{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SX4SWL5CLYH6LLVQJPBETOQXCE","short_pith_number":"pith:SX4SWL5C","canonical_record":{"source":{"id":"2502.16835","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-24T04:39:16Z","cross_cats_sorted":[],"title_canon_sha256":"4fd9a22818156cfe1efe2780faf4fa2c7ccadba8b5a885525e65ff35286465ab","abstract_canon_sha256":"e030f25c56d076b459db58f7daeba4e6964d7abbadb124ec8f15274c8404b0a9"},"schema_version":"1.0"},"canonical_sha256":"95f92b2fa25e0fe5aeb04bc249ba1711324728c0e381636d7e451aa53f2347c4","source":{"kind":"arxiv","id":"2502.16835","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.16835","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"arxiv_version","alias_value":"2502.16835v1","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.16835","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"pith_short_12","alias_value":"SX4SWL5CLYH6","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"pith_short_16","alias_value":"SX4SWL5CLYH6LLVQ","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"pith_short_8","alias_value":"SX4SWL5C","created_at":"2026-07-05T10:19:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SX4SWL5CLYH6LLVQJPBETOQXCE","target":"record","payload":{"canonical_record":{"source":{"id":"2502.16835","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-24T04:39:16Z","cross_cats_sorted":[],"title_canon_sha256":"4fd9a22818156cfe1efe2780faf4fa2c7ccadba8b5a885525e65ff35286465ab","abstract_canon_sha256":"e030f25c56d076b459db58f7daeba4e6964d7abbadb124ec8f15274c8404b0a9"},"schema_version":"1.0"},"canonical_sha256":"95f92b2fa25e0fe5aeb04bc249ba1711324728c0e381636d7e451aa53f2347c4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:19:00.538712Z","signature_b64":"mkY8D33mGCYQKAbxRTz9MIb+OzE6L0ahWxjlfgiWdlJdjiBtltBxAYMz+3mb9DaOO/onMAIlsHTaDg3h4WwMAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"95f92b2fa25e0fe5aeb04bc249ba1711324728c0e381636d7e451aa53f2347c4","last_reissued_at":"2026-07-05T10:19:00.538284Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:19:00.538284Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.16835","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:19:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1Fmp7QAfJkfj+tRBkIw8QgfceifLnq7Zuer085cfpvapTt+Yhi3LaUzlLeyhwCYREWXvXvltpFes7CJuoC4ZAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:47:38.317158Z"},"content_sha256":"92988be16468068ad3246d34d491c28dd288303b33347149604862ab2ee6ebd5","schema_version":"1.0","event_id":"sha256:92988be16468068ad3246d34d491c28dd288303b33347149604862ab2ee6ebd5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SX4SWL5CLYH6LLVQJPBETOQXCE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Code Vulnerabilities with Heterogeneous GNN Training","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dianxiang Xu, Weifeng Xu, Yu Luo","submitted_at":"2025-02-24T04:39:16Z","abstract_excerpt":"Detecting vulnerabilities in source code is a critical task for software security assurance. Graph Neural Network (GNN) machine learning can be a promising approach by modeling source code as graphs. Early approaches treated code elements uniformly, limiting their capacity to model diverse relationships that contribute to various vulnerabilities. Recent research addresses this limitation by considering the heterogeneity of node types and using Gated Graph Neural Networks (GGNN) to aggregate node information through different edge types. However, these edges primarily function as conduits for p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.16835","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.16835/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:19:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CmG0ZFNFMTUUV4z7d1XNyIzvIQa0e8c0+3djIygrAcGVNSa/4/cWJQ0/EMMcCbqu6DGcBn3jzW1/QysycMhQAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:47:38.317656Z"},"content_sha256":"431d264ea3cc615573b0cd956f9397f53ee1083728b1c93955bc44eea6bad70f","schema_version":"1.0","event_id":"sha256:431d264ea3cc615573b0cd956f9397f53ee1083728b1c93955bc44eea6bad70f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SX4SWL5CLYH6LLVQJPBETOQXCE/bundle.json","state_url":"https://