{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UOGKXQWXL2HSMGFM42JIIY2QNO","short_pith_number":"pith:UOGKXQWX","canonical_record":{"source":{"id":"2409.19182","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-27T23:41:51Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"78c3c1ce679193ae3bda1c5c6972be69dbfa0219346deb50e10b70ee57bd5e35","abstract_canon_sha256":"df1cdc8b9341f3b8e53ac3c1f7bbef50404d614efe43b53d9ca7458576c87811"},"schema_version":"1.0"},"canonical_sha256":"a38cabc2d75e8f2618ace6928463506bb4a347fd82211095f9720470fa95bdef","source":{"kind":"arxiv","id":"2409.19182","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.19182","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"arxiv_version","alias_value":"2409.19182v2","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.19182","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"pith_short_12","alias_value":"UOGKXQWXL2HS","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"pith_short_16","alias_value":"UOGKXQWXL2HSMGFM","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"pith_short_8","alias_value":"UOGKXQWX","created_at":"2026-07-05T09:19:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UOGKXQWXL2HSMGFM42JIIY2QNO","target":"record","payload":{"canonical_record":{"source":{"id":"2409.19182","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-27T23:41:51Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"78c3c1ce679193ae3bda1c5c6972be69dbfa0219346deb50e10b70ee57bd5e35","abstract_canon_sha256":"df1cdc8b9341f3b8e53ac3c1f7bbef50404d614efe43b53d9ca7458576c87811"},"schema_version":"1.0"},"canonical_sha256":"a38cabc2d75e8f2618ace6928463506bb4a347fd82211095f9720470fa95bdef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:19:32.237235Z","signature_b64":"fC37Bf4RjHvPJXErqORNAGeylvf80p8OW2o2hm4Y89nkdkhYoUlfQAoA6YW3lqiKByKvv+1/c55nNb/W1skqCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a38cabc2d75e8f2618ace6928463506bb4a347fd82211095f9720470fa95bdef","last_reissued_at":"2026-07-05T09:19:32.236835Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:19:32.236835Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.19182","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nfhwxvLhHT0gbahM2hzaQrdugY8R1fpHejebz7+ig9u61QpbX8DmrdWG+9uUiFOvXt2BIYVvVLnjCzwDOxZfAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T09:30:02.395136Z"},"content_sha256":"71855839c260d600ceb8cbd42495ab814f57e38ba6d196da2f0d88ec7b12a2bc","schema_version":"1.0","event_id":"sha256:71855839c260d600ceb8cbd42495ab814f57e38ba6d196da2f0d88ec7b12a2bc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UOGKXQWXL2HSMGFM42JIIY2QNO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Artificial-Intelligence Generated Code Considered Harmful: A Road Map for Secure and High-Quality Code Generation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chun Jie Chong, Iulian Neamtiu, Zhihao Yao","submitted_at":"2024-09-27T23:41:51Z","abstract_excerpt":"Generating code via a LLM (rather than writing code from scratch), has exploded in popularity. However, the security implications of LLM-generated code are still unknown. We performed a study that compared the security and quality of human-written code with that of LLM-generated code, for a wide range of programming tasks, including data structures, algorithms, cryptographic routines, and LeetCode questions. To assess code security we used unit testing, fuzzing, and static analysis. For code quality, we focused on complexity and size. We found that LLM can generate incorrect code that fails to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.19182","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.19182/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XyKMuoQVI8v7/9zrNKkWF1hCcPNh3iJKquXZdUwbDY/7dN3Iw/b3euolgpcpiRrkid93tY2PhVG36Vgt9hlqDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T09:30:02.396446Z"},"content_sha256":"71033439a5a43c91db0d7d89e8e90b0339d82aee3e2479a69853f8d6816a4238","schema_version":"1.0","event_id":"sha256:71033439a5a43c91db0d7d89e8e90b0339d82aee3e2479a69853f8d6816a4238"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UOGKXQWXL2HSMGFM42JIIY2QNO/bundle.json","state_url":"https://pith.science/pith/UOGKXQWXL2HSMGFM42JIIY2QNO