{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:R2CW5WUJB2VPUQY6DPSLTAKHTI","short_pith_number":"pith:R2CW5WUJ","canonical_record":{"source":{"id":"2608.01728","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.NI","submitted_at":"2026-08-03T05:52:43Z","cross_cats_sorted":[],"title_canon_sha256":"30172682ad5084644a13a55a4aef37e7a36e3b62635d601d56fcd8a36f281cb8","abstract_canon_sha256":"3038745df883995d5b30ae5f629065c6214adb4e82349a24638b0af9ff182502"},"schema_version":"1.0"},"canonical_sha256":"8e856eda890eaafa431e1be4b981479a09b4be8797c9bb47dff4707288b19b91","source":{"kind":"arxiv","id":"2608.01728","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01728","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01728v1","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01728","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"pith_short_12","alias_value":"R2CW5WUJB2VP","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"pith_short_16","alias_value":"R2CW5WUJB2VPUQY6","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"pith_short_8","alias_value":"R2CW5WUJ","created_at":"2026-08-04T02:06:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:R2CW5WUJB2VPUQY6DPSLTAKHTI","target":"record","payload":{"canonical_record":{"source":{"id":"2608.01728","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.NI","submitted_at":"2026-08-03T05:52:43Z","cross_cats_sorted":[],"title_canon_sha256":"30172682ad5084644a13a55a4aef37e7a36e3b62635d601d56fcd8a36f281cb8","abstract_canon_sha256":"3038745df883995d5b30ae5f629065c6214adb4e82349a24638b0af9ff182502"},"schema_version":"1.0"},"canonical_sha256":"8e856eda890eaafa431e1be4b981479a09b4be8797c9bb47dff4707288b19b91","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T02:06:38.052897Z","signature_b64":"gRP7r2veAz9FIXAl4AUwN5czpCC/qZyS5WWDTmDjjChE5+ApeM8FdFpQYYGyYTm4mEeAqA7taJHevnieocnjBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8e856eda890eaafa431e1be4b981479a09b4be8797c9bb47dff4707288b19b91","last_reissued_at":"2026-08-04T02:06:38.051060Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T02:06:38.051060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.01728","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:06:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g/vFRd3QkhN8AbOE/FDbkO3GiaMbK/WUs8k1EkisFjVsP8OH3tgXRUoIz47+1LYIlcxX0eJgarPD4oTIDiECDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:53:02.434469Z"},"content_sha256":"73973aab7ab2d9f6cf78f2e31f3465a2a6b0d55ca1c83fe1ba271c68f73e0d05","schema_version":"1.0","event_id":"sha256:73973aab7ab2d9f6cf78f2e31f3465a2a6b0d55ca1c83fe1ba271c68f73e0d05"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:R2CW5WUJB2VPUQY6DPSLTAKHTI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Predictive Exposure and Cryptographic Readiness: A Vendor-Neutral Framework, a, Bounded Multivocal Evidence Analysis, and Reproducible Synthetic Evaluation for SD-WAN Environments","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.NI","authors_text":"Saeed Alam","submitted_at":"2026-08-03T05:52:43Z","abstract_excerpt":"SD-WAN teams often use static severity scores to decide what to fix first. These scores do not show live exploitation, network exposure, attack paths, business impact, or cryptographic migration risk. This study asks whether a vendor-neutral PECR framework can produce a different and more traceable ranking than CVSS alone. We reviewed 19 DOI-verified publications from 2020-2026 and five current NIST documents. The review supported ten normalized factors, one weighted score, and a separate confidence measure. We then compared equal-weight PECR with CVSS in five synthetic cases. The tests used K"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01728","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.01728/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:06:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"InjANrREKIdjQYnWEsp4cUhvBVrwGfcHHcysa4VrEyM7M1Wpt/Ad1O6s4sUBKHPryKhttZHt6lzP3UBpZ2IsBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:53:02.434965Z"},"content_sha256":"694523ba715627d0fda8338bda2c82c3701c591f0d9b8792a5e9ebdf008cbf69","schema_version":"1.0","event_id":"sha256:694523ba715627d0fda8338bda2c82c3701c591f0d9b8792a5e9ebdf008cbf69"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:R2CW5WUJB2VPUQY6DPSLTAKHTI","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.30574/wjarr.2026.30.1.1006) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"K. G. Agyei et al., “Explainable risk-based vulnerability prioritization in hybrid cloud: Integrating CVSS, EPSS, and CISA KEV with asset criticality signals,” World Journal of Advanced Research and Reviews, vol. 30, no. 1, pp. 2044–2052, 