{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:MDDTRF3AQXVNGY6QJMSQNEVNDK","short_pith_number":"pith:MDDTRF3A","canonical_record":{"source":{"id":"2506.01227","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T00:38:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"66b6f483c33046fc5c4e253b0130f82b59e206ff762b3287718b0467cdbd2672","abstract_canon_sha256":"2e99d31cb1338847094f2dbe17f7499446ef9bd988152dfd5887a7713f90b5ce"},"schema_version":"1.0"},"canonical_sha256":"60c738976085ead363d04b250692ad1a88b8f5bc4f5909a0ced5debecaf21398","source":{"kind":"arxiv","id":"2506.01227","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01227","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01227v1","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01227","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"pith_short_12","alias_value":"MDDTRF3AQXVN","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"pith_short_16","alias_value":"MDDTRF3AQXVNGY6Q","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"pith_short_8","alias_value":"MDDTRF3A","created_at":"2026-07-05T11:14:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:MDDTRF3AQXVNGY6QJMSQNEVNDK","target":"record","payload":{"canonical_record":{"source":{"id":"2506.01227","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T00:38:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"66b6f483c33046fc5c4e253b0130f82b59e206ff762b3287718b0467cdbd2672","abstract_canon_sha256":"2e99d31cb1338847094f2dbe17f7499446ef9bd988152dfd5887a7713f90b5ce"},"schema_version":"1.0"},"canonical_sha256":"60c738976085ead363d04b250692ad1a88b8f5bc4f5909a0ced5debecaf21398","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:10.119270Z","signature_b64":"TpseZjxePpDeB1fqJvxEYL6kIC9p1111meztIpxPxgDuhMIbKOXhj59jho//afXZnXyoUKKCL0SvC5OZMnlACg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"60c738976085ead363d04b250692ad1a88b8f5bc4f5909a0ced5debecaf21398","last_reissued_at":"2026-07-05T11:14:10.118853Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:10.118853Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.01227","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zJd+iNPBLDw8DMn8MZ1mqFK53ZQibKbflJJIqFfKTzWjTR/w3IKLKdBqoU52ZrbtgnY/WKxhqSZrrHvcELQ/Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:58:40.313065Z"},"content_sha256":"d348cf8eab9b3811f6daadcf89f68c4fde0e9ee7c431d1344aebca5b9733947e","schema_version":"1.0","event_id":"sha256:d348cf8eab9b3811f6daadcf89f68c4fde0e9ee7c431d1344aebca5b9733947e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:MDDTRF3AQXVNGY6QJMSQNEVNDK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SPEAR: Security Posture Evaluation using AI Planner-Reasoning on Attack-Connectivity Hypergraphs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Indrajit Ray, Indrakshi Ray, Rakesh Podder, Sarath Sreedharan, Shadaab Kawnain Bashir, Turgay Caglar","submitted_at":"2025-06-02T00:38:47Z","abstract_excerpt":"Graph-based frameworks are often used in network hardening to help a cyber defender understand how a network can be attacked and how the best defenses can be deployed. However, incorporating network connectivity parameters in the attack graph, reasoning about the attack graph when we do not have access to complete information, providing system administrator suggestions in an understandable format, and allowing them to do what-if analysis on various scenarios and attacker motives is still missing. We fill this gap by presenting SPEAR, a formal framework with tool support for security posture ev"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01227","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.01227/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QbdWs24PM6snHKDHI+XcQQlMjFLTZXmPLSapIQmOMhZm4q95852oFT0tJL8TpXiNbosytXc5JrIhOJbmYfC4Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:58:40.313450Z"},"content_sha256":"86788962d137754a033d6d5c15d0e8060bcf3a13802a8d94c527ffc071fbc749","schema_version":"1.0","event_id":"sha256:86788962d137754a033d6d5c15d0e8060bcf3a13802a8d94c527ffc071fbc749"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MDDTRF3AQXVNGY6QJMSQNEVNDK/bundle.json","state_url":"https://pith.science/pith/MDDTRF3AQXVNGY6QJMSQNEVNDK