{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:MCR7C7ER5XSPIOLAWA2HGN6V5J","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"25d9f6e1ef0d0baf42e74fc5ca3ee76b3a3f7ba634542556ab122dd6cb0b5161","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2025-09-10T22:12:46Z","title_canon_sha256":"d7b6c35d5697effec7134f4aa169021bc54c64d17f311e0c3242f1fe7f4e6269"},"schema_version":"1.0","source":{"id":"2509.09036","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.09036","created_at":"2026-07-05T12:09:28Z"},{"alias_kind":"arxiv_version","alias_value":"2509.09036v1","created_at":"2026-07-05T12:09:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.09036","created_at":"2026-07-05T12:09:28Z"},{"alias_kind":"pith_short_12","alias_value":"MCR7C7ER5XSP","created_at":"2026-07-05T12:09:28Z"},{"alias_kind":"pith_short_16","alias_value":"MCR7C7ER5XSPIOLA","created_at":"2026-07-05T12:09:28Z"},{"alias_kind":"pith_short_8","alias_value":"MCR7C7ER","created_at":"2026-07-05T12:09:28Z"}],"graph_snapshots":[{"event_id":"sha256:bc4f0eb60c9fae93e0ea4cfbac4dc7f81c8f951a9a79c0eaa026220fdefff952","target":"graph","created_at":"2026-07-05T12:09:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.09036/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software developers face risks of leaking their software secrets, such as API keys or passwords, which can result in significant harm. Secret management tools (SMTs), such as HashiCorp Vault Secrets or Infisical, are highly recommended by industry, academia, and security guidelines to manage secrets securely. SMTs are designed to help developers secure their secrets in a central location, yet secrets leaks are still commonplace, and developers report difficulty in learning how to setup and use SMTs. While SMTs typically come with publicly available help resources (e.g., tool documentation and ","authors_text":"Bradley Reaves, Deepthi Mungara, Laurie Williams, Lorenzo Neil, Yasemin Acar","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2025-09-10T22:12:46Z","title":"Extended Version: It Should Be Easy but... New Users Experiences and Challenges with Secret Management Tools"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.09036","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0107f7806180f41be532f00644aae79370368e6c2a3ae8545810d5e649a32d80","target":"record","created_at":"2026-07-05T12:09:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"25d9f6e1ef0d0baf42e74fc5ca3ee76b3a3f7ba634542556ab122dd6cb0b5161","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2025-09-10T22:12:46Z","title_canon_sha256":"d7b6c35d5697effec7134f4aa169021bc54c64d17f311e0c3242f1fe7f4e6269"},"schema_version":"1.0","source":{"id":"2509.09036","kind":"arxiv","version":1}},"canonical_sha256":"60a3f17c91ede4f43960b0347337d5ea42c6cf2abe7eb820f2cc48608b938fd8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"60a3f17c91ede4f43960b0347337d5ea42c6cf2abe7eb820f2cc48608b938fd8","first_computed_at":"2026-07-05T12:09:28.158291Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:28.158291Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9Zaz2cq5JiGNDclAg0oqPK3nrMQjERxPPkmbE+3OwlHwA8YIS9ff/UV3TKllKVqs9I7/ZXq4hhVkD47RI97oBw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:28.159053Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.09036","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0107f7806180f41be532f00644aae79370368e6c2a3ae8545810d5e649a32d80","sha256:bc4f0eb60c9fae93e0ea4cfbac4dc7f81c8f951a9a79c0eaa026220fdefff952"],"state_sha256":"0dcc884daac4960f6f05163f70b52328d04f5d89e2b31aa3d9116e598b977580"}