{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:RCWUXWXDBL3S4O35IX5XSJY7XD","short_pith_number":"pith:RCWUXWXD","canonical_record":{"source":{"id":"2508.10038","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-10T09:19:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"25804171065b0197c6fe58cfb6a45aa3c107dff62914aa8ae08d4b9be99c6d81","abstract_canon_sha256":"c56544450abc505170905edcbaade3f088afa277542318d4f9b70b9b4fc530a4"},"schema_version":"1.0"},"canonical_sha256":"88ad4bdae30af72e3b7d45fb79271fb8f0ca03ad371d672b05ba8b5ec2b87e5d","source":{"kind":"arxiv","id":"2508.10038","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.10038","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"arxiv_version","alias_value":"2508.10038v1","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.10038","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"pith_short_12","alias_value":"RCWUXWXDBL3S","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"pith_short_16","alias_value":"RCWUXWXDBL3S4O35","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"pith_short_8","alias_value":"RCWUXWXD","created_at":"2026-07-05T11:53:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:RCWUXWXDBL3S4O35IX5XSJY7XD","target":"record","payload":{"canonical_record":{"source":{"id":"2508.10038","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-10T09:19:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"25804171065b0197c6fe58cfb6a45aa3c107dff62914aa8ae08d4b9be99c6d81","abstract_canon_sha256":"c56544450abc505170905edcbaade3f088afa277542318d4f9b70b9b4fc530a4"},"schema_version":"1.0"},"canonical_sha256":"88ad4bdae30af72e3b7d45fb79271fb8f0ca03ad371d672b05ba8b5ec2b87e5d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:53:29.682418Z","signature_b64":"APUOBPw+0iKOruCMp2e7CaUx0J7HxClqqw7kUvNAHDuXO4ag0WC5qVegzv5ElF/w84p66fPGmKmgu+N9mgKUCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"88ad4bdae30af72e3b7d45fb79271fb8f0ca03ad371d672b05ba8b5ec2b87e5d","last_reissued_at":"2026-07-05T11:53:29.681839Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:53:29.681839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.10038","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EbBudi5pqXOWP6tUjqGfcQcIQTRlJ/9mWqvensnylL4oz+wMJRTR5tGEWG+Cjt75HExNXGYMpkQuMntawVMSAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:16:00.408737Z"},"content_sha256":"ddad8dbb0d5ecc4e0690e0f5383c155b90f3589728809315241453249a1edad3","schema_version":"1.0","event_id":"sha256:ddad8dbb0d5ecc4e0690e0f5383c155b90f3589728809315241453249a1edad3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:RCWUXWXDBL3S4O35IX5XSJY7XD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Certifiably robust malware detectors by design","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Mario Fritz, Pierre-Francois Gimenez, Sarath Sivaprasad","submitted_at":"2025-08-10T09:19:29Z","abstract_excerpt":"Malware analysis involves analyzing suspicious software to detect malicious payloads. Static malware analysis, which does not require software execution, relies increasingly on machine learning techniques to achieve scalability. Although such techniques obtain very high detection accuracy, they can be easily evaded with adversarial examples where a few modifications of the sample can dupe the detector without modifying the behavior of the software. Unlike other domains, such as computer vision, creating an adversarial example of malware without altering its functionality requires specific tran"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.10038","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.10038/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kq47UBBSGVwdHiuWbE2UXlx8ClhAU4yGrDLREFXovnOoxhwSCqHKIzMLICO200ieEieWR2kXsYTSBWsAHyPeAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:16:00.409227Z"},"content_sha256":"f7e4c0e2fcb8bc689bb3b9b3214414b3b60d1ae51702e1e5f3ea807c0d092d59","schema_version":"1.0","event_id":"sha256:f7e4c0e2fcb8bc689bb3b9b3214414b3b60d1ae51702e1e5f3ea807c0d092d59"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RCWUXWXDBL3S4O35IX5XSJY7XD/bundle.json","state_url":"https://pith.science/pith/RCWUXWXDBL3S4O35IX5XSJY7XD