{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:PIUUX3WOW6NI6ALHVVQ2CDFDBA","short_pith_number":"pith:PIUUX3WO","canonical_record":{"source":{"id":"2501.08249","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.PL","submitted_at":"2025-01-14T16:40:05Z","cross_cats_sorted":["cs.CR","cs.OS"],"title_canon_sha256":"aee6255fdc57570edd5682870ce22d838f7696805103bc4acc12e266da8df7d3","abstract_canon_sha256":"b786215b5ad54a646dd8ee51bc5998f152a35efdd268a31299f7fbbaf6c27a2e"},"schema_version":"1.0"},"canonical_sha256":"7a294beeceb79a8f0167ad61a10ca30820d2f54e16ebb778d38ee9e99c7cd129","source":{"kind":"arxiv","id":"2501.08249","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.08249","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"arxiv_version","alias_value":"2501.08249v2","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.08249","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"pith_short_12","alias_value":"PIUUX3WOW6NI","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"pith_short_16","alias_value":"PIUUX3WOW6NI6ALH","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"pith_short_8","alias_value":"PIUUX3WO","created_at":"2026-07-05T11:12:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:PIUUX3WOW6NI6ALHVVQ2CDFDBA","target":"record","payload":{"canonical_record":{"source":{"id":"2501.08249","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.PL","submitted_at":"2025-01-14T16:40:05Z","cross_cats_sorted":["cs.CR","cs.OS"],"title_canon_sha256":"aee6255fdc57570edd5682870ce22d838f7696805103bc4acc12e266da8df7d3","abstract_canon_sha256":"b786215b5ad54a646dd8ee51bc5998f152a35efdd268a31299f7fbbaf6c27a2e"},"schema_version":"1.0"},"canonical_sha256":"7a294beeceb79a8f0167ad61a10ca30820d2f54e16ebb778d38ee9e99c7cd129","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:24.352703Z","signature_b64":"zmTqGWpUtY/u5WoWkwNzh9S0fiT/EUZ6opVFvE30rFxhhbelMJWqdOOZaLVqpX+aCy/9F4O2Osq04+Rp8AODDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7a294beeceb79a8f0167ad61a10ca30820d2f54e16ebb778d38ee9e99c7cd129","last_reissued_at":"2026-07-05T11:12:24.352126Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:24.352126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.08249","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CHx8y5v2WBbuf6pSjDOn9rNCVqRFAUqJ0wawVtXv/mmoKCItvSz7nRN+a9vFKCuBjfD3vKKFbHMhH0CO1lNsAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T05:56:29.170827Z"},"content_sha256":"82b362d9c0ac23d5cd9e4dff75365729b1fbe02f278749723a332a0eee85031f","schema_version":"1.0","event_id":"sha256:82b362d9c0ac23d5cd9e4dff75365729b1fbe02f278749723a332a0eee85031f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:PIUUX3WOW6NI6ALHVVQ2CDFDBA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Verifying Device Drivers with Pancake","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.CR","cs.OS"],"primary_cat":"cs.PL","authors_text":"Alessandro Legnani, Gernot Heiser, Hira Syeda, H. Truong, Johannes {\\AA}man Pohjola, Junming Zhao, Magnus Myreen, Michael Norrish, Miki Tanaka, Rob Sison, Thomas Sewell, Tiana Tsang Ung, Tsun Wang Sau","submitted_at":"2025-01-14T16:40:05Z","abstract_excerpt":"Device driver bugs are the leading cause of OS compromises, and their formal verification is therefore highly desirable. To the best of our knowledge, no realistic and performant driver has been verified for a non-trivial device. We propose Pancake, an imperative language for systems programming that features a well-defined and verification-friendly semantics. Leveraging the verified compiler backend of the CakeML functional language, we develop a compiler for Pancake that guarantees that the binary retains the semantics of the source code. Usng automatic translation of Pancake to the Viper SM"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.08249","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.08249/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x/Pn1C/nqK7td9Sp//6xBFMP2R4jKaPXNLspnGJtpzYnQHd8Aw8P5C4Wp/ruzGjLizNILvM/zAh0Z9HFmQsdBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T05:56:29.171678Z"},"content_sha256":"22666eb5ee47c3269cb390835f6bf0d5ad9d441870e34ace259b1d368f5aecea","schema_version":"1.0","event_id":"sha256:22666eb5ee47c3269cb390835f6bf0d5ad9d441870e34ace259b1d368f5aecea"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PIUUX3WOW6NI6ALHVVQ2CDFDBA/bundle.json","state_url":"https://pith.science/pith/PIUUX3WOW6NI6ALHVVQ2CDFDBA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