{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QUXGQYOA4CMJYRIZUT4BVRUYBI","short_pith_number":"pith:QUXGQYOA","canonical_record":{"source":{"id":"2310.02530","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T02:08:18Z","cross_cats_sorted":[],"title_canon_sha256":"15550828682e42e72029f4ad7bb0bb82932ebd6b40b8124cd976520fcea40d96","abstract_canon_sha256":"f5a4423ad592469898d2a41c2e4255149b0b24e11998269d320254052dda46ca"},"schema_version":"1.0"},"canonical_sha256":"852e6861c0e0989c4519a4f81ac6980a268aeff2c3b64d2e4572479a25dc2361","source":{"kind":"arxiv","id":"2310.02530","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.02530","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"arxiv_version","alias_value":"2310.02530v2","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.02530","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_12","alias_value":"QUXGQYOA4CMJ","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_16","alias_value":"QUXGQYOA4CMJYRIZ","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_8","alias_value":"QUXGQYOA","created_at":"2026-07-05T08:29:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QUXGQYOA4CMJYRIZUT4BVRUYBI","target":"record","payload":{"canonical_record":{"source":{"id":"2310.02530","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T02:08:18Z","cross_cats_sorted":[],"title_canon_sha256":"15550828682e42e72029f4ad7bb0bb82932ebd6b40b8124cd976520fcea40d96","abstract_canon_sha256":"f5a4423ad592469898d2a41c2e4255149b0b24e11998269d320254052dda46ca"},"schema_version":"1.0"},"canonical_sha256":"852e6861c0e0989c4519a4f81ac6980a268aeff2c3b64d2e4572479a25dc2361","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:29:17.795553Z","signature_b64":"gqF/J5srIdwu/L/jGglTt6X2mSPdgOA2BrH1kRddYs+glWCCScV3/mIIH3Iai23EKTLF2hDI6REO8aAPN0huDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"852e6861c0e0989c4519a4f81ac6980a268aeff2c3b64d2e4572479a25dc2361","last_reissued_at":"2026-07-05T08:29:17.795009Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:29:17.795009Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.02530","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O28J7wN1hG3zodXAmQ6bi1OsMMQK0xnb2g+1UWx+YgwxPQsqljbwuDcgZ7XmGaaWKrEAx3cic59VJN6Foy9NBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T12:44:19.022245Z"},"content_sha256":"d02681c55b21323a29d815d208ecb3da65763aab5de0c15697de6dd737092638","schema_version":"1.0","event_id":"sha256:d02681c55b21323a29d815d208ecb3da65763aab5de0c15697de6dd737092638"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QUXGQYOA4CMJYRIZUT4BVRUYBI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CompVPD: Iteratively Identifying Vulnerability Patches Based on Human Validation Results with a Precise Context","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ding Li, Guangtai Liang, Jingyi Liu, Lin Li, Qianxiang Wang, Taotao Qian, Tao Xie, Tianyu Chen, Wei Yang","submitted_at":"2023-10-04T02:08:18Z","abstract_excerpt":"Applying security patches in open source software timely is critical for ensuring the security of downstream applications. However, it is challenging to apply these patches promptly because notifications of patches are often incomplete and delayed. To address this issue, existing approaches employ deep-learning (DL) models to identify additional vulnerability patches by determining whether a code commit addresses a vulnerability. Nonetheless, these approaches suffer from low accuracy due to the imprecise context provided for the patches. To provide precise context for patches, we propose a mul"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.02530","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.02530/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VRPL7ah8miVaOJebx+Bnnrvx2dr09OtQN+oq3HHRx6SA/um3jAWtKTAA22mbCC9a0rBLpEn7ea8o3+VZ1YU5Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T12:44:19.022636Z"},"content_sha256":"e5efb745f6907358918eeb185ae9f9f85a0b64390ef8f9f41342e5618565febd","schema_version":"1.0","event_id":"sha256:e5efb745f6907358918eeb185ae9f9f85a0b64390ef8f9f41342e5618565febd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QUXGQYOA4CMJYRIZUT4BVRUYBI/bundle.json","state_url":"https://pith.science/pith/QUXGQYOA4CMJYRIZUT4BVRUYBI