{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:M7VXJOBSPXCQ2VVUZA277PPDTM","short_pith_number":"pith:M7VXJOBS","canonical_record":{"source":{"id":"2607.07774","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T16:46:06Z","cross_cats_sorted":[],"title_canon_sha256":"7fd99f61c8f0b9848d6cade0e7a15aaeb396841fb3b9acf7ed37cc2c7830ad5e","abstract_canon_sha256":"d08d59782b568035cbdf6bfd18a92bd49293b3a97f171f26175e92cac966a149"},"schema_version":"1.0"},"canonical_sha256":"67eb74b8327dc50d56b4c835ffbde39b25087d269250cd577a519f87f37b99aa","source":{"kind":"arxiv","id":"2607.07774","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07774","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07774v1","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07774","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"pith_short_12","alias_value":"M7VXJOBSPXCQ","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"pith_short_16","alias_value":"M7VXJOBSPXCQ2VVU","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"pith_short_8","alias_value":"M7VXJOBS","created_at":"2026-07-10T00:18:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:M7VXJOBSPXCQ2VVUZA277PPDTM","target":"record","payload":{"canonical_record":{"source":{"id":"2607.07774","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T16:46:06Z","cross_cats_sorted":[],"title_canon_sha256":"7fd99f61c8f0b9848d6cade0e7a15aaeb396841fb3b9acf7ed37cc2c7830ad5e","abstract_canon_sha256":"d08d59782b568035cbdf6bfd18a92bd49293b3a97f171f26175e92cac966a149"},"schema_version":"1.0"},"canonical_sha256":"67eb74b8327dc50d56b4c835ffbde39b25087d269250cd577a519f87f37b99aa","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-10T00:18:58.864021Z","signature_b64":"3H5AWIQwwuYJKRQaecnGxoX1QK6PRSCtPgzilzQAA7/Kkd2f59XBMcY9G43Tzj6oAuiUlRY5XW781SJTCHBLAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"67eb74b8327dc50d56b4c835ffbde39b25087d269250cd577a519f87f37b99aa","last_reissued_at":"2026-07-10T00:18:58.863616Z","signature_status":"signed_v1","first_computed_at":"2026-07-10T00:18:58.863616Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.07774","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T00:18:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h7OoplU+bbrkDBlmWNeF2NDiXPWQ5y2ZCpRB2jL8btoStMQ3jP9g88Cv9doYqi624kMZDJfTI/vQQ92iw1mIBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T17:57:49.351816Z"},"content_sha256":"6de0bbc1777c0c4d6e3c3d535c5810ef5a7de07725fab0395a97a85612ee6ce9","schema_version":"1.0","event_id":"sha256:6de0bbc1777c0c4d6e3c3d535c5810ef5a7de07725fab0395a97a85612ee6ce9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:M7VXJOBSPXCQ2VVUZA277PPDTM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agents","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ads Dawson, Max Harley, Michael Kouremetis, Shane Caldwell, Vincent Abruzzo, Will Pearce","submitted_at":"2026-07-08T16:46:06Z","abstract_excerpt":"As LLM agents take on offensive security work, a single out-of-scope tool call can breach a client's engagement boundary, disrupt production, or void a bug-bounty finding. Unlike a fixed safety policy, the boundary that matters is declared in the user's request and must be inferred from intent. That challenge is sharpened by the adversarial nature of offensive security: the same tool call is in or out of scope depending not on the action itself but on the target it touches and the context in which it runs, which no fixed policy can enumerate in advance. We study pre-execution gating: a cheap, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07774","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07774/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T00:18:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HnJER3vxdfIHRjCMqQ7vivPPru05VQp/doVOxIaTIM0drsZR+jSzrIBFbmU2z2li/vni/1Vu/GeOVz6N/59dAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T17:57:49.352183Z"},"content_sha256":"18638fe92e3062fb890e59f40ab6087f243695801c699e708769e407037fb2a6","schema_version":"1.0","event_id":"sha256:18638fe92e3062fb890e59f40ab6087f243695801c699e708769e407037fb2a6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M7VXJOBSPXCQ2VVUZA277PPDTM/bundle.json","state_url":