PIUUX3WOW6NI6ALHVVQ2CDFDBA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T05:56:29Z","links":{"resolver":"https://pith.science/pith/PIUUX3WOW6NI6ALHVVQ2CDFDBA","bundle":"https://pith.science/pith/PIUUX3WOW6NI6ALHVVQ2CDFDBA/bundle.json","state":"https://pith.science/pith/PIUUX3WOW6NI6ALHVVQ2CDFDBA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PIUUX3WOW6NI6ALHVVQ2CDFDBA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PIUUX3WOW6NI6ALHVVQ2CDFDBA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b786215b5ad54a646dd8ee51bc5998f152a35efdd268a31299f7fbbaf6c27a2e","cross_cats_sorted":["cs.CR","cs.OS"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.PL","submitted_at":"2025-01-14T16:40:05Z","title_canon_sha256":"aee6255fdc57570edd5682870ce22d838f7696805103bc4acc12e266da8df7d3"},"schema_version":"1.0","source":{"id":"2501.08249","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.08249","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"arxiv_version","alias_value":"2501.08249v2","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.08249","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"pith_short_12","alias_value":"PIUUX3WOW6NI","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"pith_short_16","alias_value":"PIUUX3WOW6NI6ALH","created_at":"2026-07-05T11:12:24Z"},{"alias_kind":"pith_short_8","alias_value":"PIUUX3WO","created_at":"2026-07-05T11:12:24Z"}],"graph_snapshots":[{"event_id":"sha256:22666eb5ee47c3269cb390835f6bf0d5ad9d441870e34ace259b1d368f5aecea","target":"graph","created_at":"2026-07-05T11:12:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.08249/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Device driver bugs are the leading cause of OS compromises, and their formal verification is therefore highly desirable. To the best of our knowledge, no realistic and performant driver has been verified for a non-trivial device. We propose Pancake, an imperative language for systems programming that features a well-defined and verification-friendly semantics. Leveraging the verified compiler backend of the CakeML functional language, we develop a compiler for Pancake that guarantees that the binary retains the semantics of the source code. Usng automatic translation of Pancake to the Viper SM","authors_text":"Alessandro Legnani, Gernot Heiser, Hira Syeda, H. Truong, Johannes {\\AA}man Pohjola, Junming Zhao, Magnus Myreen, Michael Norrish, Miki Tanaka, Rob Sison, Thomas Sewell, Tiana Tsang Ung, Tsun Wang Sau","cross_cats":["cs.CR","cs.OS"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.PL","submitted_at":"2025-01-14T16:40:05Z","title":"Verifying Device Drivers with Pancake"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.08249","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:82b362d9c0ac23d5cd9e4dff75365729b1fbe02f278749723a332a0eee85031f","target":"record","created_at":"2026-07-05T11:12:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b786215b5ad54a646dd8ee51bc5998f152a35efdd268a31299f7fbbaf6c27a2e","cross_cats_sorted":["cs.CR","cs.OS"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.PL","submitted_at":"2025-01-14T16:40:05Z","title_canon_sha256":"aee6255fdc57570edd5682870ce22d838f7696805103bc4acc12e266da8df7d3"},"schema_version":"1.0","source":{"id":"2501.08249","kind":"arxiv","version":2}},"canonical_sha256":"7a294beeceb79a8f0167ad61a10ca30820d2f54e16ebb778d38ee9e99c7cd129","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7a294beeceb79a8f0167ad61a10ca30820d2f54e16ebb778d38ee9e99c7cd129","first_computed_at":"2026-07-05T11:12:24.352126Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:24.352126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zmTqGWpUtY/u5WoWkwNzh9S0fiT/EUZ6opVFvE30rFxhhbelMJWqdOOZaLVqpX+aCy/9F4O2Osq04+Rp8AODDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:24.352703Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.08249","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:82b362d9c0ac23d5cd9e4dff75365729b1fbe02f278749723a332a0eee85031f","sha256:22666eb5ee47c3269cb390835f6bf0d5ad9d441870e34ace259b1d368f5aecea"],"state_sha256":"13a240d8bcdbd71d31dff34afd7dbcc1e92cc5a6715e6b237fe35e08b87a80b0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8pOohw4JhvFilW23QYH60swWtlT3jfRSU83U80cRSweWtpyf1zcK/gfWhShhPzyzbE5P7mMMNBuw7UDd/lP/Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T05:56:29.177611Z","bundle_sha256":"e5f9619d019ccb29653a80b6b50ae26d39003d2249032f590f30596adf203eca"}}