{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:U3ZDPWYVTIW46KH5RBZWGCB5FP","short_pith_number":"pith:U3ZDPWYV","canonical_record":{"source":{"id":"2606.17783","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2026-06-16T10:59:12Z","cross_cats_sorted":[],"title_canon_sha256":"7f5c3dd92c9d4ff9a32c26813d29b30f4b1cbbaca814ef3f65838ee85c9c3f5d","abstract_canon_sha256":"ac82e5d9571468a5e0c036728aa1f680946832a6afaf1e844c9b985ca6dde5e3"},"schema_version":"1.0"},"canonical_sha256":"a6f237db159a2dcf28fd887363083d2bdd001d46d5560a6f8f78cf58b2d96b22","source":{"kind":"arxiv","id":"2606.17783","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.17783","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"arxiv_version","alias_value":"2606.17783v1","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.17783","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"pith_short_12","alias_value":"U3ZDPWYVTIW4","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"pith_short_16","alias_value":"U3ZDPWYVTIW46KH5","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"pith_short_8","alias_value":"U3ZDPWYV","created_at":"2026-06-19T16:10:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:U3ZDPWYVTIW46KH5RBZWGCB5FP","target":"record","payload":{"canonical_record":{"source":{"id":"2606.17783","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2026-06-16T10:59:12Z","cross_cats_sorted":[],"title_canon_sha256":"7f5c3dd92c9d4ff9a32c26813d29b30f4b1cbbaca814ef3f65838ee85c9c3f5d","abstract_canon_sha256":"ac82e5d9571468a5e0c036728aa1f680946832a6afaf1e844c9b985ca6dde5e3"},"schema_version":"1.0"},"canonical_sha256":"a6f237db159a2dcf28fd887363083d2bdd001d46d5560a6f8f78cf58b2d96b22","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-19T16:10:21.670207Z","signature_b64":"K1C2GQuH4GmBoTDCpgPQ0LPC4FRTWBRp1BMO6NmMBUORXxgBo9TtgVXPaGPtPk2o8JyDcL5Q30y+QTH1C9sSAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a6f237db159a2dcf28fd887363083d2bdd001d46d5560a6f8f78cf58b2d96b22","last_reissued_at":"2026-06-19T16:10:21.669827Z","signature_status":"signed_v1","first_computed_at":"2026-06-19T16:10:21.669827Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.17783","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:10:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NK9yhRtwKRKn21Osx0FMXhkpIus7dJSYiF/ixKlWNW2Q8iMKijph78LcKvY+ez7Cah0UQaDzE9rcYWMRIQ6xDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-24T02:55:05.210523Z"},"content_sha256":"114e2a0e1da3c16bc26997c2b1ebf1c71f9bcafe3b27b57e0c5b0a0b092d9496","schema_version":"1.0","event_id":"sha256:114e2a0e1da3c16bc26997c2b1ebf1c71f9bcafe3b27b57e0c5b0a0b092d9496"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:U3ZDPWYVTIW46KH5RBZWGCB5FP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Is It Real? Exploiting Virtual-Physical Discrimination Vulnerability in Mixed Reality","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.HC","authors_text":"Hewu Li, Maria Gorlatova, Xihuan Yao, Xin Yi, Xueyang Wang, Yanming Xiu","submitted_at":"2026-06-16T10:59:12Z","abstract_excerpt":"Consumer mixed reality (MR) headsets seamlessly blend virtual content into physical environments with sufficient fidelity that users may be unable to distinguish virtual objects from physical ones. We identify this virtual-physical discrimination vulnerability as an exploitable security primitive. Through speculative design workshops with 12 experts from cybersecurity and MR/HCI, we develop a taxonomy of virtual-physical confusion attacks and implement four proof-of-concept attacks on Apple Vision Pro, evaluating them with 26 participants in realistic MR tasks. All four attacks altered user be"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.17783","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.17783/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:10:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TmAJbdh4mPH0EdwcMAQeR88nZyQRVHNNHo7fzAv4dl1FB59ZJIqp+S0IBdXTLWaLDnRR+fTdTbxmA6O+vWGoDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-24T02:55:05.210901Z"},"content_sha256":"c43d74921c5c9d75ff65ec1ad34310c65e358214bb3db891fc06351b0df006f5","schema_version":"1.0","event_id":"sha256:c43d74921c5c9d75ff65ec1ad34310c65e358214bb3db891fc06351b0df006f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U3ZDPWYVTIW46KH5RBZWGCB5FP/bundle.json","state