{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:VW2ICC6JYREFI45H7VMQRIZYB3","short_pith_number":"pith:VW2ICC6J","canonical_record":{"source":{"id":"2607.23624","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-26T12:15:09Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"895efec98d38121fe1e61d2596cd43b00907a8d1773f8bff6554bd909e3e8b0d","abstract_canon_sha256":"8280f7c237b9d973df49ec0a400c77ad43983e5621b6a3bc6ad2c3d289c37528"},"schema_version":"1.0"},"canonical_sha256":"adb4810bc9c4485473a7fd5908a3380ee15eaef39b2f8758d5aafe4f64ffb544","source":{"kind":"arxiv","id":"2607.23624","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.23624","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"arxiv_version","alias_value":"2607.23624v1","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.23624","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"pith_short_12","alias_value":"VW2ICC6JYREF","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"pith_short_16","alias_value":"VW2ICC6JYREFI45H","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"pith_short_8","alias_value":"VW2ICC6J","created_at":"2026-07-28T01:23:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:VW2ICC6JYREFI45H7VMQRIZYB3","target":"record","payload":{"canonical_record":{"source":{"id":"2607.23624","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-26T12:15:09Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"895efec98d38121fe1e61d2596cd43b00907a8d1773f8bff6554bd909e3e8b0d","abstract_canon_sha256":"8280f7c237b9d973df49ec0a400c77ad43983e5621b6a3bc6ad2c3d289c37528"},"schema_version":"1.0"},"canonical_sha256":"adb4810bc9c4485473a7fd5908a3380ee15eaef39b2f8758d5aafe4f64ffb544","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-28T01:23:02.400776Z","signature_b64":"xQDrqkSeo7HBUegC8CJ2csIRJbjsE52nYDPGswBDBTrKwfLQ8A/hfze3aky0Xu5g6dcvri1EHU3HweR44cIHCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"adb4810bc9c4485473a7fd5908a3380ee15eaef39b2f8758d5aafe4f64ffb544","last_reissued_at":"2026-07-28T01:23:02.399957Z","signature_status":"signed_v1","first_computed_at":"2026-07-28T01:23:02.399957Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.23624","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:23:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3snMhAiR634Iswy4eUQE68nb94U8KY7Cq22qxvKHStsUy7ziYsIEHgFzaGJdfBn0pkf0lZ4qtRn7Xz9oLPHmAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:19:38.946807Z"},"content_sha256":"22867171b84600aedfee62bf73afe6c8330235a12106733bc88957d5417ad492","schema_version":"1.0","event_id":"sha256:22867171b84600aedfee62bf73afe6c8330235a12106733bc88957d5417ad492"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:VW2ICC6JYREFI45H7VMQRIZYB3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Where Is the Cost of Third-Party API Routers in Agentic Software Development?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.SE","authors_text":"Donghao Fu, Jingxin Li, Xue Jiang, Yihong Dong","submitted_at":"2026-07-26T12:15:09Z","abstract_excerpt":"Third-party API routers have become a common layer that unifies access across increasingly diverse LLM providers. In coding-agent workflows, high-autonomy operation is widely adopted because it reduces interaction overhead. As a result, a third-party API router, which sits between the agent and the upstream provider, inevitably occupies the trusted path. It can inspect and modify every request and response, yet no mechanism verifies alignment between the provider's output and the repository-level actions ultimately executed by the agent. Consequently, client-side permission mechanisms may beco"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.23624","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.23624/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:23:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v/LS0Aux20BspVMWKOqDxkDDfLY3F9zoYftXZPqVd038fOfdEUlaBq0w1gE9wZAUJEfIeO4e201If5NYOlDBAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:19:38.947904Z"},"content_sha256":"9a92fe4a989f4f7d2a24e4a544a2434b90c3771ec6e0963450a07e59f1b58469","schema_version":"1.0","event_id":"sha256:9a92fe4a989f4f7d2a24e4a544a2434b90c3771ec6e0963450a07e59f1b58469"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VW2ICC6JYREFI45H7VMQRIZYB3/bundle.json","state