{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:QLAKCBSJLLZGLTTQB6NKPGS4NL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"979312f56580beb3e1bc4971892860b91ece62c2a19f0572d028d8b936d493b4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-01-11T15:14:18Z","title_canon_sha256":"c4abc06dc04bf119a024c6cdb3bf846e4e56aea2ea02422c1d95f9fd9cbac904"},"schema_version":"1.0","source":{"id":"2601.06948","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2601.06948","created_at":"2026-05-27T00:04:24Z"},{"alias_kind":"arxiv_version","alias_value":"2601.06948v2","created_at":"2026-05-27T00:04:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2601.06948","created_at":"2026-05-27T00:04:24Z"},{"alias_kind":"pith_short_12","alias_value":"QLAKCBSJLLZG","created_at":"2026-05-27T00:04:24Z"},{"alias_kind":"pith_short_16","alias_value":"QLAKCBSJLLZGLTTQ","created_at":"2026-05-27T00:04:24Z"},{"alias_kind":"pith_short_8","alias_value":"QLAKCBSJ","created_at":"2026-05-27T00:04:24Z"}],"graph_snapshots":[{"event_id":"sha256:651db41565d2faa66972090a6501676a6f9837e92e3380d6de91369af9eded73","target":"graph","created_at":"2026-05-27T00:04:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2601.06948/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Open-source software (OSS) is a critical component of modern software systems, yet supply chain security remains challenging in practice due to unavailable or obfuscated source code. Consequently, security teams often rely on runtime observations collected from sandboxed executions to investigate suspicious third-party components. We present HeteroGAT-Rank, an industry-oriented runtime behavior mining system that supports analyst-in-the-loop supply chain threat investigation. The system models execution-time behaviors of OSS packages as lightweight heterogeneous graphs and applies attention-ba","authors_text":"Christos Anagnostopoulos, Jeremy Singer, Ke Xiao, Zhuoran Tan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-01-11T15:14:18Z","title":"Operational Runtime Behavior Mining for Open-Source Supply Chain Security"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2601.06948","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:51985f702dfc04504b9d889a4efa6579cb99cd973fe9609fd265e7568030e1f5","target":"record","created_at":"2026-05-27T00:04:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"979312f56580beb3e1bc4971892860b91ece62c2a19f0572d028d8b936d493b4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-01-11T15:14:18Z","title_canon_sha256":"c4abc06dc04bf119a024c6cdb3bf846e4e56aea2ea02422c1d95f9fd9cbac904"},"schema_version":"1.0","source":{"id":"2601.06948","kind":"arxiv","version":2}},"canonical_sha256":"82c0a106495af265ce700f9aa79a5c6af2b94495d347bcc86481c17b1eb43d75","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"82c0a106495af265ce700f9aa79a5c6af2b94495d347bcc86481c17b1eb43d75","first_computed_at":"2026-05-27T00:04:24.421089Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-27T00:04:24.421089Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UqkBSePXkP7FEtzjZ8UHiY+xMIglfThBrZ2Ruiksb4UNETHpUJcPkUFvtQxAyEw5ivOKCtI/yYHdMn3ivi/hCg==","signature_status":"signed_v1","signed_at":"2026-05-27T00:04:24.421763Z","signed_message":"canonical_sha256_bytes"},"source_id":"2601.06948","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:51985f702dfc04504b9d889a4efa6579cb99cd973fe9609fd265e7568030e1f5","sha256:651db41565d2faa66972090a6501676a6f9837e92e3380d6de91369af9eded73"],"state_sha256":"e9996a55d244ec96c0fac9db81f0a93558c63b71d9e738e54ae083cb29a916aa"}