{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:P7SZTT7E7HX7TPTD7IRSISQ5H4","short_pith_number":"pith:P7SZTT7E","canonical_record":{"source":{"id":"1803.06766","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-03-19T00:35:42Z","cross_cats_sorted":[],"title_canon_sha256":"9ae9eccd83cca88bc1243332884f98a27d362301af64e5ad4fcdd341e6cf1863","abstract_canon_sha256":"af48bc23afbfb06e2a3daccbe37f5d8e2f37b7492187d06e9581cc0e7b000d08"},"schema_version":"1.0"},"canonical_sha256":"7fe599cfe4f9eff9be63fa23244a1d3f0d4229ccd4738e2448e63bf3bdaba75c","source":{"kind":"arxiv","id":"1803.06766","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1803.06766","created_at":"2026-05-18T00:20:43Z"},{"alias_kind":"arxiv_version","alias_value":"1803.06766v1","created_at":"2026-05-18T00:20:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1803.06766","created_at":"2026-05-18T00:20:43Z"},{"alias_kind":"pith_short_12","alias_value":"P7SZTT7E7HX7","created_at":"2026-05-18T12:32:43Z"},{"alias_kind":"pith_short_16","alias_value":"P7SZTT7E7HX7TPTD","created_at":"2026-05-18T12:32:43Z"},{"alias_kind":"pith_short_8","alias_value":"P7SZTT7E","created_at":"2026-05-18T12:32:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:P7SZTT7E7HX7TPTD7IRSISQ5H4","target":"record","payload":{"canonical_record":{"source":{"id":"1803.06766","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-03-19T00:35:42Z","cross_cats_sorted":[],"title_canon_sha256":"9ae9eccd83cca88bc1243332884f98a27d362301af64e5ad4fcdd341e6cf1863","abstract_canon_sha256":"af48bc23afbfb06e2a3daccbe37f5d8e2f37b7492187d06e9581cc0e7b000d08"},"schema_version":"1.0"},"canonical_sha256":"7fe599cfe4f9eff9be63fa23244a1d3f0d4229ccd4738e2448e63bf3bdaba75c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:20:43.817763Z","signature_b64":"kKrEeKvWHBrRrzVQKgY7KYAZLl7vHlz/0HjJfHt0gd/RJ2q+5Yel+KB5ku2kAs+aFeHC8+163IDcoliYn0NeDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7fe599cfe4f9eff9be63fa23244a1d3f0d4229ccd4738e2448e63bf3bdaba75c","last_reissued_at":"2026-05-18T00:20:43.817077Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:20:43.817077Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1803.06766","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:20:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j1Zz3sGo4mEaBBurM/+oe4T6D/dAhoSee0e5jMM4KrjpPvAFYcYMVc2XxMIw4kBOOR/0+8IM8YHaBv/0iN2yDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T05:03:07.245036Z"},"content_sha256":"3346d75c0a8672f4d82ba98b12097f28a253589f1cda81cfeb9e0fe1d471409e","schema_version":"1.0","event_id":"sha256:3346d75c0a8672f4d82ba98b12097f28a253589f1cda81cfeb9e0fe1d471409e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:P7SZTT7E7HX7TPTD7IRSISQ5H4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automated Localization for Unreproducible Builds","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"He Jiang, Jifeng Xuan, Zhilei Ren, Zijiang Yang","submitted_at":"2018-03-19T00:35:42Z","abstract_excerpt":"Reproducibility is the ability of recreating identical binaries under pre-defined build environments. Due to the need of quality assurance and the benefit of better detecting attacks against build environments, the practice of reproducible builds has gained popularity in many open-source software repositories such as Debian and Bitcoin. However, identifying the unreproducible issues remains a labour intensive and time consuming challenge, because of the lacking of information to guide the search and the diversity of the causes that may lead to the unreproducible binaries.\n  In this paper we pr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1803.06766","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:20:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uQwqaMHoN/EIfNAxTuBYyY1iO7qvRPEbHvu3yeJ5okdQm10ndGmzfGLbpBZVdx6xPIZ0MSzLlkOEIJEjUgBIAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T05:03:07.245421Z"},"content_sha256":"a425b6064a1e172048f4336298021ea4da7626d9e7065119765705e26c7d1c22","schema_version":"1.0","event_id":"sha256:a425b6064a1e172048f4336298021ea4da7626d9e7065119765705e26c7d1c22"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P7SZTT7E7HX7TPTD7IRSISQ5H4/bundle.json","state_url":"https://pith.science