_url":"https://pith.science/pith/VW2ICC6JYREFI45H7VMQRIZYB3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VW2ICC6JYREFI45H7VMQRIZYB3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T11:19:38Z","links":{"resolver":"https://pith.science/pith/VW2ICC6JYREFI45H7VMQRIZYB3","bundle":"https://pith.science/pith/VW2ICC6JYREFI45H7VMQRIZYB3/bundle.json","state":"https://pith.science/pith/VW2ICC6JYREFI45H7VMQRIZYB3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VW2ICC6JYREFI45H7VMQRIZYB3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:VW2ICC6JYREFI45H7VMQRIZYB3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8280f7c237b9d973df49ec0a400c77ad43983e5621b6a3bc6ad2c3d289c37528","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-26T12:15:09Z","title_canon_sha256":"895efec98d38121fe1e61d2596cd43b00907a8d1773f8bff6554bd909e3e8b0d"},"schema_version":"1.0","source":{"id":"2607.23624","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.23624","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"arxiv_version","alias_value":"2607.23624v1","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.23624","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"pith_short_12","alias_value":"VW2ICC6JYREF","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"pith_short_16","alias_value":"VW2ICC6JYREFI45H","created_at":"2026-07-28T01:23:02Z"},{"alias_kind":"pith_short_8","alias_value":"VW2ICC6J","created_at":"2026-07-28T01:23:02Z"}],"graph_snapshots":[{"event_id":"sha256:9a92fe4a989f4f7d2a24e4a544a2434b90c3771ec6e0963450a07e59f1b58469","target":"graph","created_at":"2026-07-28T01:23:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.23624/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Third-party API routers have become a common layer that unifies access across increasingly diverse LLM providers. In coding-agent workflows, high-autonomy operation is widely adopted because it reduces interaction overhead. As a result, a third-party API router, which sits between the agent and the upstream provider, inevitably occupies the trusted path. It can inspect and modify every request and response, yet no mechanism verifies alignment between the provider's output and the repository-level actions ultimately executed by the agent. Consequently, client-side permission mechanisms may beco","authors_text":"Donghao Fu, Jingxin Li, Xue Jiang, Yihong Dong","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-26T12:15:09Z","title":"Where Is the Cost of Third-Party API Routers in Agentic Software Development?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.23624","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:22867171b84600aedfee62bf73afe6c8330235a12106733bc88957d5417ad492","target":"record","created_at":"2026-07-28T01:23:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8280f7c237b9d973df49ec0a400c77ad43983e5621b6a3bc6ad2c3d289c37528","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-26T12:15:09Z","title_canon_sha256":"895efec98d38121fe1e61d2596cd43b00907a8d1773f8bff6554bd909e3e8b0d"},"schema_version":"1.0","source":{"id":"2607.23624","kind":"arxiv","version":1}},"canonical_sha256":"adb4810bc9c4485473a7fd5908a3380ee15eaef39b2f8758d5aafe4f64ffb544","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"adb4810bc9c4485473a7fd5908a3380ee15eaef39b2f8758d5aafe4f64ffb544","first_computed_at":"2026-07-28T01:23:02.399957Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-28T01:23:02.399957Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xQDrqkSeo7HBUegC8CJ2csIRJbjsE52nYDPGswBDBTrKwfLQ8A/hfze3aky0Xu5g6dcvri1EHU3HweR44cIHCg==","signature_status":"signed_v1","signed_at":"2026-07-28T01:23:02.400776Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.23624","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:22867171b84600aedfee62bf73afe6c8330235a12106733bc88957d5417ad492","sha256:9a92fe4a989f4f7d2a24e4a544a2434b90c3771ec6e0963450a07e59f1b58469"],"state_sha256":"1d4963dd61fe09f48ab6f4e486090db91306de90f464d1ecbb4f9f3f427562c4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MVTiAfgrax5ERnynTNPv+7KFAwNhaLvTenJkuWZvnPHXNudyXDLtDF7EqtZfjycLZDhJYx+QjMZ+2wFl7ytkCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T11:19:38.955716Z","bundle_sha256":"40c1e2a066e0968694aba8cb1ec0aed86d01e8752056eef548f4b7463a8cf2ac"}}