2","arxiv_id":"2608.01728","detector":"doi_compliance","evidence":{"ref_index":8,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.30574/wjarr.2026","reconstructed_doi":"10.30574/wjarr.2026.30.1.1006"},"severity":"advisory","ref_index":8,"audited_at":"2026-08-04T22:08:05.695599Z","event_type":"pith.integrity.v1","detected_doi":"10.30574/wjarr.2026.30.1.1006","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"a1e2e577ff4c594cfc1939fd3796a18a6c0c5bc18ee63ac6b53883de71515845","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":17953,"payload_sha256":"2901c5682dc3abf4ad067bbe9e3d7821de709670af680f3016450356b9193600","signature_b64":"9W0dQ15bmNEOEJfWYd3+4c3GEA76tzX7foyqoHHPeGWIp8zG+xDDFZ6uE1aofhWGU2wQFdATLEeQcIa8mXyYBA==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T22:08:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ECk6AY1wHMZHsCDaKfoJl8G3X3xtI24VOh1uoeBIjyEKFkfBe1FkeYVdTWzUubblPKOp8C8UIvAINLSBnQr4CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:53:02.437395Z"},"content_sha256":"9a8239e45d25d4887afa55e59fa8ee33ae574eefe64741653711f33c92aff870","schema_version":"1.0","event_id":"sha256:9a8239e45d25d4887afa55e59fa8ee33ae574eefe64741653711f33c92aff870"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R2CW5WUJB2VPUQY6DPSLTAKHTI/bundle.json","state_url":"https://pith.science/pith/R2CW5WUJB2VPUQY6DPSLTAKHTI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R2CW5WUJB2VPUQY6DPSLTAKHTI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T21:53:02Z","links":{"resolver":"https://pith.science/pith/R2CW5WUJB2VPUQY6DPSLTAKHTI","bundle":"https://pith.science/pith/R2CW5WUJB2VPUQY6DPSLTAKHTI/bundle.json","state":"https://pith.science/pith/R2CW5WUJB2VPUQY6DPSLTAKHTI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R2CW5WUJB2VPUQY6DPSLTAKHTI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:R2CW5WUJB2VPUQY6DPSLTAKHTI","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3038745df883995d5b30ae5f629065c6214adb4e82349a24638b0af9ff182502","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.NI","submitted_at":"2026-08-03T05:52:43Z","title_canon_sha256":"30172682ad5084644a13a55a4aef37e7a36e3b62635d601d56fcd8a36f281cb8"},"schema_version":"1.0","source":{"id":"2608.01728","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01728","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01728v1","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01728","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"pith_short_12","alias_value":"R2CW5WUJB2VP","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"pith_short_16","alias_value":"R2CW5WUJB2VPUQY6","created_at":"2026-08-04T02:06:38Z"},{"alias_kind":"pith_short_8","alias_value":"R2CW5WUJ","created_at":"2026-08-04T02:06:38Z"}],"graph_snapshots":[{"event_id":"sha256:694523ba715627d0fda8338bda2c82c3701c591f0d9b8792a5e9ebdf008cbf69","target":"graph","created_at":"2026-08-04T02:06:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.01728/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"SD-WAN teams often use static severity scores to decide what to fix first. These scores do not show live exploitation, network exposure, attack paths, business impact, or cryptographic migration risk. This study asks whether a vendor-neutral PECR framework can produce a different and more traceable ranking than CVSS alone. We reviewed 19 DOI-verified publications from 2020-2026 and five current NIST documents. The review supported ten normalized factors, one weighted score, and a separate confidence measure. We then compared equal-weight PECR with CVSS in five synthetic cases. The tests used K","authors_text":"Saeed Alam","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.NI","submitted_at":"2026-08-03T05:52:43Z","title":"Predictive Exposure and Cryptographic Readiness: A Vendor-Neutral Framework, a, Bounded Multivocal Evidence Analysis, and Reproducible Synthetic Evaluation for SD-WAN Environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01728","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:73973aab7ab2d9f6cf78f2e31f3465a2a6b0d55ca1c83fe1ba271c68f73e0d05","target":"record","created_at":"2026-08-04T02:06:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3038745df883995d5b30ae5f629065c6214adb4e82349a24638b0af9ff182502","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.NI","submitted_at":"2026-08-03T05:52:43Z","title_canon_sha256":"30172682ad5084644a13a55a4aef37e7a36e3b62635d601d56fcd8a36f281cb8"},"schema_version":"1.0","source":{"id":"2608.01728","kind":"arxiv","version":1}},"canonical_sha256":"8e856eda890eaafa431e1be4b981479a09b4be8797c9bb47dff4707288b19b91","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8e856eda890eaafa431e1be4b981479a09b4be8797c9bb47dff4707288b19b91","first_computed_at":"2026-08-04T02:06:38.051060Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T02:06:38.051060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gRP7r2veAz9FIXAl4AUwN5czpCC/qZyS5WWDTmDjjChE5+ApeM8FdFpQYYGyYTm4mEeAqA7taJHevnieocnjBA==","signature_status":"signed_v1","signed_at":"2026-08-04T02:06:38.052897Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.01728","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:73973aab7ab2d9f6cf78f2e31f3465a2a6b0d55ca1c83fe1ba271c68f73e0d05","sha256:694523ba715627d0fda8338bda2c82c3701c591f0d9b8792a5e9ebdf008cbf69","sha256:9a8239e45d25d4887afa55e59fa8ee33ae574eefe64741653711f33c92aff870"],"state_sha256":"3e244bce48c66598b98b39f4c00500c6f82a69d7c4b37ac0aec1d71c29214135"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tLWeXG6FoZS8rgcjuCkJd1WE24+t4yCFsDNNw/+cs7OYrLUzAJuToD3GNH8LoPXsQEThuEfzyk3GUpDh3V6gBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T21:53:02.439532Z","bundle_sha256":"33aa0633ac57f08688d371106f5b7c3dc17ed0a1aa0b952591eb40f39a7d54b4"}}