{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:SDL775MEKRMFKCXLRZIUWRHWQC","short_pith_number":"pith:SDL775ME","canonical_record":{"source":{"id":"2212.08396","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2022-12-16T10:40:43Z","cross_cats_sorted":["cs.CR","cs.CY","cs.SE"],"title_canon_sha256":"8f9a78207db106e83edcf683b1ecdff618208e30773971bcbc96a59fdad48d4f","abstract_canon_sha256":"74580eb7704f6c793ae2f1f2cea7c112d343cea43d8852a2832f2f0398691dfb"},"schema_version":"1.0"},"canonical_sha256":"90d7fff5845458550aeb8e514b44f680a486f1fdb2bd1793056b7a87597bc4f4","source":{"kind":"arxiv","id":"2212.08396","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.08396","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"arxiv_version","alias_value":"2212.08396v1","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.08396","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"pith_short_12","alias_value":"SDL775MEKRMF","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"pith_short_16","alias_value":"SDL775MEKRMFKCXL","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"pith_short_8","alias_value":"SDL775ME","created_at":"2026-07-05T05:25:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:SDL775MEKRMFKCXLRZIUWRHWQC","target":"record","payload":{"canonical_record":{"source":{"id":"2212.08396","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2022-12-16T10:40:43Z","cross_cats_sorted":["cs.CR","cs.CY","cs.SE"],"title_canon_sha256":"8f9a78207db106e83edcf683b1ecdff618208e30773971bcbc96a59fdad48d4f","abstract_canon_sha256":"74580eb7704f6c793ae2f1f2cea7c112d343cea43d8852a2832f2f0398691dfb"},"schema_version":"1.0"},"canonical_sha256":"90d7fff5845458550aeb8e514b44f680a486f1fdb2bd1793056b7a87597bc4f4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:25:56.784187Z","signature_b64":"3xMDNQtSRLVxsAKyVw7hc80m8IIKf/7RN42mlclHkWbqXs3a5dVQ8QH/AXRcYUV6KdxWo0E5h3mDWVodUj1cCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"90d7fff5845458550aeb8e514b44f680a486f1fdb2bd1793056b7a87597bc4f4","last_reissued_at":"2026-07-05T05:25:56.783767Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:25:56.783767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.08396","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:25:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IXKvLwrHKgnbyR72ARAkddGmX84wV+6OiJKVN3EtKw7YutggNDR7qkdjl7zR/Z3pdH168TnYUPHG+k+Uc6h5CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:52:59.234158Z"},"content_sha256":"ba9a259dab6e8bb6a4dd2efaffbffb495a22fc3ee5c3532800ecc5d205e2dace","schema_version":"1.0","event_id":"sha256:ba9a259dab6e8bb6a4dd2efaffbffb495a22fc3ee5c3532800ecc5d205e2dace"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:SDL775MEKRMFKCXLRZIUWRHWQC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"\"We are a startup to the core\": A qualitative interview study on the security and privacy development practices in Turkish software startups","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CY","cs.SE"],"primary_cat":"cs.HC","authors_text":"Dilara Kek\\\"ull\\\"uo\\u{g}lu, Yasemin Acar","submitted_at":"2022-12-16T10:40:43Z","abstract_excerpt":"Security and privacy are often neglected in software development, and rarely a priority for developers. This insight is commonly based on research conducted by researchers and on developer populations living and working in the United States, Europe, and the United Kingdom. However, the production of software is global, and crucial populations in important technology hubs are not adequately studied. The software startup scene in Turkey is impactful, and comprehension, knowledge, and mitigations related to software security and privacy remain understudied. To close this research gap, we conducte"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.08396","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.08396/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:25:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LEP7Lt+8O/U8TcjwIvp3bOPqK3jFO/iHvNQcTVpQxrh6RCWRJvdYtd+hv8RJLdgL475XTievAbw76KAL1FH1Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:52:59.234665Z"},"content_sha256":"1d8a8b87811a82dd243a53cdde750bd4a4a1f9e14017bfa75a49f3e95c954f09","schema_version":"1.0","event_id":"sha256:1d8a8b87811a82dd243a53cdde750bd4a4a1f9e14017bfa75a49f3e95c954f09"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SDL775MEKRMFKCXLRZIUWRHWQC/bundle.json","state_url":"https://pith.science