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RCWUXWXDBL3S4O35IX5XSJY7XD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T16:16:00Z","links":{"resolver":"https://pith.science/pith/RCWUXWXDBL3S4O35IX5XSJY7XD","bundle":"https://pith.science/pith/RCWUXWXDBL3S4O35IX5XSJY7XD/bundle.json","state":"https://pith.science/pith/RCWUXWXDBL3S4O35IX5XSJY7XD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RCWUXWXDBL3S4O35IX5XSJY7XD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:RCWUXWXDBL3S4O35IX5XSJY7XD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c56544450abc505170905edcbaade3f088afa277542318d4f9b70b9b4fc530a4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-10T09:19:29Z","title_canon_sha256":"25804171065b0197c6fe58cfb6a45aa3c107dff62914aa8ae08d4b9be99c6d81"},"schema_version":"1.0","source":{"id":"2508.10038","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.10038","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"arxiv_version","alias_value":"2508.10038v1","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.10038","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"pith_short_12","alias_value":"RCWUXWXDBL3S","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"pith_short_16","alias_value":"RCWUXWXDBL3S4O35","created_at":"2026-07-05T11:53:29Z"},{"alias_kind":"pith_short_8","alias_value":"RCWUXWXD","created_at":"2026-07-05T11:53:29Z"}],"graph_snapshots":[{"event_id":"sha256:f7e4c0e2fcb8bc689bb3b9b3214414b3b60d1ae51702e1e5f3ea807c0d092d59","target":"graph","created_at":"2026-07-05T11:53:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.10038/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malware analysis involves analyzing suspicious software to detect malicious payloads. Static malware analysis, which does not require software execution, relies increasingly on machine learning techniques to achieve scalability. Although such techniques obtain very high detection accuracy, they can be easily evaded with adversarial examples where a few modifications of the sample can dupe the detector without modifying the behavior of the software. Unlike other domains, such as computer vision, creating an adversarial example of malware without altering its functionality requires specific tran","authors_text":"Mario Fritz, Pierre-Francois Gimenez, Sarath Sivaprasad","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-10T09:19:29Z","title":"Certifiably robust malware detectors by design"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.10038","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ddad8dbb0d5ecc4e0690e0f5383c155b90f3589728809315241453249a1edad3","target":"record","created_at":"2026-07-05T11:53:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c56544450abc505170905edcbaade3f088afa277542318d4f9b70b9b4fc530a4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-10T09:19:29Z","title_canon_sha256":"25804171065b0197c6fe58cfb6a45aa3c107dff62914aa8ae08d4b9be99c6d81"},"schema_version":"1.0","source":{"id":"2508.10038","kind":"arxiv","version":1}},"canonical_sha256":"88ad4bdae30af72e3b7d45fb79271fb8f0ca03ad371d672b05ba8b5ec2b87e5d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"88ad4bdae30af72e3b7d45fb79271fb8f0ca03ad371d672b05ba8b5ec2b87e5d","first_computed_at":"2026-07-05T11:53:29.681839Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:53:29.681839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"APUOBPw+0iKOruCMp2e7CaUx0J7HxClqqw7kUvNAHDuXO4ag0WC5qVegzv5ElF/w84p66fPGmKmgu+N9mgKUCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:53:29.682418Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.10038","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ddad8dbb0d5ecc4e0690e0f5383c155b90f3589728809315241453249a1edad3","sha256:f7e4c0e2fcb8bc689bb3b9b3214414b3b60d1ae51702e1e5f3ea807c0d092d59"],"state_sha256":"2855a549cfc8852e658da8dfdb988f0382d04106334e44be3dfdcee89bdd528b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9l8AM6WRaDlO2mjPSsrMJ4BK0PnSbOUw9bE6VcDrUnY0WlAX+h1odEkfJY/oosmmSZ2ao2P3zC0sqmJi2+XiCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T16:16:00.413523Z","bundle_sha256":"903de7fc42e19af4ed3060d4b8d9818776e25fe3c223a90d3c70cabeb01377fb"}}