{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TTUXFONSWT2RZKNQEW7YJW2YH3","short_pith_number":"pith:TTUXFONS","canonical_record":{"source":{"id":"2509.06052","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-07T13:31:43Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"235a096ee712dafc291dd8a5fbca7e3282bedbde3f7e91c6659d1d275d8ab550","abstract_canon_sha256":"dec92f670ed823a9ecf5265e379a7b3e64aaa6b0af449ec4ce35dd96abdefe96"},"schema_version":"1.0"},"canonical_sha256":"9ce972b9b2b4f51ca9b025bf84db583ec497864a8fd85af9a91bdb3d108b163d","source":{"kind":"arxiv","id":"2509.06052","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.06052","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"arxiv_version","alias_value":"2509.06052v1","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.06052","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"pith_short_12","alias_value":"TTUXFONSWT2R","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"pith_short_16","alias_value":"TTUXFONSWT2RZKNQ","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"pith_short_8","alias_value":"TTUXFONS","created_at":"2026-07-05T12:06:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TTUXFONSWT2RZKNQEW7YJW2YH3","target":"record","payload":{"canonical_record":{"source":{"id":"2509.06052","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-07T13:31:43Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"235a096ee712dafc291dd8a5fbca7e3282bedbde3f7e91c6659d1d275d8ab550","abstract_canon_sha256":"dec92f670ed823a9ecf5265e379a7b3e64aaa6b0af449ec4ce35dd96abdefe96"},"schema_version":"1.0"},"canonical_sha256":"9ce972b9b2b4f51ca9b025bf84db583ec497864a8fd85af9a91bdb3d108b163d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:06:29.037386Z","signature_b64":"sdRc3DFus1eFZN3YJ8P+1V8Yt9ax/BGF9qqNrufwwQv5DQ8o8UGZpODOvplKS2WWdHe4qKam1T5iViIrpNrYBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9ce972b9b2b4f51ca9b025bf84db583ec497864a8fd85af9a91bdb3d108b163d","last_reissued_at":"2026-07-05T12:06:29.036865Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:06:29.036865Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.06052","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"evrw3R5bQpxXqYG3H7miCPSMdgv/cyUS03dHa1/aLQGk7ClFBpUMVu8lRUGUbZoFsYy7kUi+ZQS6QcTO7TyOAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:11:23.111731Z"},"content_sha256":"5a762953241c1b20bd84f0fa3ebc3bfa9e16284475277490a5200d01c7e45eba","schema_version":"1.0","event_id":"sha256:5a762953241c1b20bd84f0fa3ebc3bfa9e16284475277490a5200d01c7e45eba"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TTUXFONSWT2RZKNQEW7YJW2YH3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Empirical Study of Code Large Language Models for Binary Security Patch Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.SE","authors_text":"Binchang Li, Cuiyun Gao, Qingyuan Li, Shuzheng Gao, Zongjie Li","submitted_at":"2025-09-07T13:31:43Z","abstract_excerpt":"Security patch detection (SPD) is crucial for maintaining software security, as unpatched vulnerabilities can lead to severe security risks. In recent years, numerous learning-based SPD approaches have demonstrated promising results on source code. However, these approaches typically cannot be applied to closed-source applications and proprietary systems that constitute a significant portion of real-world software, as they release patches only with binary files, and the source code is inaccessible. Given the impressive performance of code large language models (LLMs) in code intelligence and b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.06052","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.06052/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mgQ5+J0IkoTrgEgOJprxro3FPf8jbuwSUREj2r98wOy9fGPF6jfdfaFf+LuPDZCZGydTtDc9MV/t1nNdkV+RBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:11:23.112231Z"},"content_sha256":"32bcb1c2c3673630f084aecf708436965ebeb580ce0351176e22d97066c9d5ab","schema_version":"1.0","event_id":"sha256:32bcb1c2c3673630f084aecf708436965ebeb580ce0351176e22d97066c9d5ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TTUXFONSWT2RZKNQEW7YJW2YH3/bundle.json","state_url":"https://pith.science/pith/TTUXFONSWT2RZKNQEW7YJW2YH3