_url":"https://pith.science/pith/U3ZDPWYVTIW46KH5RBZWGCB5FP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U3ZDPWYVTIW46KH5RBZWGCB5FP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-24T02:55:05Z","links":{"resolver":"https://pith.science/pith/U3ZDPWYVTIW46KH5RBZWGCB5FP","bundle":"https://pith.science/pith/U3ZDPWYVTIW46KH5RBZWGCB5FP/bundle.json","state":"https://pith.science/pith/U3ZDPWYVTIW46KH5RBZWGCB5FP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U3ZDPWYVTIW46KH5RBZWGCB5FP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:U3ZDPWYVTIW46KH5RBZWGCB5FP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ac82e5d9571468a5e0c036728aa1f680946832a6afaf1e844c9b985ca6dde5e3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2026-06-16T10:59:12Z","title_canon_sha256":"7f5c3dd92c9d4ff9a32c26813d29b30f4b1cbbaca814ef3f65838ee85c9c3f5d"},"schema_version":"1.0","source":{"id":"2606.17783","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.17783","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"arxiv_version","alias_value":"2606.17783v1","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.17783","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"pith_short_12","alias_value":"U3ZDPWYVTIW4","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"pith_short_16","alias_value":"U3ZDPWYVTIW46KH5","created_at":"2026-06-19T16:10:21Z"},{"alias_kind":"pith_short_8","alias_value":"U3ZDPWYV","created_at":"2026-06-19T16:10:21Z"}],"graph_snapshots":[{"event_id":"sha256:c43d74921c5c9d75ff65ec1ad34310c65e358214bb3db891fc06351b0df006f5","target":"graph","created_at":"2026-06-19T16:10:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.17783/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Consumer mixed reality (MR) headsets seamlessly blend virtual content into physical environments with sufficient fidelity that users may be unable to distinguish virtual objects from physical ones. We identify this virtual-physical discrimination vulnerability as an exploitable security primitive. Through speculative design workshops with 12 experts from cybersecurity and MR/HCI, we develop a taxonomy of virtual-physical confusion attacks and implement four proof-of-concept attacks on Apple Vision Pro, evaluating them with 26 participants in realistic MR tasks. All four attacks altered user be","authors_text":"Hewu Li, Maria Gorlatova, Xihuan Yao, Xin Yi, Xueyang Wang, Yanming Xiu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2026-06-16T10:59:12Z","title":"Is It Real? Exploiting Virtual-Physical Discrimination Vulnerability in Mixed Reality"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.17783","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:114e2a0e1da3c16bc26997c2b1ebf1c71f9bcafe3b27b57e0c5b0a0b092d9496","target":"record","created_at":"2026-06-19T16:10:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ac82e5d9571468a5e0c036728aa1f680946832a6afaf1e844c9b985ca6dde5e3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2026-06-16T10:59:12Z","title_canon_sha256":"7f5c3dd92c9d4ff9a32c26813d29b30f4b1cbbaca814ef3f65838ee85c9c3f5d"},"schema_version":"1.0","source":{"id":"2606.17783","kind":"arxiv","version":1}},"canonical_sha256":"a6f237db159a2dcf28fd887363083d2bdd001d46d5560a6f8f78cf58b2d96b22","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a6f237db159a2dcf28fd887363083d2bdd001d46d5560a6f8f78cf58b2d96b22","first_computed_at":"2026-06-19T16:10:21.669827Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-19T16:10:21.669827Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"K1C2GQuH4GmBoTDCpgPQ0LPC4FRTWBRp1BMO6NmMBUORXxgBo9TtgVXPaGPtPk2o8JyDcL5Q30y+QTH1C9sSAg==","signature_status":"signed_v1","signed_at":"2026-06-19T16:10:21.670207Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.17783","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:114e2a0e1da3c16bc26997c2b1ebf1c71f9bcafe3b27b57e0c5b0a0b092d9496","sha256:c43d74921c5c9d75ff65ec1ad34310c65e358214bb3db891fc06351b0df006f5"],"state_sha256":"040ed786d534ef88a5c57b1fa270799cb201bb78b5e753c5b73e458d90ce726c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EG6Il6j0ydFz8VCIz6T/ulSstKsJCG+b1rjpmNqloQ5988tZ+rZdpbyeuMywX+otn9brfT5unFhe+UaQPpHGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-24T02:55:05.212877Z","bundle_sha256":"5c488a119da58fc3d9c25ea7ceabc0d6c91b44828b5be6e488b2c938727f0c20"}}