/pith/P7SZTT7E7HX7TPTD7IRSISQ5H4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P7SZTT7E7HX7TPTD7IRSISQ5H4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-05T05:03:07Z","links":{"resolver":"https://pith.science/pith/P7SZTT7E7HX7TPTD7IRSISQ5H4","bundle":"https://pith.science/pith/P7SZTT7E7HX7TPTD7IRSISQ5H4/bundle.json","state":"https://pith.science/pith/P7SZTT7E7HX7TPTD7IRSISQ5H4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P7SZTT7E7HX7TPTD7IRSISQ5H4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:P7SZTT7E7HX7TPTD7IRSISQ5H4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"af48bc23afbfb06e2a3daccbe37f5d8e2f37b7492187d06e9581cc0e7b000d08","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-03-19T00:35:42Z","title_canon_sha256":"9ae9eccd83cca88bc1243332884f98a27d362301af64e5ad4fcdd341e6cf1863"},"schema_version":"1.0","source":{"id":"1803.06766","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1803.06766","created_at":"2026-05-18T00:20:43Z"},{"alias_kind":"arxiv_version","alias_value":"1803.06766v1","created_at":"2026-05-18T00:20:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1803.06766","created_at":"2026-05-18T00:20:43Z"},{"alias_kind":"pith_short_12","alias_value":"P7SZTT7E7HX7","created_at":"2026-05-18T12:32:43Z"},{"alias_kind":"pith_short_16","alias_value":"P7SZTT7E7HX7TPTD","created_at":"2026-05-18T12:32:43Z"},{"alias_kind":"pith_short_8","alias_value":"P7SZTT7E","created_at":"2026-05-18T12:32:43Z"}],"graph_snapshots":[{"event_id":"sha256:a425b6064a1e172048f4336298021ea4da7626d9e7065119765705e26c7d1c22","target":"graph","created_at":"2026-05-18T00:20:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Reproducibility is the ability of recreating identical binaries under pre-defined build environments. Due to the need of quality assurance and the benefit of better detecting attacks against build environments, the practice of reproducible builds has gained popularity in many open-source software repositories such as Debian and Bitcoin. However, identifying the unreproducible issues remains a labour intensive and time consuming challenge, because of the lacking of information to guide the search and the diversity of the causes that may lead to the unreproducible binaries.\n  In this paper we pr","authors_text":"He Jiang, Jifeng Xuan, Zhilei Ren, Zijiang Yang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-03-19T00:35:42Z","title":"Automated Localization for Unreproducible Builds"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1803.06766","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3346d75c0a8672f4d82ba98b12097f28a253589f1cda81cfeb9e0fe1d471409e","target":"record","created_at":"2026-05-18T00:20:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"af48bc23afbfb06e2a3daccbe37f5d8e2f37b7492187d06e9581cc0e7b000d08","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-03-19T00:35:42Z","title_canon_sha256":"9ae9eccd83cca88bc1243332884f98a27d362301af64e5ad4fcdd341e6cf1863"},"schema_version":"1.0","source":{"id":"1803.06766","kind":"arxiv","version":1}},"canonical_sha256":"7fe599cfe4f9eff9be63fa23244a1d3f0d4229ccd4738e2448e63bf3bdaba75c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7fe599cfe4f9eff9be63fa23244a1d3f0d4229ccd4738e2448e63bf3bdaba75c","first_computed_at":"2026-05-18T00:20:43.817077Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:20:43.817077Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kKrEeKvWHBrRrzVQKgY7KYAZLl7vHlz/0HjJfHt0gd/RJ2q+5Yel+KB5ku2kAs+aFeHC8+163IDcoliYn0NeDw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:20:43.817763Z","signed_message":"canonical_sha256_bytes"},"source_id":"1803.06766","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3346d75c0a8672f4d82ba98b12097f28a253589f1cda81cfeb9e0fe1d471409e","sha256:a425b6064a1e172048f4336298021ea4da7626d9e7065119765705e26c7d1c22"],"state_sha256":"f22a820f289c6ea5bcc78ec884dcde9bcbc4a1f8b74095baab1200b3ad7adde2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lUmD2prarT0F2+wo2lWSKjo2z7wx3ev8uF+N6RfsBaG95KE5yprODD+1t3yhAJi7tSDI5AmcIYbFOHmrjGnkBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-05T05:03:07.247642Z","bundle_sha256":"ab7e8e2bb69e759e7cffbe77dc2052c36a6613366a4c9ece93393dfe9bd00d54"}}