{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:UKKEZQWKWI7SGYBRWC2B2COITN","short_pith_number":"pith:UKKEZQWK","canonical_record":{"source":{"id":"2608.09181","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-10T06:47:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c46eba411d7af65a1153388ff107ed6f65f04640989bad3d09bd99b14c7f99d6","abstract_canon_sha256":"89a818748e6f329d222999e9065baacfcf5103aea9c2c8e6212df474e8a835ed"},"schema_version":"1.0"},"canonical_sha256":"a2944cc2cab23f236031b0b41d09c89b79ff2daa381e4741ae080075ecb0ff2b","source":{"kind":"arxiv","id":"2608.09181","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.09181","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"arxiv_version","alias_value":"2608.09181v1","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.09181","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"pith_short_12","alias_value":"UKKEZQWKWI7S","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"pith_short_16","alias_value":"UKKEZQWKWI7SGYBR","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"pith_short_8","alias_value":"UKKEZQWK","created_at":"2026-08-11T02:22:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:UKKEZQWKWI7SGYBRWC2B2COITN","target":"record","payload":{"canonical_record":{"source":{"id":"2608.09181","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-10T06:47:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c46eba411d7af65a1153388ff107ed6f65f04640989bad3d09bd99b14c7f99d6","abstract_canon_sha256":"89a818748e6f329d222999e9065baacfcf5103aea9c2c8e6212df474e8a835ed"},"schema_version":"1.0"},"canonical_sha256":"a2944cc2cab23f236031b0b41d09c89b79ff2daa381e4741ae080075ecb0ff2b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-11T02:22:00.731575Z","signature_b64":"S2chj8kq6DupmIowgcol2LcOOdccTnacGwI9/4dejs9XT130xalaPxfiYATvofXuJ60UtebsQCOgKdPinWf3Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a2944cc2cab23f236031b0b41d09c89b79ff2daa381e4741ae080075ecb0ff2b","last_reissued_at":"2026-08-11T02:22:00.729821Z","signature_status":"signed_v1","first_computed_at":"2026-08-11T02:22:00.729821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.09181","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T02:22:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VWrhwLXJ2tNC6FGsMVeC8rZto4KzsQXreMZg38Gkpxh3MSoueKAD9eoHCIqq4un9eGJvlLa2xBD3GTSAA05sAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T13:17:27.616802Z"},"content_sha256":"9657bfd1b741953cca274e55da20fffa321ff38be2176b66c5f9af7ee70fa51e","schema_version":"1.0","event_id":"sha256:9657bfd1b741953cca274e55da20fffa321ff38be2176b66c5f9af7ee70fa51e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:UKKEZQWKWI7SGYBRWC2B2COITN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Memoir: Learning, Verifying, and Evolving False-Positive Memories for Static Application Security Testing Tools","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Cuiyun Gao, Jia Feng, Keke Lian, Qiaodan Hou, Shenyuan Guan, Xincheng Wen, Yanjun Chen","submitted_at":"2026-08-10T06:47:39Z","abstract_excerpt":"Static Application Security Testing (SAST) tools have become indispensable in modern secure software devel- opment. However, these tools often generate false-positive (FP) alerts, imposing substantial manual inspection costs and reducing the trust from developers. Existing FP reduction methods still face two primary challenges. First, the large differences among SAST tools and vulnerability categories make it difficult for these methods to learn recurring patterns in historical false positives. Moreover, the knowledge used by these methods are largely static and cannot be updated as newly