{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:WB7URRWKINXJKGSJKCAZICE7BB","short_pith_number":"pith:WB7URRWK","canonical_record":{"source":{"id":"2409.09606","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"9dc460f556b92348b384b32913f655458b122bd46d0f1bb4d7ef641f14711e0b","abstract_canon_sha256":"1620ac0a1ec9fa225ba4c0b6db6574231161673ed981c58ca2e0d028235118e8"},"schema_version":"1.0"},"canonical_sha256":"b07f48c6ca436e951a49508194089f084437acb9b4dc3d08f5c333ac38a09ecf","source":{"kind":"arxiv","id":"2409.09606","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.09606","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"arxiv_version","alias_value":"2409.09606v1","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.09606","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_12","alias_value":"WB7URRWKINXJ","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_16","alias_value":"WB7URRWKINXJKGSJ","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_8","alias_value":"WB7URRWK","created_at":"2026-07-05T09:07:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:WB7URRWKINXJKGSJKCAZICE7BB","target":"record","payload":{"canonical_record":{"source":{"id":"2409.09606","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"9dc460f556b92348b384b32913f655458b122bd46d0f1bb4d7ef641f14711e0b","abstract_canon_sha256":"1620ac0a1ec9fa225ba4c0b6db6574231161673ed981c58ca2e0d028235118e8"},"schema_version":"1.0"},"canonical_sha256":"b07f48c6ca436e951a49508194089f084437acb9b4dc3d08f5c333ac38a09ecf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:07:11.963745Z","signature_b64":"X3qh97X0l2bohcBfzMeI2Kn3bJzQ4LBhGSHoj5XU9Xi2RLEmSUIZ1Rd+Wsuidiah50ICEID0qPpyPEaT0kddCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b07f48c6ca436e951a49508194089f084437acb9b4dc3d08f5c333ac38a09ecf","last_reissued_at":"2026-07-05T09:07:11.963355Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:07:11.963355Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.09606","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:07:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sCpoMfOaqpTDJlHbqKf1vgF85QDTaGsKx3mMYt8UQP2e0LZuHc5mq2Id6qadxhGgsTDlsNl9lAVbXnP0CToxBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:59:33.486102Z"},"content_sha256":"799423572c3e2ec41caa116fa9f4aae83e4e8bb888f671bc25369623e4f6de5d","schema_version":"1.0","event_id":"sha256:799423572c3e2ec41caa116fa9f4aae83e4e8bb888f671bc25369623e4f6de5d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:WB7URRWKINXJKGSJKCAZICE7BB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BULKHEAD: Secure, Scalable, and Efficient Kernel Compartmentalization with PKS","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Kangjie Lu, Qingkai Zeng, Weiheng Bai, Yinggang Guo, Zicheng Wang","submitted_at":"2024-09-15T04:11:26Z","abstract_excerpt":"The endless stream of vulnerabilities urgently calls for principled mitigation to confine the effect of exploitation. However, the monolithic architecture of commodity OS kernels, like the Linux kernel, allows an attacker to compromise the entire system by exploiting a vulnerability in any kernel component. Kernel compartmentalization is a promising approach that follows the least-privilege principle. However, existing mechanisms struggle with the trade-off on security, scalability, and performance, given the challenges stemming from mutual untrustworthiness among numerous and complex componen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.09606","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.09606/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:07:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LjZ/bC/yWJLZyyarTsuF4RAb+PKrpl9oqdK7A6hh1YcHGwhxmfDi+eNSqKFfaX8ZNd+pjgbE/pdVINFefRxeDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:59:33.486796Z"},"content_sha256":"582fe547f62fae400d2c9b01576cf63ae63c7f2cb3df5edd204874e485cf4734","schema_version":"1.0","event_id":"sha256:582fe547f62fae400d2c9b01576cf63ae63c7f2cb3df5edd204874e485cf4734"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WB7URRWKINXJKGSJKCAZICE7BB/bundle.json","state_url":"https://pith.science/pith/WB7URRWKINXJKGSJKCAZICE7BB