{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WCMCXVDNR2KBNJ4FLZ3GO4LZDI","short_pith_number":"pith:WCMCXVDN","canonical_record":{"source":{"id":"2507.10054","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-14T08:36:26Z","cross_cats_sorted":[],"title_canon_sha256":"43082f624b3cf9a0256ba53224444952cdf669d5a5ed97e2ec9f5e24e8294898","abstract_canon_sha256":"6b801309fc1675ed16923d1026ce7edcd6af2e1affe66edd3bd70e911296a566"},"schema_version":"1.0"},"canonical_sha256":"b0982bd46d8e9416a7855e766771791a30707fc0e13f2a0eb832daa94c085d00","source":{"kind":"arxiv","id":"2507.10054","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.10054","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"arxiv_version","alias_value":"2507.10054v2","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.10054","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"pith_short_12","alias_value":"WCMCXVDNR2KB","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"pith_short_16","alias_value":"WCMCXVDNR2KBNJ4F","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"pith_short_8","alias_value":"WCMCXVDN","created_at":"2026-07-05T11:41:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WCMCXVDNR2KBNJ4FLZ3GO4LZDI","target":"record","payload":{"canonical_record":{"source":{"id":"2507.10054","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-14T08:36:26Z","cross_cats_sorted":[],"title_canon_sha256":"43082f624b3cf9a0256ba53224444952cdf669d5a5ed97e2ec9f5e24e8294898","abstract_canon_sha256":"6b801309fc1675ed16923d1026ce7edcd6af2e1affe66edd3bd70e911296a566"},"schema_version":"1.0"},"canonical_sha256":"b0982bd46d8e9416a7855e766771791a30707fc0e13f2a0eb832daa94c085d00","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:41:44.684194Z","signature_b64":"SRR6F9F/wWvn2QuXoCeh++NVpGNMFTBtD97ezN+xiYIz9qDemOATmqFLFE9CtF+yE4FjM3YpbwGjcwvGvZnFAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b0982bd46d8e9416a7855e766771791a30707fc0e13f2a0eb832daa94c085d00","last_reissued_at":"2026-07-05T11:41:44.683635Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:41:44.683635Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.10054","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ssjp8aCxgTMehU0bqi5cGN4INgq+W28yHa9pRy/Y9eOyAXRXfKyfwLQXr9ES/UUaMHkYK5lX/26O84Dc/hxxAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T04:57:58.533651Z"},"content_sha256":"a7be98f95f2a42a5bf888c0ffdf4e8f27dce783de82a9830cd886839812462b3","schema_version":"1.0","event_id":"sha256:a7be98f95f2a42a5bf888c0ffdf4e8f27dce783de82a9830cd886839812462b3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WCMCXVDNR2KBNJ4FLZ3GO4LZDI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Explicit Vulnerability Generation with LLMs: An Investigation Beyond Adversarial Attacks","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Anil Koyuncu, Emir Bosnak, Mayasah Lami, Sahand Moslemi","submitted_at":"2025-07-14T08:36:26Z","abstract_excerpt":"Large Language Models (LLMs) are increasingly used as code assistants, yet their behavior when explicitly asked to generate insecure code remains poorly understood. While prior research has focused on unintended vulnerabilities, this study examines a more direct threat: open-source LLMs generating vulnerable code when prompted. We propose a dual experimental design: (1) Dynamic Prompting, which systematically varies vulnerability type, user persona, and prompt phrasing across structured templates; and (2) Reverse Prompting, which derives natural-language prompts from real vulnerable code sampl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.10054","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.10054/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wu4llMQ7SY6rTJLD94IiAX1Cl/TvkKgiaUmrzZNWVooeDseaeWVlMs3Snrvsr7kEFP7DdGI4WFQCxIR8NqAvAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T04:57:58.534567Z"},"content_sha256":"b0464876ad09b6ea3aa5c8884e513b7536d91df7a40b43895b8a89010c5d23e4","schema_version":"1.0","event_id":"sha256:b0464876ad09b6ea3aa5c8884e513b7536d91df7a40b43895b8a89010c5d23e4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WCMCXVDNR2KBNJ4FLZ3GO4LZDI/bundle.json","state_url":"https://pith.science/pith/WCMCXVDNR2KBNJ4