vali"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.09181","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.09181/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T02:22:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bTkteEP0W8SF3TQfmRcGGgjho3FEbDzpHrvtNIUV1eTmFRAFIdth94c/g6vahGHHMh8AemdoKMM/X1kEmQ3ACg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T13:17:27.617538Z"},"content_sha256":"03de27c64064a80a8ecf524ce34e6cf921abd8bcdea95a800687fe57cd82a5ba","schema_version":"1.0","event_id":"sha256:03de27c64064a80a8ecf524ce34e6cf921abd8bcdea95a800687fe57cd82a5ba"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/bundle.json","state_url":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UKKEZQWKWI7SGYBRWC2B2COITN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T13:17:27Z","links":{"resolver":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN","bundle":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/bundle.json","state":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UKKEZQWKWI7SGYBRWC2B2COITN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:UKKEZQWKWI7SGYBRWC2B2COITN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"89a818748e6f329d222999e9065baacfcf5103aea9c2c8e6212df474e8a835ed","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-10T06:47:39Z","title_canon_sha256":"c46eba411d7af65a1153388ff107ed6f65f04640989bad3d09bd99b14c7f99d6"},"schema_version":"1.0","source":{"id":"2608.09181","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.09181","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"arxiv_version","alias_value":"2608.09181v1","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.09181","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"pith_short_12","alias_value":"UKKEZQWKWI7S","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"pith_short_16","alias_value":"UKKEZQWKWI7SGYBR","created_at":"2026-08-11T02:22:00Z"},{"alias_kind":"pith_short_8","alias_value":"UKKEZQWK","created_at":"2026-08-11T02:22:00Z"}],"graph_snapshots":[{"event_id":"sha256:03de27c64064a80a8ecf524ce34e6cf921abd8bcdea95a800687fe57cd82a5ba","target":"graph","created_at":"2026-08-11T02:22:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.09181/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Static Application Security Testing (SAST) tools have become indispensable in modern secure software devel- opment. However, these tools often generate false-positive (FP) alerts, imposing substantial manual inspection costs and reducing the trust from developers. Existing FP reduction methods still face two primary challenges. First, the large differences among SAST tools and vulnerability categories make it difficult for these methods to learn recurring patterns in historical false positives. Moreover, the knowledge used by these methods are largely static and cannot be updated as newly vali","authors_text":"Cuiyun Gao, Jia Feng, Keke Lian, Qiaodan Hou, Shenyuan Guan, Xincheng Wen, Yanjun Chen","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-10T06:47:39Z","title":"Memoir: Learning, Verifying, and Evolving False-Positive Memories for Static Application Security Testing Tools"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.09181","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9657bfd1b741953cca274e55da20fffa321ff38be2176b66c5f9af7ee70fa51e","target":"record","created_at":"2026-08-11T02:22:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"89a818748e6f329d222999e9065baacfcf5103aea9c2c8e6212df474e8a835ed","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-10T06:47:39Z","title_canon_sha256":"c46eba411d7af65a1153388ff107ed6f65f04640989bad3d09bd99b14c7f99d6"},"schema_version":"1.0","source":{"id":"2608.09181","kind":"arxiv","version":1}},"canonical_sha256":"a2944cc2cab23f236031b0b41d09c89b79ff2daa381e4741ae080075ecb0ff2b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a2944cc2cab23f236031b0b41d09c89b79ff2daa381e4741ae080075ecb0ff2b","first_computed_at":"2026-08-11T02:22:00.729821Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-11T02:22:00.729821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S2chj8kq6DupmIowgcol2LcOOdccTnacGwI9/4dejs9XT130xalaPxfiYATvofXuJ60UtebsQCOgKdPinWf3Cg==","signature_status":"signed_v1","signed_at":"2026-08-11T02:22:00.731575Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.09181","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9657bfd1b741953cca274e55da20fffa321ff38be2176b66c5f9af7ee70fa51e","sha256:03de27c64064a80a8ecf524ce34e6cf921abd8bcdea95a800687fe57cd82a5ba"],"state_sha256":"97246b6f1cebd8d2d18e32009544bcf217d4a81a52cd0428d7a1d4ba575fc7fb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SaHUWk1Zkq4FfwSS1nwYnP+vyY7mbvmVM6BCSXLBM7R/IXkEsYho/0StAfpTm6Z+veknXWzqVERh7IfwAnBjCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T13:17:27.622865Z","bundle_sha256":"7fa4cd5daaed60c02415d66fdc5c3632c0687bc90202e278fffe2fd3eb9135a3"}}