/pith/SDL775MEKRMFKCXLRZIUWRHWQC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SDL775MEKRMFKCXLRZIUWRHWQC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T14:52:59Z","links":{"resolver":"https://pith.science/pith/SDL775MEKRMFKCXLRZIUWRHWQC","bundle":"https://pith.science/pith/SDL775MEKRMFKCXLRZIUWRHWQC/bundle.json","state":"https://pith.science/pith/SDL775MEKRMFKCXLRZIUWRHWQC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SDL775MEKRMFKCXLRZIUWRHWQC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:SDL775MEKRMFKCXLRZIUWRHWQC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"74580eb7704f6c793ae2f1f2cea7c112d343cea43d8852a2832f2f0398691dfb","cross_cats_sorted":["cs.CR","cs.CY","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2022-12-16T10:40:43Z","title_canon_sha256":"8f9a78207db106e83edcf683b1ecdff618208e30773971bcbc96a59fdad48d4f"},"schema_version":"1.0","source":{"id":"2212.08396","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.08396","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"arxiv_version","alias_value":"2212.08396v1","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.08396","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"pith_short_12","alias_value":"SDL775MEKRMF","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"pith_short_16","alias_value":"SDL775MEKRMFKCXL","created_at":"2026-07-05T05:25:56Z"},{"alias_kind":"pith_short_8","alias_value":"SDL775ME","created_at":"2026-07-05T05:25:56Z"}],"graph_snapshots":[{"event_id":"sha256:1d8a8b87811a82dd243a53cdde750bd4a4a1f9e14017bfa75a49f3e95c954f09","target":"graph","created_at":"2026-07-05T05:25:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.08396/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security and privacy are often neglected in software development, and rarely a priority for developers. This insight is commonly based on research conducted by researchers and on developer populations living and working in the United States, Europe, and the United Kingdom. However, the production of software is global, and crucial populations in important technology hubs are not adequately studied. The software startup scene in Turkey is impactful, and comprehension, knowledge, and mitigations related to software security and privacy remain understudied. To close this research gap, we conducte","authors_text":"Dilara Kek\\\"ull\\\"uo\\u{g}lu, Yasemin Acar","cross_cats":["cs.CR","cs.CY","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2022-12-16T10:40:43Z","title":"\"We are a startup to the core\": A qualitative interview study on the security and privacy development practices in Turkish software startups"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.08396","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ba9a259dab6e8bb6a4dd2efaffbffb495a22fc3ee5c3532800ecc5d205e2dace","target":"record","created_at":"2026-07-05T05:25:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"74580eb7704f6c793ae2f1f2cea7c112d343cea43d8852a2832f2f0398691dfb","cross_cats_sorted":["cs.CR","cs.CY","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2022-12-16T10:40:43Z","title_canon_sha256":"8f9a78207db106e83edcf683b1ecdff618208e30773971bcbc96a59fdad48d4f"},"schema_version":"1.0","source":{"id":"2212.08396","kind":"arxiv","version":1}},"canonical_sha256":"90d7fff5845458550aeb8e514b44f680a486f1fdb2bd1793056b7a87597bc4f4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"90d7fff5845458550aeb8e514b44f680a486f1fdb2bd1793056b7a87597bc4f4","first_computed_at":"2026-07-05T05:25:56.783767Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:25:56.783767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3xMDNQtSRLVxsAKyVw7hc80m8IIKf/7RN42mlclHkWbqXs3a5dVQ8QH/AXRcYUV6KdxWo0E5h3mDWVodUj1cCw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:25:56.784187Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.08396","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ba9a259dab6e8bb6a4dd2efaffbffb495a22fc3ee5c3532800ecc5d205e2dace","sha256:1d8a8b87811a82dd243a53cdde750bd4a4a1f9e14017bfa75a49f3e95c954f09"],"state_sha256":"28d51e4341b6311985ca5f90fd3a828df4a82a28c07b1257bc22598049729c3c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tmIDuFcMF+9jaRNXmoIIAToRTTZ/V/gmQFNuVBGHXFNDmC50wq3oCh399BOQuw/xbzcR90sBX5f2MXfeqt2TAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T14:52:59.241748Z","bundle_sha256":"a76dae63004643ad74a0733a826b057483dfb6393f38afb2c9ca894be18ab38a"}}