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MDDTRF3AQXVNGY6QJMSQNEVNDK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T20:58:40Z","links":{"resolver":"https://pith.science/pith/MDDTRF3AQXVNGY6QJMSQNEVNDK","bundle":"https://pith.science/pith/MDDTRF3AQXVNGY6QJMSQNEVNDK/bundle.json","state":"https://pith.science/pith/MDDTRF3AQXVNGY6QJMSQNEVNDK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MDDTRF3AQXVNGY6QJMSQNEVNDK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:MDDTRF3AQXVNGY6QJMSQNEVNDK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e99d31cb1338847094f2dbe17f7499446ef9bd988152dfd5887a7713f90b5ce","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T00:38:47Z","title_canon_sha256":"66b6f483c33046fc5c4e253b0130f82b59e206ff762b3287718b0467cdbd2672"},"schema_version":"1.0","source":{"id":"2506.01227","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01227","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01227v1","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01227","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"pith_short_12","alias_value":"MDDTRF3AQXVN","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"pith_short_16","alias_value":"MDDTRF3AQXVNGY6Q","created_at":"2026-07-05T11:14:10Z"},{"alias_kind":"pith_short_8","alias_value":"MDDTRF3A","created_at":"2026-07-05T11:14:10Z"}],"graph_snapshots":[{"event_id":"sha256:86788962d137754a033d6d5c15d0e8060bcf3a13802a8d94c527ffc071fbc749","target":"graph","created_at":"2026-07-05T11:14:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.01227/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph-based frameworks are often used in network hardening to help a cyber defender understand how a network can be attacked and how the best defenses can be deployed. However, incorporating network connectivity parameters in the attack graph, reasoning about the attack graph when we do not have access to complete information, providing system administrator suggestions in an understandable format, and allowing them to do what-if analysis on various scenarios and attacker motives is still missing. We fill this gap by presenting SPEAR, a formal framework with tool support for security posture ev","authors_text":"Indrajit Ray, Indrakshi Ray, Rakesh Podder, Sarath Sreedharan, Shadaab Kawnain Bashir, Turgay Caglar","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T00:38:47Z","title":"SPEAR: Security Posture Evaluation using AI Planner-Reasoning on Attack-Connectivity Hypergraphs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01227","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d348cf8eab9b3811f6daadcf89f68c4fde0e9ee7c431d1344aebca5b9733947e","target":"record","created_at":"2026-07-05T11:14:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e99d31cb1338847094f2dbe17f7499446ef9bd988152dfd5887a7713f90b5ce","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T00:38:47Z","title_canon_sha256":"66b6f483c33046fc5c4e253b0130f82b59e206ff762b3287718b0467cdbd2672"},"schema_version":"1.0","source":{"id":"2506.01227","kind":"arxiv","version":1}},"canonical_sha256":"60c738976085ead363d04b250692ad1a88b8f5bc4f5909a0ced5debecaf21398","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"60c738976085ead363d04b250692ad1a88b8f5bc4f5909a0ced5debecaf21398","first_computed_at":"2026-07-05T11:14:10.118853Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:10.118853Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TpseZjxePpDeB1fqJvxEYL6kIC9p1111meztIpxPxgDuhMIbKOXhj59jho//afXZnXyoUKKCL0SvC5OZMnlACg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:10.119270Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.01227","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d348cf8eab9b3811f6daadcf89f68c4fde0e9ee7c431d1344aebca5b9733947e","sha256:86788962d137754a033d6d5c15d0e8060bcf3a13802a8d94c527ffc071fbc749"],"state_sha256":"66a12eb4f2f47df6b60b6868196dab32572f2cdcdb7d7213da916ea129038563"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gGpPTsWTu6MVNKMgtUbxyOi7dJxsnglCjz1AHVBJLAwVg+EJDAfyGACvnMyDqYSMKlNnG9v+J5W7NYhXq1ThDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T20:58:40.315414Z","bundle_sha256":"bee37cdf1cb1a9bd21305f3245ae289f0b5177577ef81ba991f44da5684c1e48"}}