa8a26d114ea36d33d0f0af1672137700d063475e31c9ec050863"},"schema_version":"1.0","source":{"id":"2507.15241","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.15241","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"arxiv_version","alias_value":"2507.15241v1","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.15241","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"pith_short_12","alias_value":"LDYL3RYLK5CJ","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"pith_short_16","alias_value":"LDYL3RYLK5CJSUYU","created_at":"2026-07-05T11:40:20Z"},{"alias_kind":"pith_short_8","alias_value":"LDYL3RYL","created_at":"2026-07-05T11:40:20Z"}],"graph_snapshots":[{"event_id":"sha256:39a1c61609715ef1dceb298ffb3a582022e0e8bb9e084ae83893da2d982772ae","target":"graph","created_at":"2026-07-05T11:40:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.15241/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the critical threat posed by software security vulnerabilities, reports are often incomplete, lacking the proof-of-vulnerability (PoV) tests needed to validate fixes and prevent regressions. These tests are crucial not only for ensuring patches work, but also for helping developers understand how vulnerabilities can be exploited. Generating PoV tests is a challenging problem, requiring reasoning about the flow of control and data through deeply nested levels of a program.\n  We present FaultLine, an LLM agent workflow that uses a set of carefully designed reasoning steps, inspired by as","authors_text":"Baishakhi Ray, Roshanak Zilouchian Moghaddam, Vikram Nitin","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-21T04:55:34Z","title":"FaultLine: Automated Proof-of-Vulnerability Generation Using LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.15241","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4085482251a181410b2f0259548699d5d1bad66d73482bda851dc5f319a6fa51","target":"record","created_at":"2026-07-05T11:40:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"312b299c6fca35d74662992820a5b500931bf1ed1e0e038ef76f9b7182d1d784","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-21T04:55:34Z","title_canon_sha256":"b742e642e9aaa8a26d114ea36d33d0f0af1672137700d063475e31c9ec050863"},"schema_version":"1.0","source":{"id":"2507.15241","kind":"arxiv","version":1}},"canonical_sha256":"58f0bdc70b574499531412fd69e4931d538624503679da981b8c2d3186d295ad","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"58f0bdc70b574499531412fd69e4931d538624503679da981b8c2d3186d295ad","first_computed_at":"2026-07-05T11:40:20.889810Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:40:20.889810Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8dYatNW0rjk2jpxwU9un6OhJWINj7twV84zw9TL1PN718Tycwgi0JRAYXgfxXju4utQTepCaIR68N4Gv0LvPCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:40:20.890353Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.15241","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4085482251a181410b2f0259548699d5d1bad66d73482bda851dc5f319a6fa51","sha256:39a1c61609715ef1dceb298ffb3a582022e0e8bb9e084ae83893da2d982772ae"],"state_sha256":"6a496938d364d64bb90ab7cc3caa649f71c0c12aff5cf0aab8716d6c605b2c36"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5ZTI1ixnlzx6HdO18/Pdp4IHBMyNhm5Y39cHm5DP3sreSBoa8iOYYxg4KLM+bEl2811mTAuVKBUhMwB5VYzeAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T04:17:44.208905Z","bundle_sha256":"5f08e882011248369e2f5d290204583064eec49be617ce776faf6d2cb4dea121"}}