{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SW4C4OURCWPOROTAKGFMTRMJ5A","short_pith_number":"pith:SW4C4OUR","canonical_record":{"source":{"id":"2402.01007","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-01T20:45:20Z","cross_cats_sorted":["econ.GN","q-fin.EC"],"title_canon_sha256":"24a9e4c666a0cf3e306a2574f41dc75b47359cb2245d283bec7265a3d6c4cfc9","abstract_canon_sha256":"cd53de02125d8fa1cf907d436e8d67d6df7062b24d8c4d3ae3290ae9d8665f98"},"schema_version":"1.0"},"canonical_sha256":"95b82e3a91159ee8ba60518ac9c589e829657655bfa752380d8fa9afad9ad22f","source":{"kind":"arxiv","id":"2402.01007","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.01007","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"arxiv_version","alias_value":"2402.01007v2","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.01007","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"pith_short_12","alias_value":"SW4C4OURCWPO","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"pith_short_16","alias_value":"SW4C4OURCWPOROTA","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"pith_short_8","alias_value":"SW4C4OUR","created_at":"2026-07-05T07:41:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SW4C4OURCWPOROTAKGFMTRMJ5A","target":"record","payload":{"canonical_record":{"source":{"id":"2402.01007","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-01T20:45:20Z","cross_cats_sorted":["econ.GN","q-fin.EC"],"title_canon_sha256":"24a9e4c666a0cf3e306a2574f41dc75b47359cb2245d283bec7265a3d6c4cfc9","abstract_canon_sha256":"cd53de02125d8fa1cf907d436e8d67d6df7062b24d8c4d3ae3290ae9d8665f98"},"schema_version":"1.0"},"canonical_sha256":"95b82e3a91159ee8ba60518ac9c589e829657655bfa752380d8fa9afad9ad22f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:41:29.098876Z","signature_b64":"cOzprRX8cJKvmOULVPCZINHevbQ/rFaCmk+8LJiSJOkh4IRXjNyf/0rZC/auZvuV95K+RlZsFz2TXgp5r2vWDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"95b82e3a91159ee8ba60518ac9c589e829657655bfa752380d8fa9afad9ad22f","last_reissued_at":"2026-07-05T07:41:29.098371Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:41:29.098371Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.01007","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:41:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KXGMcW6ldEk8P7/l3ZzXLGhKEKsXA0Gw4ysOSkvwzfEpO1Fez6FiLsdlJmkAIzWSX7QSrYr7FTP5azbWWJ39Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T13:46:45.274545Z"},"content_sha256":"92eb66bbb62a8ef80f52b8af88bc7c3004092bccdec4aae1c9f0ec11623b169e","schema_version":"1.0","event_id":"sha256:92eb66bbb62a8ef80f52b8af88bc7c3004092bccdec4aae1c9f0ec11623b169e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SW4C4OURCWPOROTAKGFMTRMJ5A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Municipal cyber risk modeling using cryptographic computing to inform cyber policymaking","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["econ.GN","q-fin.EC"],"primary_cat":"cs.CR","authors_text":"Angelina Wu, Avital Baral, Daniel J. Weitzner, Lawrence Susskind, Taylor Reynolds","submitted_at":"2024-02-01T20:45:20Z","abstract_excerpt":"Municipalities are vulnerable to cyberattacks with devastating consequences, but they lack key information to evaluate their own risk and compare their security posture to peers. Using data from 83 municipalities collected via a cryptographically secure computation platform about their security posture, incidents, security control failures, and losses, we build data-driven cyber risk models and cyber security benchmarks for municipalities. We produce benchmarks of the security posture in a sector, the frequency of cyber incidents, forecasted annual losses for organizations based on their defen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.01007","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.01007/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:41:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tKzet/p8IOA40u3mbldIoGvupNGqp+sPlVEctafhvUh0VFjimKXSRusdHT0MqBzFYdOBbVwryZPzJqA5LZ08DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T13:46:45.274948Z"},"content_sha256":"690ef74ffff6f00246ebdd03a0fa776ce11ba9916822ee2c8b6f1839832b3519","schema_version":"1.0","event_id":"sha256:690ef74ffff6f00246ebdd03a0fa776ce11ba9916822ee2c8b6f1839832b3519"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SW4C4OURCWPOROTAKGFMTRMJ5A/bundle.json","state_url":"https://pith.science