{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UEYVJV3DZDUU3VTC2RJ5LDI3TE","short_pith_number":"pith:UEYVJV3D","canonical_record":{"source":{"id":"2509.06368","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-08T06:48:48Z","cross_cats_sorted":["cs.HC"],"title_canon_sha256":"043d7d7728d515b56764b6285a785cc0a329d14b18f8a532abb047f1664daa03","abstract_canon_sha256":"2d2c6b9555622ecbb657aa2b6b6b7efb203bcfebf28a3470bd1bdd569e029281"},"schema_version":"1.0"},"canonical_sha256":"a13154d763c8e94dd662d453d58d1b99179d06d7e911ed20cfac747e73f6abdb","source":{"kind":"arxiv","id":"2509.06368","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.06368","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"arxiv_version","alias_value":"2509.06368v1","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.06368","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"pith_short_12","alias_value":"UEYVJV3DZDUU","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"pith_short_16","alias_value":"UEYVJV3DZDUU3VTC","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"pith_short_8","alias_value":"UEYVJV3D","created_at":"2026-07-05T12:06:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UEYVJV3DZDUU3VTC2RJ5LDI3TE","target":"record","payload":{"canonical_record":{"source":{"id":"2509.06368","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-08T06:48:48Z","cross_cats_sorted":["cs.HC"],"title_canon_sha256":"043d7d7728d515b56764b6285a785cc0a329d14b18f8a532abb047f1664daa03","abstract_canon_sha256":"2d2c6b9555622ecbb657aa2b6b6b7efb203bcfebf28a3470bd1bdd569e029281"},"schema_version":"1.0"},"canonical_sha256":"a13154d763c8e94dd662d453d58d1b99179d06d7e911ed20cfac747e73f6abdb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:06:34.506344Z","signature_b64":"2ILrhu0kWKKFqmw1JPDnwvcvlOoZkvVPrx2C2+UkgI9233pOZVuH33eIyYnav/x3n4ZL9gkNMpSiE2p3jxExDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a13154d763c8e94dd662d453d58d1b99179d06d7e911ed20cfac747e73f6abdb","last_reissued_at":"2026-07-05T12:06:34.505823Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:06:34.505823Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.06368","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H4GYD0m1QlIbOQGtXWe+lk8uTDz0iAzfTsSGYEsjC+8KGvcvayZGLGb5PBio3qIaGiS1EaLFmIgP8/TgumTSCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:33:28.635483Z"},"content_sha256":"652a98b0fa4b01260e5180660061902750c5fe3d3397017883451232806f3b4d","schema_version":"1.0","event_id":"sha256:652a98b0fa4b01260e5180660061902750c5fe3d3397017883451232806f3b4d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UEYVJV3DZDUU3VTC2RJ5LDI3TE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Perception to Protection: A Developer-Centered Study of Security and Privacy Threats in Extended Reality (XR)","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.HC"],"primary_cat":"cs.CR","authors_text":"Jinghuai Zhang, Kunlin Cai, Tianshi Li, Xun Chen, Ying Li, Yuan Tian, Zhiyuan Wang","submitted_at":"2025-09-08T06:48:48Z","abstract_excerpt":"The immersive nature of XR introduces a fundamentally different set of security and privacy (S&P) challenges due to the unprecedented user interactions and data collection that traditional paradigms struggle to mitigate. As the primary architects of XR applications, developers play a critical role in addressing novel threats. However, to effectively support developers, we must first understand how they perceive and respond to different threats. Despite the growing importance of this issue, there is a lack of in-depth, threat-aware studies that examine XR S&P from the developers' perspective. T"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.06368","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.06368/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"srRWA1wn9wWdjjgSbFAWYU8eqNAD84mxbI2cYbCeW+EdwibtHQZczeKn37T2ZwNO3jJsQ7mmaQQsx9mW35e2AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:33:28.636027Z"},"content_sha256":"33b763e0d7450032627a159e63033960f98c2306ea8706726360dfc40b203abc","schema_version":"1.0","event_id":"sha256:33b763e0d7450032627a159e63033960f98c2306ea8706726360dfc40b203abc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UEYVJV3DZDUU3VTC2RJ5LDI3TE/bundle.json","state_url":"https://pith.science/pith/UEYVJV3DZDUU3VTC2RJ5LDI3TE