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TTUXFONSWT2RZKNQEW7YJW2YH3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T21:11:23Z","links":{"resolver":"https://pith.science/pith/TTUXFONSWT2RZKNQEW7YJW2YH3","bundle":"https://pith.science/pith/TTUXFONSWT2RZKNQEW7YJW2YH3/bundle.json","state":"https://pith.science/pith/TTUXFONSWT2RZKNQEW7YJW2YH3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TTUXFONSWT2RZKNQEW7YJW2YH3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TTUXFONSWT2RZKNQEW7YJW2YH3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dec92f670ed823a9ecf5265e379a7b3e64aaa6b0af449ec4ce35dd96abdefe96","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-07T13:31:43Z","title_canon_sha256":"235a096ee712dafc291dd8a5fbca7e3282bedbde3f7e91c6659d1d275d8ab550"},"schema_version":"1.0","source":{"id":"2509.06052","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.06052","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"arxiv_version","alias_value":"2509.06052v1","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.06052","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"pith_short_12","alias_value":"TTUXFONSWT2R","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"pith_short_16","alias_value":"TTUXFONSWT2RZKNQ","created_at":"2026-07-05T12:06:29Z"},{"alias_kind":"pith_short_8","alias_value":"TTUXFONS","created_at":"2026-07-05T12:06:29Z"}],"graph_snapshots":[{"event_id":"sha256:32bcb1c2c3673630f084aecf708436965ebeb580ce0351176e22d97066c9d5ab","target":"graph","created_at":"2026-07-05T12:06:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.06052/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security patch detection (SPD) is crucial for maintaining software security, as unpatched vulnerabilities can lead to severe security risks. In recent years, numerous learning-based SPD approaches have demonstrated promising results on source code. However, these approaches typically cannot be applied to closed-source applications and proprietary systems that constitute a significant portion of real-world software, as they release patches only with binary files, and the source code is inaccessible. Given the impressive performance of code large language models (LLMs) in code intelligence and b","authors_text":"Binchang Li, Cuiyun Gao, Qingyuan Li, Shuzheng Gao, Zongjie Li","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-07T13:31:43Z","title":"Empirical Study of Code Large Language Models for Binary Security Patch Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.06052","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5a762953241c1b20bd84f0fa3ebc3bfa9e16284475277490a5200d01c7e45eba","target":"record","created_at":"2026-07-05T12:06:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dec92f670ed823a9ecf5265e379a7b3e64aaa6b0af449ec4ce35dd96abdefe96","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-07T13:31:43Z","title_canon_sha256":"235a096ee712dafc291dd8a5fbca7e3282bedbde3f7e91c6659d1d275d8ab550"},"schema_version":"1.0","source":{"id":"2509.06052","kind":"arxiv","version":1}},"canonical_sha256":"9ce972b9b2b4f51ca9b025bf84db583ec497864a8fd85af9a91bdb3d108b163d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9ce972b9b2b4f51ca9b025bf84db583ec497864a8fd85af9a91bdb3d108b163d","first_computed_at":"2026-07-05T12:06:29.036865Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:06:29.036865Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sdRc3DFus1eFZN3YJ8P+1V8Yt9ax/BGF9qqNrufwwQv5DQ8o8UGZpODOvplKS2WWdHe4qKam1T5iViIrpNrYBg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:06:29.037386Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.06052","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5a762953241c1b20bd84f0fa3ebc3bfa9e16284475277490a5200d01c7e45eba","sha256:32bcb1c2c3673630f084aecf708436965ebeb580ce0351176e22d97066c9d5ab"],"state_sha256":"6adfd90d69580993c764e1010352dd262fc376f12ddfe97fc57f1b5d4c5a3f4a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ljxqjOn+gDCwhG3jxyE1kPcV8VUgEDcoGb+kpHYoYhZvUSSh5Y5Cg1vHJMS4iZlbaph9aA07BDSKxy/Ulr69AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T21:11:23.117236Z","bundle_sha256":"28ad8a66e5253fc2ce8b3cfd76590caebe89b6504be1f3625c01d07489726387"}}