{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:NLLB7KFJAKSQBWQQHDIRRM2RXJ","short_pith_number":"pith:NLLB7KFJ","canonical_record":{"source":{"id":"2309.11332","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-20T14:07:20Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"f3dd669fd50961b98d5f3a2545d67cf060e83a4b406d9c5a064446947cec3078","abstract_canon_sha256":"635fe65281ebb4aa4949075004bc562cc1076a538ffd681369327bc0c0a72262"},"schema_version":"1.0"},"canonical_sha256":"6ad61fa8a902a500da1038d118b351ba63bc33c29837ececa79de976a8c8e7ab","source":{"kind":"arxiv","id":"2309.11332","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.11332","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"arxiv_version","alias_value":"2309.11332v2","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.11332","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"pith_short_12","alias_value":"NLLB7KFJAKSQ","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"pith_short_16","alias_value":"NLLB7KFJAKSQBWQQ","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"pith_short_8","alias_value":"NLLB7KFJ","created_at":"2026-07-05T06:52:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:NLLB7KFJAKSQBWQQHDIRRM2RXJ","target":"record","payload":{"canonical_record":{"source":{"id":"2309.11332","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-20T14:07:20Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"f3dd669fd50961b98d5f3a2545d67cf060e83a4b406d9c5a064446947cec3078","abstract_canon_sha256":"635fe65281ebb4aa4949075004bc562cc1076a538ffd681369327bc0c0a72262"},"schema_version":"1.0"},"canonical_sha256":"6ad61fa8a902a500da1038d118b351ba63bc33c29837ececa79de976a8c8e7ab","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:52:50.871439Z","signature_b64":"f0ihJJ+cO4zoWHEqb0QcBxshA7Y1WPf+ja9Mx27VRS9LJ1p8tvZUtj21IFyzDKfYspYmdXc6MDZuAzHJ3EoeBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6ad61fa8a902a500da1038d118b351ba63bc33c29837ececa79de976a8c8e7ab","last_reissued_at":"2026-07-05T06:52:50.870890Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:52:50.870890Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.11332","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:52:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CNSw9A3sIon0uMm0yZbT77w0f+SyWLYH0bk1PlLhAcASEocwu/MvEoNMHB7PbqqQ3OMZ2YLP7pUHPmHk9j1eCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:19:25.646502Z"},"content_sha256":"22baf3f93226c42590a9815fd5be0403a2daefba78023d3eb06ca436564202aa","schema_version":"1.0","event_id":"sha256:22baf3f93226c42590a9815fd5be0403a2daefba78023d3eb06ca436564202aa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:NLLB7KFJAKSQBWQQHDIRRM2RXJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Software Compartmentalization Trade-Offs with Hardware Capabilities","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Hugo Lefeuvre, John Alistair Kressel, Pierre Olivier","submitted_at":"2023-09-20T14:07:20Z","abstract_excerpt":"Compartmentalization is a form of defensive software design in which an application is broken down into isolated but communicating components. Retrofitting compartmentalization into existing applications is often thought to be expensive from the engineering effort and performance overhead points of view. Still, recent years have seen proposals of compartmentalization methods with promises of low engineering efforts and reduced performance impact. ARM Morello combines a modern ARM processor with an implementation of Capability Hardware Enhanced RISC Instructions (CHERI) aiming to provide effici"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.11332","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.11332/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:52:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0Zdb/bN4ONpbjWFeIgJ0eCUrcjX96C4JZc24BfWzc4svJjtxjqxl2ChcWKGhzadEJXRoOqrKpdKFiEu+28apAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:19:25.646908Z"},"content_sha256":"9a426697b8ef837df927ad68aa122520f6c4a21fc8220ac1adb2f3b59a391c60","schema_version":"1.0","event_id":"sha256:9a426697b8ef837df927ad68aa122520f6c4a21fc8220ac1adb2f3b59a391c60"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NLLB7KFJAKSQBWQQHDIRRM2RXJ/bundle.json","state_url":"https://pith.science/pith/NLLB7KFJAKSQBWQQHDIRRM2RXJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NLLB7KFJAKSQBWQQHDIRRM2RXJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T06:19:25Z","links":{"resolver":"https://pith.science/pith/NLLB7KFJAKSQBWQQHDIRRM2RXJ","bundle":"https://pith.science/pith/NLLB7KFJAKSQBWQQHDIRRM2RXJ/bundle.json","state":"https://pith.science/pith/NLLB7KFJAKSQBWQQHDIRRM2RXJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NLLB7KFJAKSQBWQQHDIRRM2RXJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NLLB7KFJAKSQBWQQHDIRRM2RXJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"635fe65281ebb4aa4949075004bc562cc1076a538ffd681369327bc0c0a72262","cross_cats_sorted":["cs.OS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-20T14:07:20Z","title_canon_sha256":"f3dd669fd50961b98d5f3a2545d67cf060e83a4b406d9c5a064446947cec3078"},"schema_version":"1.0","source":{"id":"2309.11332","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.11332","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"arxiv_version","alias_value":"2309.11332v2","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.11332","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"pith_short_12","alias_value":"NLLB7KFJAKSQ","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"pith_short_16","alias_value":"NLLB7KFJAKSQBWQQ","created_at":"2026-07-05T06:52:50Z"},{"alias_kind":"pith_short_8","alias_value":"NLLB7KFJ","created_at":"2026-07-05T06:52:50Z"}],"graph_snapshots":[{"event_id":"sha256:9a426697b8ef837df927ad68aa122520f6c4a21fc8220ac1adb2f3b59a391c60","target":"graph","created_at":"2026-07-05T06:52:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.11332/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Compartmentalization is a form of defensive software design in which an application is broken down into isolated but communicating components. Retrofitting compartmentalization into existing applications is often thought to be expensive from the engineering effort and performance overhead points of view. Still, recent years have seen proposals of compartmentalization methods with promises of low engineering efforts and reduced performance impact. ARM Morello combines a modern ARM processor with an implementation of Capability Hardware Enhanced RISC Instructions (CHERI) aiming to provide effici","authors_text":"Hugo Lefeuvre, John Alistair Kressel, Pierre Olivier","cross_cats":["cs.OS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-20T14:07:20Z","title":"Software Compartmentalization Trade-Offs with Hardware Capabilities"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.11332","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:22baf3f93226c42590a9815fd5be0403a2daefba78023d3eb06ca436564202aa","target":"record","created_at":"2026-07-05T06:52:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"635fe65281ebb4aa4949075004bc562cc1076a538ffd681369327bc0c0a72262","cross_cats_sorted":["cs.OS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-20T14:07:20Z","title_canon_sha256":"f3dd669fd50961b98d5f3a2545d67cf060e83a4b406d9c5a064446947cec3078"},"schema_version":"1.0","source":{"id":"2309.11332","kind":"arxiv","version":2}},"canonical_sha256":"6ad61fa8a902a500da1038d118b351ba63bc33c29837ececa79de976a8c8e7ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6ad61fa8a902a500da1038d118b351ba63bc33c29837ececa79de976a8c8e7ab","first_computed_at":"2026-07-05T06:52:50.870890Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:52:50.870890Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"f0ihJJ+cO4zoWHEqb0QcBxshA7Y1WPf+ja9Mx27VRS9LJ1p8tvZUtj21IFyzDKfYspYmdXc6MDZuAzHJ3EoeBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:52:50.871439Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.11332","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:22baf3f93226c42590a9815fd5be0403a2daefba78023d3eb06ca436564202aa","sha256:9a426697b8ef837df927ad68aa122520f6c4a21fc8220ac1adb2f3b59a391c60"],"state_sha256":"03dfa4eca83d5eae06d1f816ce6b3f9581bb150af77df53c34f6a0b9970b6e01"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7FZbRL3DsqsfR0LGZBMynaDiXg9jtj4HmYAQQEQd7CoKpk2ohjVGnHt5x9m44soStYPwjLhMRfQP1y+1Q/8uCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T06:19:25.648906Z","bundle_sha256":"c5ff8cd10bac5bc29ae7667e91432e4e767b74c417f226dbf7565ce8c54e6573"}}