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WB7URRWKINXJKGSJKCAZICE7BB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T23:59:33Z","links":{"resolver":"https://pith.science/pith/WB7URRWKINXJKGSJKCAZICE7BB","bundle":"https://pith.science/pith/WB7URRWKINXJKGSJKCAZICE7BB/bundle.json","state":"https://pith.science/pith/WB7URRWKINXJKGSJKCAZICE7BB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WB7URRWKINXJKGSJKCAZICE7BB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WB7URRWKINXJKGSJKCAZICE7BB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1620ac0a1ec9fa225ba4c0b6db6574231161673ed981c58ca2e0d028235118e8","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","title_canon_sha256":"9dc460f556b92348b384b32913f655458b122bd46d0f1bb4d7ef641f14711e0b"},"schema_version":"1.0","source":{"id":"2409.09606","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.09606","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"arxiv_version","alias_value":"2409.09606v1","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.09606","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_12","alias_value":"WB7URRWKINXJ","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_16","alias_value":"WB7URRWKINXJKGSJ","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_8","alias_value":"WB7URRWK","created_at":"2026-07-05T09:07:11Z"}],"graph_snapshots":[{"event_id":"sha256:582fe547f62fae400d2c9b01576cf63ae63c7f2cb3df5edd204874e485cf4734","target":"graph","created_at":"2026-07-05T09:07:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.09606/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The endless stream of vulnerabilities urgently calls for principled mitigation to confine the effect of exploitation. However, the monolithic architecture of commodity OS kernels, like the Linux kernel, allows an attacker to compromise the entire system by exploiting a vulnerability in any kernel component. Kernel compartmentalization is a promising approach that follows the least-privilege principle. However, existing mechanisms struggle with the trade-off on security, scalability, and performance, given the challenges stemming from mutual untrustworthiness among numerous and complex componen","authors_text":"Kangjie Lu, Qingkai Zeng, Weiheng Bai, Yinggang Guo, Zicheng Wang","cross_cats":["cs.OS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","title":"BULKHEAD: Secure, Scalable, and Efficient Kernel Compartmentalization with PKS"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.09606","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:799423572c3e2ec41caa116fa9f4aae83e4e8bb888f671bc25369623e4f6de5d","target":"record","created_at":"2026-07-05T09:07:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1620ac0a1ec9fa225ba4c0b6db6574231161673ed981c58ca2e0d028235118e8","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","title_canon_sha256":"9dc460f556b92348b384b32913f655458b122bd46d0f1bb4d7ef641f14711e0b"},"schema_version":"1.0","source":{"id":"2409.09606","kind":"arxiv","version":1}},"canonical_sha256":"b07f48c6ca436e951a49508194089f084437acb9b4dc3d08f5c333ac38a09ecf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b07f48c6ca436e951a49508194089f084437acb9b4dc3d08f5c333ac38a09ecf","first_computed_at":"2026-07-05T09:07:11.963355Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:07:11.963355Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"X3qh97X0l2bohcBfzMeI2Kn3bJzQ4LBhGSHoj5XU9Xi2RLEmSUIZ1Rd+Wsuidiah50ICEID0qPpyPEaT0kddCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:07:11.963745Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.09606","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:799423572c3e2ec41caa116fa9f4aae83e4e8bb888f671bc25369623e4f6de5d","sha256:582fe547f62fae400d2c9b01576cf63ae63c7f2cb3df5edd204874e485cf4734"],"state_sha256":"22a9d2c47ec31f29876a9283173341af3430996ccb530d5de99dae99cffa8bfb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DvUq8THXdhYzGXbsXV3mRDniyaNhd1f16Mjt7OacJUyTeZPszUJwU/e8FHN67ivEFQuwANFwjBveZVhY5ycDBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T23:59:33.491894Z","bundle_sha256":"bc08928ef6a87435c43402ae31a802d56f723ddd52326fa094f8baf62fd2d9aa"}}