{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:LVFRH23SKH4LHQP6VXQLTWQDSH","short_pith_number":"pith:LVFRH23S","canonical_record":{"source":{"id":"2607.01138","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-01T16:22:05Z","cross_cats_sorted":[],"title_canon_sha256":"2530ae37868cf15a4c0dcb51d818a163df3b10e20c6a3f3a596e3e7ff2e307b7","abstract_canon_sha256":"4b616b995eeef243807260bbf26df99150540db777a7520f9ddee04ce8bfa763"},"schema_version":"1.0"},"canonical_sha256":"5d4b13eb7251f8b3c1feade0b9da0391d8781e449ded860ddc1bd7e8e6788b9a","source":{"kind":"arxiv","id":"2607.01138","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.01138","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"arxiv_version","alias_value":"2607.01138v1","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.01138","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"pith_short_12","alias_value":"LVFRH23SKH4L","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"pith_short_16","alias_value":"LVFRH23SKH4LHQP6","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"pith_short_8","alias_value":"LVFRH23S","created_at":"2026-07-02T01:18:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:LVFRH23SKH4LHQP6VXQLTWQDSH","target":"record","payload":{"canonical_record":{"source":{"id":"2607.01138","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-01T16:22:05Z","cross_cats_sorted":[],"title_canon_sha256":"2530ae37868cf15a4c0dcb51d818a163df3b10e20c6a3f3a596e3e7ff2e307b7","abstract_canon_sha256":"4b616b995eeef243807260bbf26df99150540db777a7520f9ddee04ce8bfa763"},"schema_version":"1.0"},"canonical_sha256":"5d4b13eb7251f8b3c1feade0b9da0391d8781e449ded860ddc1bd7e8e6788b9a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-02T01:18:30.146014Z","signature_b64":"L8o2VavDw8KrnOxown13jCGn8hU+0gkQUuwk6TjOmCi/oA3WJDF444Q4Uok068pU9dRbt/A1KrZdPBbBDOQ1AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5d4b13eb7251f8b3c1feade0b9da0391d8781e449ded860ddc1bd7e8e6788b9a","last_reissued_at":"2026-07-02T01:18:30.145634Z","signature_status":"signed_v1","first_computed_at":"2026-07-02T01:18:30.145634Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.01138","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-02T01:18:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AgMZHKaT0eanQClnYU1AQvGa4wtmLeP82kR5sDwBfalRe++X30GiuWEBo2tJWfDl6+K2p59F8bZ0H0c+iVKgCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-05T08:44:32.879402Z"},"content_sha256":"4adedfd0bcd437fde056cd112cba1bfd73669311f1ae78e8695b8b143bce68d4","schema_version":"1.0","event_id":"sha256:4adedfd0bcd437fde056cd112cba1bfd73669311f1ae78e8695b8b143bce68d4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:LVFRH23SKH4LHQP6VXQLTWQDSH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Antaeus: Hunting Repository-Level Logic Vulnerabilities via Context-Grounded LLM Reasoning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Lorenzo Cavallaro, Michele Armillotta, Nicol\\`o Romandini, Rebecca Montanari","submitted_at":"2026-07-01T16:22:05Z","abstract_excerpt":"LLM-based vulnerability detectors have shown promising results in identifying memory-safety bugs and vulnerability classes whose violations can often be expressed through established security properties. Logic vulnerabilities, however, pose a different challenge, as their identification requires inferring application-specific security invariants and implicit assumptions about intended behavior. Even frontier agentic models struggle because these invariants are often implicit and buried among unrelated code. Motivated by this gap, we present Antaeus, a framework for detecting logic vulnerabilit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.01138","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.01138/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-02T01:18:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kEsdV1avuDuNqlRvq1j/yw/ujye9toliFQO504fmJSbens91IxHk0NkYfeOgRAnk9aIaEh6ijX6GpQDXmvKsCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-05T08:44:32.879765Z"},"content_sha256":"60d40b81ba7ca6eb1d9a2ff9d3aa9ee08e7203ca0139ddb7c58806a8473ec4b7","schema_version":"1.0","event_id":"sha256:60d40b81ba7ca6eb1d9a2ff9d3aa9ee08e7203ca0139ddb7c58806a8473ec4b7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LVFRH23SKH4LHQP6VXQLTWQDSH/bundle.json","state_url