{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SURLPLRWXQ27PMEFPAJBUHCF4R","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ff491c258425249d65861d7e6997a1530bca1d10974d08b9967634195f704c06","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-09T17:21:20Z","title_canon_sha256":"2bfc2cdf84323cdda31aa0fc463964c3b9e0496756da316038ce20e5cd657fee"},"schema_version":"1.0","source":{"id":"2509.07941","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.07941","created_at":"2026-07-05T12:07:42Z"},{"alias_kind":"arxiv_version","alias_value":"2509.07941v1","created_at":"2026-07-05T12:07:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.07941","created_at":"2026-07-05T12:07:42Z"},{"alias_kind":"pith_short_12","alias_value":"SURLPLRWXQ27","created_at":"2026-07-05T12:07:42Z"},{"alias_kind":"pith_short_16","alias_value":"SURLPLRWXQ27PMEF","created_at":"2026-07-05T12:07:42Z"},{"alias_kind":"pith_short_8","alias_value":"SURLPLRW","created_at":"2026-07-05T12:07:42Z"}],"graph_snapshots":[{"event_id":"sha256:0168975b3bcc201084a31ec5f82273327586e5ea9b9334b49988e238e44d2e7c","target":"graph","created_at":"2026-07-05T12:07:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.07941/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Code generation has emerged as a pivotal capability of Large Language Models(LLMs), revolutionizing development efficiency for programmers of all skill levels. However, the complexity of data structures and algorithmic logic often results in functional deficiencies and security vulnerabilities in generated code, reducing it to a prototype requiring extensive manual debugging. While Retrieval-Augmented Generation (RAG) can enhance correctness and security by leveraging external code manuals, it simultaneously introduces new attack surfaces.\n  In this paper, we pioneer the exploration of attack ","authors_text":"Chenxiong Qian, Kai Ye, Liangcai Su","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-09T17:21:20Z","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.07941","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b8361d184e29c693e9169ca084700cbee40b4d57b3a51f851e8f043bc6a5aec","target":"record","created_at":"2026-07-05T12:07:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ff491c258425249d65861d7e6997a1530bca1d10974d08b9967634195f704c06","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-09T17:21:20Z","title_canon_sha256":"2bfc2cdf84323cdda31aa0fc463964c3b9e0496756da316038ce20e5cd657fee"},"schema_version":"1.0","source":{"id":"2509.07941","kind":"arxiv","version":1}},"canonical_sha256":"9522b7ae36bc35f7b08578121a1c45e466ea005b1e311f9804cd4c81cfacab0b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9522b7ae36bc35f7b08578121a1c45e466ea005b1e311f9804cd4c81cfacab0b","first_computed_at":"2026-07-05T12:07:42.768798Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:07:42.768798Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wiAVAu9meVdKSx7DkoSiN2InMUQKPWGr6MtyxJicnxfv/d/esQXhoCgBDp0NMHTN46SSIHz1hOlKkOojxH0CAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:07:42.769377Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.07941","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b8361d184e29c693e9169ca084700cbee40b4d57b3a51f851e8f043bc6a5aec","sha256:0168975b3bcc201084a31ec5f82273327586e5ea9b9334b49988e238e44d2e7c"],"state_sha256":"b83a11bc967a6e873e58a6421b3ddecf2df3f59309dc6efc0ec8c1498cdc71f0"}