/pith/SW4C4OURCWPOROTAKGFMTRMJ5A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SW4C4OURCWPOROTAKGFMTRMJ5A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T13:46:45Z","links":{"resolver":"https://pith.science/pith/SW4C4OURCWPOROTAKGFMTRMJ5A","bundle":"https://pith.science/pith/SW4C4OURCWPOROTAKGFMTRMJ5A/bundle.json","state":"https://pith.science/pith/SW4C4OURCWPOROTAKGFMTRMJ5A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SW4C4OURCWPOROTAKGFMTRMJ5A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SW4C4OURCWPOROTAKGFMTRMJ5A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cd53de02125d8fa1cf907d436e8d67d6df7062b24d8c4d3ae3290ae9d8665f98","cross_cats_sorted":["econ.GN","q-fin.EC"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-01T20:45:20Z","title_canon_sha256":"24a9e4c666a0cf3e306a2574f41dc75b47359cb2245d283bec7265a3d6c4cfc9"},"schema_version":"1.0","source":{"id":"2402.01007","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.01007","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"arxiv_version","alias_value":"2402.01007v2","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.01007","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"pith_short_12","alias_value":"SW4C4OURCWPO","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"pith_short_16","alias_value":"SW4C4OURCWPOROTA","created_at":"2026-07-05T07:41:29Z"},{"alias_kind":"pith_short_8","alias_value":"SW4C4OUR","created_at":"2026-07-05T07:41:29Z"}],"graph_snapshots":[{"event_id":"sha256:690ef74ffff6f00246ebdd03a0fa776ce11ba9916822ee2c8b6f1839832b3519","target":"graph","created_at":"2026-07-05T07:41:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.01007/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Municipalities are vulnerable to cyberattacks with devastating consequences, but they lack key information to evaluate their own risk and compare their security posture to peers. Using data from 83 municipalities collected via a cryptographically secure computation platform about their security posture, incidents, security control failures, and losses, we build data-driven cyber risk models and cyber security benchmarks for municipalities. We produce benchmarks of the security posture in a sector, the frequency of cyber incidents, forecasted annual losses for organizations based on their defen","authors_text":"Angelina Wu, Avital Baral, Daniel J. Weitzner, Lawrence Susskind, Taylor Reynolds","cross_cats":["econ.GN","q-fin.EC"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-01T20:45:20Z","title":"Municipal cyber risk modeling using cryptographic computing to inform cyber policymaking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.01007","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:92eb66bbb62a8ef80f52b8af88bc7c3004092bccdec4aae1c9f0ec11623b169e","target":"record","created_at":"2026-07-05T07:41:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cd53de02125d8fa1cf907d436e8d67d6df7062b24d8c4d3ae3290ae9d8665f98","cross_cats_sorted":["econ.GN","q-fin.EC"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-01T20:45:20Z","title_canon_sha256":"24a9e4c666a0cf3e306a2574f41dc75b47359cb2245d283bec7265a3d6c4cfc9"},"schema_version":"1.0","source":{"id":"2402.01007","kind":"arxiv","version":2}},"canonical_sha256":"95b82e3a91159ee8ba60518ac9c589e829657655bfa752380d8fa9afad9ad22f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"95b82e3a91159ee8ba60518ac9c589e829657655bfa752380d8fa9afad9ad22f","first_computed_at":"2026-07-05T07:41:29.098371Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:41:29.098371Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cOzprRX8cJKvmOULVPCZINHevbQ/rFaCmk+8LJiSJOkh4IRXjNyf/0rZC/auZvuV95K+RlZsFz2TXgp5r2vWDw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:41:29.098876Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.01007","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:92eb66bbb62a8ef80f52b8af88bc7c3004092bccdec4aae1c9f0ec11623b169e","sha256:690ef74ffff6f00246ebdd03a0fa776ce11ba9916822ee2c8b6f1839832b3519"],"state_sha256":"1fa6d0bb77e3d91101e1882ad062f5713ac06600c6bf2dc548c02af007e695a5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s/pcrPxp1/PHld89IvKVZ8mY6NzVJpb90HCilp4uLTmIxkLYPyX7EadtXQJpLw36p6gq92EW/TQcnfEiKP2bDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T13:46:45.277064Z","bundle_sha256":"69a1456bb27e5e782012e7ee36ed0eaa2e7124e4e139083c5dc04a95b1888c69"}}