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UOGKXQWXL2HSMGFM42JIIY2QNO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T09:30:02Z","links":{"resolver":"https://pith.science/pith/UOGKXQWXL2HSMGFM42JIIY2QNO","bundle":"https://pith.science/pith/UOGKXQWXL2HSMGFM42JIIY2QNO/bundle.json","state":"https://pith.science/pith/UOGKXQWXL2HSMGFM42JIIY2QNO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UOGKXQWXL2HSMGFM42JIIY2QNO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UOGKXQWXL2HSMGFM42JIIY2QNO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df1cdc8b9341f3b8e53ac3c1f7bbef50404d614efe43b53d9ca7458576c87811","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-27T23:41:51Z","title_canon_sha256":"78c3c1ce679193ae3bda1c5c6972be69dbfa0219346deb50e10b70ee57bd5e35"},"schema_version":"1.0","source":{"id":"2409.19182","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.19182","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"arxiv_version","alias_value":"2409.19182v2","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.19182","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"pith_short_12","alias_value":"UOGKXQWXL2HS","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"pith_short_16","alias_value":"UOGKXQWXL2HSMGFM","created_at":"2026-07-05T09:19:32Z"},{"alias_kind":"pith_short_8","alias_value":"UOGKXQWX","created_at":"2026-07-05T09:19:32Z"}],"graph_snapshots":[{"event_id":"sha256:71033439a5a43c91db0d7d89e8e90b0339d82aee3e2479a69853f8d6816a4238","target":"graph","created_at":"2026-07-05T09:19:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.19182/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Generating code via a LLM (rather than writing code from scratch), has exploded in popularity. However, the security implications of LLM-generated code are still unknown. We performed a study that compared the security and quality of human-written code with that of LLM-generated code, for a wide range of programming tasks, including data structures, algorithms, cryptographic routines, and LeetCode questions. To assess code security we used unit testing, fuzzing, and static analysis. For code quality, we focused on complexity and size. We found that LLM can generate incorrect code that fails to","authors_text":"Chun Jie Chong, Iulian Neamtiu, Zhihao Yao","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-27T23:41:51Z","title":"Artificial-Intelligence Generated Code Considered Harmful: A Road Map for Secure and High-Quality Code Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.19182","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:71855839c260d600ceb8cbd42495ab814f57e38ba6d196da2f0d88ec7b12a2bc","target":"record","created_at":"2026-07-05T09:19:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df1cdc8b9341f3b8e53ac3c1f7bbef50404d614efe43b53d9ca7458576c87811","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-27T23:41:51Z","title_canon_sha256":"78c3c1ce679193ae3bda1c5c6972be69dbfa0219346deb50e10b70ee57bd5e35"},"schema_version":"1.0","source":{"id":"2409.19182","kind":"arxiv","version":2}},"canonical_sha256":"a38cabc2d75e8f2618ace6928463506bb4a347fd82211095f9720470fa95bdef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a38cabc2d75e8f2618ace6928463506bb4a347fd82211095f9720470fa95bdef","first_computed_at":"2026-07-05T09:19:32.236835Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:19:32.236835Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fC37Bf4RjHvPJXErqORNAGeylvf80p8OW2o2hm4Y89nkdkhYoUlfQAoA6YW3lqiKByKvv+1/c55nNb/W1skqCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:19:32.237235Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.19182","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:71855839c260d600ceb8cbd42495ab814f57e38ba6d196da2f0d88ec7b12a2bc","sha256:71033439a5a43c91db0d7d89e8e90b0339d82aee3e2479a69853f8d6816a4238"],"state_sha256":"ad264e398edba9ee51b91db57c2fb1866c69223f63932959b4408a2d50bc2eb3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S9g6hXc+wouTwWVv26Mz4Xgjrsdf5JHHCi3ghyZ/PjPBbDbT8xIgjf7EIbRU+7bQrxlnQ1v1+LWIKlaxZM1oBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T09:30:02.407431Z","bundle_sha256":"2d165c0bc6f912a3100d0edb8067728bf9abc2dd8625815d97378ff4eee90936"}}