FLZ3GO4LZDI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WCMCXVDNR2KBNJ4FLZ3GO4LZDI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T04:57:58Z","links":{"resolver":"https://pith.science/pith/WCMCXVDNR2KBNJ4FLZ3GO4LZDI","bundle":"https://pith.science/pith/WCMCXVDNR2KBNJ4FLZ3GO4LZDI/bundle.json","state":"https://pith.science/pith/WCMCXVDNR2KBNJ4FLZ3GO4LZDI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WCMCXVDNR2KBNJ4FLZ3GO4LZDI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WCMCXVDNR2KBNJ4FLZ3GO4LZDI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6b801309fc1675ed16923d1026ce7edcd6af2e1affe66edd3bd70e911296a566","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-14T08:36:26Z","title_canon_sha256":"43082f624b3cf9a0256ba53224444952cdf669d5a5ed97e2ec9f5e24e8294898"},"schema_version":"1.0","source":{"id":"2507.10054","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.10054","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"arxiv_version","alias_value":"2507.10054v2","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.10054","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"pith_short_12","alias_value":"WCMCXVDNR2KB","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"pith_short_16","alias_value":"WCMCXVDNR2KBNJ4F","created_at":"2026-07-05T11:41:44Z"},{"alias_kind":"pith_short_8","alias_value":"WCMCXVDN","created_at":"2026-07-05T11:41:44Z"}],"graph_snapshots":[{"event_id":"sha256:b0464876ad09b6ea3aa5c8884e513b7536d91df7a40b43895b8a89010c5d23e4","target":"graph","created_at":"2026-07-05T11:41:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.10054/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are increasingly used as code assistants, yet their behavior when explicitly asked to generate insecure code remains poorly understood. While prior research has focused on unintended vulnerabilities, this study examines a more direct threat: open-source LLMs generating vulnerable code when prompted. We propose a dual experimental design: (1) Dynamic Prompting, which systematically varies vulnerability type, user persona, and prompt phrasing across structured templates; and (2) Reverse Prompting, which derives natural-language prompts from real vulnerable code sampl","authors_text":"Anil Koyuncu, Emir Bosnak, Mayasah Lami, Sahand Moslemi","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-14T08:36:26Z","title":"Explicit Vulnerability Generation with LLMs: An Investigation Beyond Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.10054","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a7be98f95f2a42a5bf888c0ffdf4e8f27dce783de82a9830cd886839812462b3","target":"record","created_at":"2026-07-05T11:41:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6b801309fc1675ed16923d1026ce7edcd6af2e1affe66edd3bd70e911296a566","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-07-14T08:36:26Z","title_canon_sha256":"43082f624b3cf9a0256ba53224444952cdf669d5a5ed97e2ec9f5e24e8294898"},"schema_version":"1.0","source":{"id":"2507.10054","kind":"arxiv","version":2}},"canonical_sha256":"b0982bd46d8e9416a7855e766771791a30707fc0e13f2a0eb832daa94c085d00","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b0982bd46d8e9416a7855e766771791a30707fc0e13f2a0eb832daa94c085d00","first_computed_at":"2026-07-05T11:41:44.683635Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:41:44.683635Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SRR6F9F/wWvn2QuXoCeh++NVpGNMFTBtD97ezN+xiYIz9qDemOATmqFLFE9CtF+yE4FjM3YpbwGjcwvGvZnFAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:41:44.684194Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.10054","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a7be98f95f2a42a5bf888c0ffdf4e8f27dce783de82a9830cd886839812462b3","sha256:b0464876ad09b6ea3aa5c8884e513b7536d91df7a40b43895b8a89010c5d23e4"],"state_sha256":"74bad5eec50a2cfd97b457be88f9b3d2103fc4de2cdeade19dc95fc25b100a46"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DD9F8qRmVRN+LdEsxWOR2l1q7MLoH/SGUDPqGTN053/8ZcBrYaeJCfHfVWot3PjCokzyV09ihgKL04d3gdfNBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T04:57:58.539381Z","bundle_sha256":"2a88de396d31faaae0b18184af3e437dfa191f740b987589419ab96d516be3a1"}}