pith.science/pith/SX4SWL5CLYH6LLVQJPBETOQXCE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SX4SWL5CLYH6LLVQJPBETOQXCE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T20:47:38Z","links":{"resolver":"https://pith.science/pith/SX4SWL5CLYH6LLVQJPBETOQXCE","bundle":"https://pith.science/pith/SX4SWL5CLYH6LLVQJPBETOQXCE/bundle.json","state":"https://pith.science/pith/SX4SWL5CLYH6LLVQJPBETOQXCE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SX4SWL5CLYH6LLVQJPBETOQXCE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SX4SWL5CLYH6LLVQJPBETOQXCE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e030f25c56d076b459db58f7daeba4e6964d7abbadb124ec8f15274c8404b0a9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-24T04:39:16Z","title_canon_sha256":"4fd9a22818156cfe1efe2780faf4fa2c7ccadba8b5a885525e65ff35286465ab"},"schema_version":"1.0","source":{"id":"2502.16835","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.16835","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"arxiv_version","alias_value":"2502.16835v1","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.16835","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"pith_short_12","alias_value":"SX4SWL5CLYH6","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"pith_short_16","alias_value":"SX4SWL5CLYH6LLVQ","created_at":"2026-07-05T10:19:00Z"},{"alias_kind":"pith_short_8","alias_value":"SX4SWL5C","created_at":"2026-07-05T10:19:00Z"}],"graph_snapshots":[{"event_id":"sha256:431d264ea3cc615573b0cd956f9397f53ee1083728b1c93955bc44eea6bad70f","target":"graph","created_at":"2026-07-05T10:19:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.16835/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Detecting vulnerabilities in source code is a critical task for software security assurance. Graph Neural Network (GNN) machine learning can be a promising approach by modeling source code as graphs. Early approaches treated code elements uniformly, limiting their capacity to model diverse relationships that contribute to various vulnerabilities. Recent research addresses this limitation by considering the heterogeneity of node types and using Gated Graph Neural Networks (GGNN) to aggregate node information through different edge types. However, these edges primarily function as conduits for p","authors_text":"Dianxiang Xu, Weifeng Xu, Yu Luo","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-24T04:39:16Z","title":"Detecting Code Vulnerabilities with Heterogeneous GNN Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.16835","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:92988be16468068ad3246d34d491c28dd288303b33347149604862ab2ee6ebd5","target":"record","created_at":"2026-07-05T10:19:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e030f25c56d076b459db58f7daeba4e6964d7abbadb124ec8f15274c8404b0a9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-24T04:39:16Z","title_canon_sha256":"4fd9a22818156cfe1efe2780faf4fa2c7ccadba8b5a885525e65ff35286465ab"},"schema_version":"1.0","source":{"id":"2502.16835","kind":"arxiv","version":1}},"canonical_sha256":"95f92b2fa25e0fe5aeb04bc249ba1711324728c0e381636d7e451aa53f2347c4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"95f92b2fa25e0fe5aeb04bc249ba1711324728c0e381636d7e451aa53f2347c4","first_computed_at":"2026-07-05T10:19:00.538284Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:19:00.538284Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mkY8D33mGCYQKAbxRTz9MIb+OzE6L0ahWxjlfgiWdlJdjiBtltBxAYMz+3mb9DaOO/onMAIlsHTaDg3h4WwMAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:19:00.538712Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.16835","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:92988be16468068ad3246d34d491c28dd288303b33347149604862ab2ee6ebd5","sha256:431d264ea3cc615573b0cd956f9397f53ee1083728b1c93955bc44eea6bad70f"],"state_sha256":"ba8f5b62be4a6568e4fb500376e7477e2ab8c15b0b72f65c920fa9490e16ba2d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lrnG8iz1nLDxwZ8i7daucyH4xO3QUtCGUA+xVt2LlZXIgWoLaTeBT1u7d613fkzxCHPILBzxUEVHR0xPMXAyCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T20:47:38.322228Z","bundle_sha256":"f5b40620bcadccdcefa1c46cd3d869d0aa51b6d632872d8ac39142f0ce2f1941"}}