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UEYVJV3DZDUU3VTC2RJ5LDI3TE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T04:33:28Z","links":{"resolver":"https://pith.science/pith/UEYVJV3DZDUU3VTC2RJ5LDI3TE","bundle":"https://pith.science/pith/UEYVJV3DZDUU3VTC2RJ5LDI3TE/bundle.json","state":"https://pith.science/pith/UEYVJV3DZDUU3VTC2RJ5LDI3TE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UEYVJV3DZDUU3VTC2RJ5LDI3TE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UEYVJV3DZDUU3VTC2RJ5LDI3TE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2d2c6b9555622ecbb657aa2b6b6b7efb203bcfebf28a3470bd1bdd569e029281","cross_cats_sorted":["cs.HC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-08T06:48:48Z","title_canon_sha256":"043d7d7728d515b56764b6285a785cc0a329d14b18f8a532abb047f1664daa03"},"schema_version":"1.0","source":{"id":"2509.06368","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.06368","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"arxiv_version","alias_value":"2509.06368v1","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.06368","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"pith_short_12","alias_value":"UEYVJV3DZDUU","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"pith_short_16","alias_value":"UEYVJV3DZDUU3VTC","created_at":"2026-07-05T12:06:34Z"},{"alias_kind":"pith_short_8","alias_value":"UEYVJV3D","created_at":"2026-07-05T12:06:34Z"}],"graph_snapshots":[{"event_id":"sha256:33b763e0d7450032627a159e63033960f98c2306ea8706726360dfc40b203abc","target":"graph","created_at":"2026-07-05T12:06:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.06368/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The immersive nature of XR introduces a fundamentally different set of security and privacy (S&P) challenges due to the unprecedented user interactions and data collection that traditional paradigms struggle to mitigate. As the primary architects of XR applications, developers play a critical role in addressing novel threats. However, to effectively support developers, we must first understand how they perceive and respond to different threats. Despite the growing importance of this issue, there is a lack of in-depth, threat-aware studies that examine XR S&P from the developers' perspective. T","authors_text":"Jinghuai Zhang, Kunlin Cai, Tianshi Li, Xun Chen, Ying Li, Yuan Tian, Zhiyuan Wang","cross_cats":["cs.HC"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-08T06:48:48Z","title":"From Perception to Protection: A Developer-Centered Study of Security and Privacy Threats in Extended Reality (XR)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.06368","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:652a98b0fa4b01260e5180660061902750c5fe3d3397017883451232806f3b4d","target":"record","created_at":"2026-07-05T12:06:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2d2c6b9555622ecbb657aa2b6b6b7efb203bcfebf28a3470bd1bdd569e029281","cross_cats_sorted":["cs.HC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-08T06:48:48Z","title_canon_sha256":"043d7d7728d515b56764b6285a785cc0a329d14b18f8a532abb047f1664daa03"},"schema_version":"1.0","source":{"id":"2509.06368","kind":"arxiv","version":1}},"canonical_sha256":"a13154d763c8e94dd662d453d58d1b99179d06d7e911ed20cfac747e73f6abdb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a13154d763c8e94dd662d453d58d1b99179d06d7e911ed20cfac747e73f6abdb","first_computed_at":"2026-07-05T12:06:34.505823Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:06:34.505823Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2ILrhu0kWKKFqmw1JPDnwvcvlOoZkvVPrx2C2+UkgI9233pOZVuH33eIyYnav/x3n4ZL9gkNMpSiE2p3jxExDg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:06:34.506344Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.06368","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:652a98b0fa4b01260e5180660061902750c5fe3d3397017883451232806f3b4d","sha256:33b763e0d7450032627a159e63033960f98c2306ea8706726360dfc40b203abc"],"state_sha256":"bea45fc2cf4f8d7f057ab1549969fea5612193b28b3c80c7c70ac66fc474e037"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kwbXBIVDAT1Ax+/mx7QIPH50a65+zimsq+aAW5wngEs+wEMrWempfXuqLtPxUyzJrNnYyQagcoXWZJ2F1UkGCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T04:33:28.642030Z","bundle_sha256":"cd33ecdfab75274ccebc6e5e8c8b61b468c55a96c945b121bf2ea3e05436e143"}}