":"https://pith.science/pith/LVFRH23SKH4LHQP6VXQLTWQDSH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LVFRH23SKH4LHQP6VXQLTWQDSH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-05T08:44:32Z","links":{"resolver":"https://pith.science/pith/LVFRH23SKH4LHQP6VXQLTWQDSH","bundle":"https://pith.science/pith/LVFRH23SKH4LHQP6VXQLTWQDSH/bundle.json","state":"https://pith.science/pith/LVFRH23SKH4LHQP6VXQLTWQDSH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LVFRH23SKH4LHQP6VXQLTWQDSH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:LVFRH23SKH4LHQP6VXQLTWQDSH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4b616b995eeef243807260bbf26df99150540db777a7520f9ddee04ce8bfa763","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-01T16:22:05Z","title_canon_sha256":"2530ae37868cf15a4c0dcb51d818a163df3b10e20c6a3f3a596e3e7ff2e307b7"},"schema_version":"1.0","source":{"id":"2607.01138","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.01138","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"arxiv_version","alias_value":"2607.01138v1","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.01138","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"pith_short_12","alias_value":"LVFRH23SKH4L","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"pith_short_16","alias_value":"LVFRH23SKH4LHQP6","created_at":"2026-07-02T01:18:30Z"},{"alias_kind":"pith_short_8","alias_value":"LVFRH23S","created_at":"2026-07-02T01:18:30Z"}],"graph_snapshots":[{"event_id":"sha256:60d40b81ba7ca6eb1d9a2ff9d3aa9ee08e7203ca0139ddb7c58806a8473ec4b7","target":"graph","created_at":"2026-07-02T01:18:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.01138/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM-based vulnerability detectors have shown promising results in identifying memory-safety bugs and vulnerability classes whose violations can often be expressed through established security properties. Logic vulnerabilities, however, pose a different challenge, as their identification requires inferring application-specific security invariants and implicit assumptions about intended behavior. Even frontier agentic models struggle because these invariants are often implicit and buried among unrelated code. Motivated by this gap, we present Antaeus, a framework for detecting logic vulnerabilit","authors_text":"Lorenzo Cavallaro, Michele Armillotta, Nicol\\`o Romandini, Rebecca Montanari","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-01T16:22:05Z","title":"Antaeus: Hunting Repository-Level Logic Vulnerabilities via Context-Grounded LLM Reasoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.01138","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4adedfd0bcd437fde056cd112cba1bfd73669311f1ae78e8695b8b143bce68d4","target":"record","created_at":"2026-07-02T01:18:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4b616b995eeef243807260bbf26df99150540db777a7520f9ddee04ce8bfa763","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-01T16:22:05Z","title_canon_sha256":"2530ae37868cf15a4c0dcb51d818a163df3b10e20c6a3f3a596e3e7ff2e307b7"},"schema_version":"1.0","source":{"id":"2607.01138","kind":"arxiv","version":1}},"canonical_sha256":"5d4b13eb7251f8b3c1feade0b9da0391d8781e449ded860ddc1bd7e8e6788b9a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5d4b13eb7251f8b3c1feade0b9da0391d8781e449ded860ddc1bd7e8e6788b9a","first_computed_at":"2026-07-02T01:18:30.145634Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-02T01:18:30.145634Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L8o2VavDw8KrnOxown13jCGn8hU+0gkQUuwk6TjOmCi/oA3WJDF444Q4Uok068pU9dRbt/A1KrZdPBbBDOQ1AA==","signature_status":"signed_v1","signed_at":"2026-07-02T01:18:30.146014Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.01138","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4adedfd0bcd437fde056cd112cba1bfd73669311f1ae78e8695b8b143bce68d4","sha256:60d40b81ba7ca6eb1d9a2ff9d3aa9ee08e7203ca0139ddb7c58806a8473ec4b7"],"state_sha256":"4d7648c65e04c272de5c374a2539a73d569d9e90af6fa500d5b8574d1220543a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VybqZLelBzD8C4u5STELc1H0HNvlYZowW0/PPCHI0mBJpC5VWMNLoboUTYHTrBz+S2U/KPnli+j1LdM+7v7RBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-05T08:44:32.881747Z","bundle_sha256":"b1b6ddf267d45ecfd986871def3496e26d04484ad24479a3b9fb11e8f86144e6"}}