"https://pith.science/pith/M7VXJOBSPXCQ2VVUZA277PPDTM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M7VXJOBSPXCQ2VVUZA277PPDTM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-14T17:57:49Z","links":{"resolver":"https://pith.science/pith/M7VXJOBSPXCQ2VVUZA277PPDTM","bundle":"https://pith.science/pith/M7VXJOBSPXCQ2VVUZA277PPDTM/bundle.json","state":"https://pith.science/pith/M7VXJOBSPXCQ2VVUZA277PPDTM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M7VXJOBSPXCQ2VVUZA277PPDTM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:M7VXJOBSPXCQ2VVUZA277PPDTM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d08d59782b568035cbdf6bfd18a92bd49293b3a97f171f26175e92cac966a149","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T16:46:06Z","title_canon_sha256":"7fd99f61c8f0b9848d6cade0e7a15aaeb396841fb3b9acf7ed37cc2c7830ad5e"},"schema_version":"1.0","source":{"id":"2607.07774","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07774","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07774v1","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07774","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"pith_short_12","alias_value":"M7VXJOBSPXCQ","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"pith_short_16","alias_value":"M7VXJOBSPXCQ2VVU","created_at":"2026-07-10T00:18:58Z"},{"alias_kind":"pith_short_8","alias_value":"M7VXJOBS","created_at":"2026-07-10T00:18:58Z"}],"graph_snapshots":[{"event_id":"sha256:18638fe92e3062fb890e59f40ab6087f243695801c699e708769e407037fb2a6","target":"graph","created_at":"2026-07-10T00:18:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.07774/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As LLM agents take on offensive security work, a single out-of-scope tool call can breach a client's engagement boundary, disrupt production, or void a bug-bounty finding. Unlike a fixed safety policy, the boundary that matters is declared in the user's request and must be inferred from intent. That challenge is sharpened by the adversarial nature of offensive security: the same tool call is in or out of scope depending not on the action itself but on the target it touches and the context in which it runs, which no fixed policy can enumerate in advance. We study pre-execution gating: a cheap, ","authors_text":"Ads Dawson, Max Harley, Michael Kouremetis, Shane Caldwell, Vincent Abruzzo, Will Pearce","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T16:46:06Z","title":"ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07774","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6de0bbc1777c0c4d6e3c3d535c5810ef5a7de07725fab0395a97a85612ee6ce9","target":"record","created_at":"2026-07-10T00:18:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d08d59782b568035cbdf6bfd18a92bd49293b3a97f171f26175e92cac966a149","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T16:46:06Z","title_canon_sha256":"7fd99f61c8f0b9848d6cade0e7a15aaeb396841fb3b9acf7ed37cc2c7830ad5e"},"schema_version":"1.0","source":{"id":"2607.07774","kind":"arxiv","version":1}},"canonical_sha256":"67eb74b8327dc50d56b4c835ffbde39b25087d269250cd577a519f87f37b99aa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"67eb74b8327dc50d56b4c835ffbde39b25087d269250cd577a519f87f37b99aa","first_computed_at":"2026-07-10T00:18:58.863616Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-10T00:18:58.863616Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3H5AWIQwwuYJKRQaecnGxoX1QK6PRSCtPgzilzQAA7/Kkd2f59XBMcY9G43Tzj6oAuiUlRY5XW781SJTCHBLAA==","signature_status":"signed_v1","signed_at":"2026-07-10T00:18:58.864021Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.07774","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6de0bbc1777c0c4d6e3c3d535c5810ef5a7de07725fab0395a97a85612ee6ce9","sha256:18638fe92e3062fb890e59f40ab6087f243695801c699e708769e407037fb2a6"],"state_sha256":"d7673c4e1f00882750eabb7ec0bc59cfea844c3bf6a1dc5888e89cef2f2f7a40"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yFXk1h7q7ZmkQIlBjSRD7XFfrAW7VOa1jkD/d94H/3fs2qtvRawcMFRT6THuKNqqWe48fI7SamvEfjeOa5+yBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-14T17:57:49.354153Z","bundle_sha256":"83386f253e6eb46f8f054ba50335818759563ee150704099f6a15bfcb3bf3f0b"}}