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QUXGQYOA4CMJYRIZUT4BVRUYBI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T12:44:19Z","links":{"resolver":"https://pith.science/pith/QUXGQYOA4CMJYRIZUT4BVRUYBI","bundle":"https://pith.science/pith/QUXGQYOA4CMJYRIZUT4BVRUYBI/bundle.json","state":"https://pith.science/pith/QUXGQYOA4CMJYRIZUT4BVRUYBI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QUXGQYOA4CMJYRIZUT4BVRUYBI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QUXGQYOA4CMJYRIZUT4BVRUYBI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f5a4423ad592469898d2a41c2e4255149b0b24e11998269d320254052dda46ca","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T02:08:18Z","title_canon_sha256":"15550828682e42e72029f4ad7bb0bb82932ebd6b40b8124cd976520fcea40d96"},"schema_version":"1.0","source":{"id":"2310.02530","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.02530","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"arxiv_version","alias_value":"2310.02530v2","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.02530","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_12","alias_value":"QUXGQYOA4CMJ","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_16","alias_value":"QUXGQYOA4CMJYRIZ","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_8","alias_value":"QUXGQYOA","created_at":"2026-07-05T08:29:17Z"}],"graph_snapshots":[{"event_id":"sha256:e5efb745f6907358918eeb185ae9f9f85a0b64390ef8f9f41342e5618565febd","target":"graph","created_at":"2026-07-05T08:29:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.02530/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Applying security patches in open source software timely is critical for ensuring the security of downstream applications. However, it is challenging to apply these patches promptly because notifications of patches are often incomplete and delayed. To address this issue, existing approaches employ deep-learning (DL) models to identify additional vulnerability patches by determining whether a code commit addresses a vulnerability. Nonetheless, these approaches suffer from low accuracy due to the imprecise context provided for the patches. To provide precise context for patches, we propose a mul","authors_text":"Ding Li, Guangtai Liang, Jingyi Liu, Lin Li, Qianxiang Wang, Taotao Qian, Tao Xie, Tianyu Chen, Wei Yang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T02:08:18Z","title":"CompVPD: Iteratively Identifying Vulnerability Patches Based on Human Validation Results with a Precise Context"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.02530","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d02681c55b21323a29d815d208ecb3da65763aab5de0c15697de6dd737092638","target":"record","created_at":"2026-07-05T08:29:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f5a4423ad592469898d2a41c2e4255149b0b24e11998269d320254052dda46ca","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T02:08:18Z","title_canon_sha256":"15550828682e42e72029f4ad7bb0bb82932ebd6b40b8124cd976520fcea40d96"},"schema_version":"1.0","source":{"id":"2310.02530","kind":"arxiv","version":2}},"canonical_sha256":"852e6861c0e0989c4519a4f81ac6980a268aeff2c3b64d2e4572479a25dc2361","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"852e6861c0e0989c4519a4f81ac6980a268aeff2c3b64d2e4572479a25dc2361","first_computed_at":"2026-07-05T08:29:17.795009Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:29:17.795009Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gqF/J5srIdwu/L/jGglTt6X2mSPdgOA2BrH1kRddYs+glWCCScV3/mIIH3Iai23EKTLF2hDI6REO8aAPN0huDA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:29:17.795553Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.02530","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d02681c55b21323a29d815d208ecb3da65763aab5de0c15697de6dd737092638","sha256:e5efb745f6907358918eeb185ae9f9f85a0b64390ef8f9f41342e5618565febd"],"state_sha256":"21729e703bc2b969fe787146c40b3bd5f61480125333188daca58798782a1397"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hB10UWNFTl+4CBVtUBlkyKZC8tLRS0SYYy+au7e45U/TeRMT2UVmY2kPjNbwgARUK6cA0WVi6NYIawVugbGaDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T12:44:19.024570Z","bundle_sha256":"40f47627c79290d3641f342159e949917c320dc6f84904f109df40c354f15204"}}