{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RI7F5PJGAKJ6S6KWPAFL6KIAE2","short_pith_number":"pith:RI7F5PJG","canonical_record":{"source":{"id":"2411.17274","kind":"arxiv","version":7},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-11-26T09:51:55Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f676dc43ee507c1a0ae4bf56a3fc706e37c0dfc772e49992c102df72ecea382b","abstract_canon_sha256":"6e2e96a3280632aa511afc14da8085b60de8180fcc1696ce731cc8cc6f9d0a05"},"schema_version":"1.0"},"canonical_sha256":"8a3e5ebd260293e97956780abf290026ad2ea1d006a1993b97c5259c0bb71f89","source":{"kind":"arxiv","id":"2411.17274","version":7},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.17274","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"arxiv_version","alias_value":"2411.17274v7","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.17274","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"pith_short_12","alias_value":"RI7F5PJGAKJ6","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"pith_short_16","alias_value":"RI7F5PJGAKJ6S6KW","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"pith_short_8","alias_value":"RI7F5PJG","created_at":"2026-07-05T12:09:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RI7F5PJGAKJ6S6KWPAFL6KIAE2","target":"record","payload":{"canonical_record":{"source":{"id":"2411.17274","kind":"arxiv","version":7},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-11-26T09:51:55Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f676dc43ee507c1a0ae4bf56a3fc706e37c0dfc772e49992c102df72ecea382b","abstract_canon_sha256":"6e2e96a3280632aa511afc14da8085b60de8180fcc1696ce731cc8cc6f9d0a05"},"schema_version":"1.0"},"canonical_sha256":"8a3e5ebd260293e97956780abf290026ad2ea1d006a1993b97c5259c0bb71f89","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:09:11.733769Z","signature_b64":"jI78kfr2wkzxQmHQhym7Ey5M6qnvxR81d/roO6ee7URKgfTxpc+97hUAaGFJpAb2swKEPZx6PDpnALzhvzJxDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a3e5ebd260293e97956780abf290026ad2ea1d006a1993b97c5259c0bb71f89","last_reissued_at":"2026-07-05T12:09:11.733277Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:09:11.733277Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.17274","source_version":7,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3nnkZlC8qpEo6Pe1+H6trRQ3Q4lhlrapfeH0YSrdzJzJbyq36vQ9RhT7bwD8fccg/5XyCNNB3EE+nkvPqE10CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:59:30.479467Z"},"content_sha256":"a669eb63d352e9f080bb4b45417efd219ebe8f6467ee4aba46ce0f35442dd28b","schema_version":"1.0","event_id":"sha256:a669eb63d352e9f080bb4b45417efd219ebe8f6467ee4aba46ce0f35442dd28b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RI7F5PJGAKJ6S6KWPAFL6KIAE2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CleanVul: Automatic Function-Level Vulnerability Detection in Code Commits Using LLM Heuristics","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"David Lo, Eng Lieh Ouh, Frank Liauw, Han Wei Ang, Hong Jin Kang, Huu Hung Nguyen, Ivana Clairine Irsan, Lwin Khin Shar, Martin Weyssow, Ratnadira Widyasari, Tan Bui, Ting Zhang, Xiang Lan, Yan Naing Tun, Yikun Li, Yiran Cheng","submitted_at":"2024-11-26T09:51:55Z","abstract_excerpt":"Accurate identification of software vulnerabilities is crucial for system integrity. Vulnerability datasets, often derived from the National Vulnerability Database (NVD) or directly from GitHub, are essential for training machine learning models to detect these security flaws. However, these datasets frequently suffer from significant noise, typically 40% to 75%, due primarily to the automatic and indiscriminate labeling of all changes in vulnerability-fixing commits (VFCs) as vulnerability-related. This misclassification occurs because not all changes in a commit aimed at fixing vulnerabiliti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.17274","kind":"arxiv","version":7},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.17274/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y0FBsYYNB8woPGzCLwNDGQQbizKofH9mO8Z7G/d7epK6T6Qtbfuv/9bA+NTHoP3GIK/uobGezQDKZP9tB4bODQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:59:30.480051Z"},"content_sha256":"d10d9bfde7074012a25ac80a1b2ac9c724546065bc1526db13b52c8cb0e7bbd9","schema_version":"1.0","event_id":"sha256:d10d9bfde7074012a25ac80a1b2ac9c724546065bc1526db13b52c8cb0e7bbd9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RI7F5PJGAKJ6S6KWPAFL6KIAE2/bundle.json","state_url":"https://pith.science/pith/RI7F5PJGAKJ6S6KWPAFL6KIAE2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RI7F5PJGAKJ6S6KWPAFL6KIAE2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:59:30Z","links":{"resolver":"https://pith.science/pith/RI7F5PJGAKJ6S6KWPAFL6KIAE2","bundle":"https://pith.science/pith/RI7F5PJGAKJ6S6KWPAFL6KIAE2/bundle.json","state":"https://pith.science/pith/RI7F5PJGAKJ6S6KWPAFL6KIAE2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RI7F5PJGAKJ6S6KWPAFL6KIAE2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RI7F5PJGAKJ6S6KWPAFL6KIAE2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6e2e96a3280632aa511afc14da8085b60de8180fcc1696ce731cc8cc6f9d0a05","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-11-26T09:51:55Z","title_canon_sha256":"f676dc43ee507c1a0ae4bf56a3fc706e37c0dfc772e49992c102df72ecea382b"},"schema_version":"1.0","source":{"id":"2411.17274","kind":"arxiv","version":7}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.17274","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"arxiv_version","alias_value":"2411.17274v7","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.17274","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"pith_short_12","alias_value":"RI7F5PJGAKJ6","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"pith_short_16","alias_value":"RI7F5PJGAKJ6S6KW","created_at":"2026-07-05T12:09:11Z"},{"alias_kind":"pith_short_8","alias_value":"RI7F5PJG","created_at":"2026-07-05T12:09:11Z"}],"graph_snapshots":[{"event_id":"sha256:d10d9bfde7074012a25ac80a1b2ac9c724546065bc1526db13b52c8cb0e7bbd9","target":"graph","created_at":"2026-07-05T12:09:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.17274/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Accurate identification of software vulnerabilities is crucial for system integrity. Vulnerability datasets, often derived from the National Vulnerability Database (NVD) or directly from GitHub, are essential for training machine learning models to detect these security flaws. However, these datasets frequently suffer from significant noise, typically 40% to 75%, due primarily to the automatic and indiscriminate labeling of all changes in vulnerability-fixing commits (VFCs) as vulnerability-related. This misclassification occurs because not all changes in a commit aimed at fixing vulnerabiliti","authors_text":"David Lo, Eng Lieh Ouh, Frank Liauw, Han Wei Ang, Hong Jin Kang, Huu Hung Nguyen, Ivana Clairine Irsan, Lwin Khin Shar, Martin Weyssow, Ratnadira Widyasari, Tan Bui, Ting Zhang, Xiang Lan, Yan Naing Tun, Yikun Li, Yiran Cheng","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-11-26T09:51:55Z","title":"CleanVul: Automatic Function-Level Vulnerability Detection in Code Commits Using LLM Heuristics"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.17274","kind":"arxiv","version":7},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a669eb63d352e9f080bb4b45417efd219ebe8f6467ee4aba46ce0f35442dd28b","target":"record","created_at":"2026-07-05T12:09:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6e2e96a3280632aa511afc14da8085b60de8180fcc1696ce731cc8cc6f9d0a05","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-11-26T09:51:55Z","title_canon_sha256":"f676dc43ee507c1a0ae4bf56a3fc706e37c0dfc772e49992c102df72ecea382b"},"schema_version":"1.0","source":{"id":"2411.17274","kind":"arxiv","version":7}},"canonical_sha256":"8a3e5ebd260293e97956780abf290026ad2ea1d006a1993b97c5259c0bb71f89","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a3e5ebd260293e97956780abf290026ad2ea1d006a1993b97c5259c0bb71f89","first_computed_at":"2026-07-05T12:09:11.733277Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:11.733277Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jI78kfr2wkzxQmHQhym7Ey5M6qnvxR81d/roO6ee7URKgfTxpc+97hUAaGFJpAb2swKEPZx6PDpnALzhvzJxDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:11.733769Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.17274","source_kind":"arxiv","source_version":7}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a669eb63d352e9f080bb4b45417efd219ebe8f6467ee4aba46ce0f35442dd28b","sha256:d10d9bfde7074012a25ac80a1b2ac9c724546065bc1526db13b52c8cb0e7bbd9"],"state_sha256":"2d4d74e651055bb0e36d624b0b0e06b517c25b780f03b5e961d0b14c41ed172a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n8MsO6sEaxc9HlgXo3IT52pBUBzsA3kRCMjZhjOzxDTrrFxrq0XaKFtUJirqwxpaQfThWsqGgCW4dRxFYRwKBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:59:30.482072Z","bundle_sha256":"abad780cfbfd0c7df91906f3b2340e7ba81ff121a46327a83e32e07d8e396b8c"}}