{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:VDBZOPGDTTCIE5PKGFA7IZPXVA","short_pith_number":"pith:VDBZOPGD","schema_version":"1.0","canonical_sha256":"a8c3973cc39cc48275ea3141f465f7a80d25ffd8435d0484f31eb4e54a702df3","source":{"kind":"arxiv","id":"2505.06177","version":2},"attestation_state":"computed","paper":{"title":"An Empirical Study of Fuzz Harness Degradation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Joschua Schilling, Nicolai Bissantz, Philipp G\\\"orz, Thorsten Holz","submitted_at":"2025-05-09T16:39:20Z","abstract_excerpt":"The purpose of continuous fuzzing platforms is to enable fuzzing for software projects via fuzz harnesses -- but as the projects continue to evolve, are these harnesses updated in lockstep, or do they run out of date? If these harnesses remain unmaintained, will they degrade over time in terms of coverage achieved or number of bugs found? This is the subject of our study.\n  We study Google's OSS-Fuzz continuous fuzzing platform containing harnesses for 510 open-source C/C++ projects, many of which are security-critical. A harness is the glue code between the fuzzer and the project, so it needs"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2505.06177","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-05-09T16:39:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"952f8cc07007723dbebcdc0eadb06a98426f4c8a9111954d1a3372a97c56fa8a","abstract_canon_sha256":"c3c802951d0d2b8cd5d653484d5348fe096d888dfbca2428ce91b4ff52ebb5f3"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-29T00:13:59.839101Z","signature_b64":"b2a15ZFHyW5mzV4LEbKZQXseAX2JmC8BXOdTgPfo53DV6o6Kpc9KWJqRfGMyo1473jO09wCtrTuQ27vvKzmgBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a8c3973cc39cc48275ea3141f465f7a80d25ffd8435d0484f31eb4e54a702df3","last_reissued_at":"2026-06-29T00:13:59.838556Z","signature_status":"signed_v1","first_computed_at":"2026-06-29T00:13:59.838556Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"An Empirical Study of Fuzz Harness Degradation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Joschua Schilling, Nicolai Bissantz, Philipp G\\\"orz, Thorsten Holz","submitted_at":"2025-05-09T16:39:20Z","abstract_excerpt":"The purpose of continuous fuzzing platforms is to enable fuzzing for software projects via fuzz harnesses -- but as the projects continue to evolve, are these harnesses updated in lockstep, or do they run out of date? If these harnesses remain unmaintained, will they degrade over time in terms of coverage achieved or number of bugs found? This is the subject of our study.\n  We study Google's OSS-Fuzz continuous fuzzing platform containing harnesses for 510 open-source C/C++ projects, many of which are security-critical. A harness is the glue code between the fuzzer and the project, so it needs"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06177","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.06177/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2505.06177","created_at":"2026-06-29T00:13:59.838613+00:00"},{"alias_kind":"arxiv_version","alias_value":"2505.06177v2","created_at":"2026-06-29T00:13:59.838613+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06177","created_at":"2026-06-29T00:13:59.838613+00:00"},{"alias_kind":"pith_short_12","alias_value":"VDBZOPGDTTCI","created_at":"2026-06-29T00:13:59.838613+00:00"},{"alias_kind":"pith_short_16","alias_value":"VDBZOPGDTTCIE5PK","created_at":"2026-06-29T00:13:59.838613+00:00"},{"alias_kind":"pith_short_8","alias_value":"VDBZOPGD","created_at":"2026-06-29T00:13:59.838613+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2607.07007","citing_title":"Thinking More, Harnessing Better: State Machine Guided Harness Automatic Generation with Project Digestion and Workflow Decomposition","ref_index":10,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA","json":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA.json","graph_json":"https://pith.science/api/pith-number/VDBZOPGDTTCIE5PKGFA7IZPXVA/graph.json","events_json":"https://pith.science/api/pith-number/VDBZOPGDTTCIE5PKGFA7IZPXVA/events.json","paper":"https://pith.science/paper/VDBZOPGD"},"agent_actions":{"view_html":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA","download_json":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA.json","view_paper":"https://pith.science/paper/VDBZOPGD","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2505.06177&json=true","fetch_graph":"https://pith.science/api/pith-number/VDBZOPGDTTCIE5PKGFA7IZPXVA/graph.json","fetch_events":"https://pith.science/api/pith-number/VDBZOPGDTTCIE5PKGFA7IZPXVA/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA/action/timestamp_anchor","attest_storage":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA/action/storage_attestation","attest_author":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA/action/author_attestation","sign_citation":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA/action/citation_signature","submit_replication":"https://pith.science/pith/VDBZOPGDTTCIE5PKGFA7IZPXVA/action/replication_record"}},"created_at":"2026-06-29T00:13:59.838613+00:00","updated_at":"2026-06-29T00:13:59.838613+00:00"}