{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:WFM7HFFOC6ZXJS6TJUBIA734ZA","short_pith_number":"pith:WFM7HFFO","canonical_record":{"source":{"id":"2108.03705","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-08T18:18:18Z","cross_cats_sorted":[],"title_canon_sha256":"acfc30471a634af0adc51fe7357c3e606da59d15b15647df304c41870630cabf","abstract_canon_sha256":"088147d1e1bc1d79d29c2b0f42b62e14d346f278efcd1e93139aabb2f415f8fd"},"schema_version":"1.0"},"canonical_sha256":"b159f394ae17b374cbd34d02807f7cc80070aa6d48d1948b82bd52cd5d72fc99","source":{"kind":"arxiv","id":"2108.03705","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.03705","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"arxiv_version","alias_value":"2108.03705v2","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.03705","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"pith_short_12","alias_value":"WFM7HFFOC6ZX","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"pith_short_16","alias_value":"WFM7HFFOC6ZXJS6T","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"pith_short_8","alias_value":"WFM7HFFO","created_at":"2026-07-05T03:04:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:WFM7HFFOC6ZXJS6TJUBIA734ZA","target":"record","payload":{"canonical_record":{"source":{"id":"2108.03705","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-08T18:18:18Z","cross_cats_sorted":[],"title_canon_sha256":"acfc30471a634af0adc51fe7357c3e606da59d15b15647df304c41870630cabf","abstract_canon_sha256":"088147d1e1bc1d79d29c2b0f42b62e14d346f278efcd1e93139aabb2f415f8fd"},"schema_version":"1.0"},"canonical_sha256":"b159f394ae17b374cbd34d02807f7cc80070aa6d48d1948b82bd52cd5d72fc99","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:04:28.628337Z","signature_b64":"elXeSdqxCILx38wcqxddi3/KqSI7II2TR3mUVvbHndw/iw6Rho/BucDaQUUj33abEsoFdHCS9V62qYw93cmiCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b159f394ae17b374cbd34d02807f7cc80070aa6d48d1948b82bd52cd5d72fc99","last_reissued_at":"2026-07-05T03:04:28.627733Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:04:28.627733Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.03705","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:04:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6+5dM6GlKA6Ca4SRqqkImYp3lZLR9MavaanTTflixZ+CZuz2qbD3blVZX7MjO91jPwZeJuSqaMD7vapCC8bsDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T17:32:04.297263Z"},"content_sha256":"be3b557e20a7aea0846d9082ae9ebaf4364a9af7fd32d5dcb029172a7949cb0f","schema_version":"1.0","event_id":"sha256:be3b557e20a7aea0846d9082ae9ebaf4364a9af7fd32d5dcb029172a7949cb0f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:WFM7HFFOC6ZXJS6TJUBIA734ZA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Endokernel: Fast, Secure, and Programmable Subprocess Virtualization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"(2) Texas A&M University, (3) Intel Labs), Anjo Vahldiek-Oberwagner (3), Bumjin Im (1), Chia-Che Tsai (2), Fangfei Yang (1), Michael LeMay (3), Nathan Dautenhahn (1) ((1) Rice University","submitted_at":"2021-08-08T18:18:18Z","abstract_excerpt":"Commodity applications contain more and more combinations of interacting components (user, application, library, and system) and exhibit increasingly diverse tradeoffs between isolation, performance, and programmability. We argue that the challenge of future runtime isolation is best met by embracing the multi-principle nature of applications, rethinking process architecture for fast and extensible intra-process isolation. We present, the Endokernel, a new process model and security architecture that nests an extensible monitor into the standard process for building efficient least-authority a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.03705","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.03705/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:04:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p6Fk0Bf8ErTUxbQKyeMyFOSZrqkhiX/1sK2CfsB5S8cJXk1WSAELT/p+OEundVxxIFZ7RlsbFiQfcE9mdiNQBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T17:32:04.297913Z"},"content_sha256":"6312558ec4a3ead02fa8c8b0d2a686727817cb9dbd6b0fe7bcd778a91ddbcc71","schema_version":"1.0","event_id":"sha256:6312558ec4a3ead02fa8c8b0d2a686727817cb9dbd6b0fe7bcd778a91ddbcc71"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WFM7HFFOC6ZXJS6TJUBIA734ZA/bundle.json","state_url":"https://pith.science/pith/WFM7HFFOC6ZXJS6TJUBIA734ZA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WFM7HFFOC6ZXJS6TJUBIA734ZA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-20T17:32:04Z","links":{"resolver":"https://pith.science/pith/WFM7HFFOC6ZXJS6TJUBIA734ZA","bundle":"https://pith.science/pith/WFM7HFFOC6ZXJS6TJUBIA734ZA/bundle.json","state":"https://pith.science/pith/WFM7HFFOC6ZXJS6TJUBIA734ZA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WFM7HFFOC6ZXJS6TJUBIA734ZA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:WFM7HFFOC6ZXJS6TJUBIA734ZA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"088147d1e1bc1d79d29c2b0f42b62e14d346f278efcd1e93139aabb2f415f8fd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-08T18:18:18Z","title_canon_sha256":"acfc30471a634af0adc51fe7357c3e606da59d15b15647df304c41870630cabf"},"schema_version":"1.0","source":{"id":"2108.03705","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.03705","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"arxiv_version","alias_value":"2108.03705v2","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.03705","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"pith_short_12","alias_value":"WFM7HFFOC6ZX","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"pith_short_16","alias_value":"WFM7HFFOC6ZXJS6T","created_at":"2026-07-05T03:04:28Z"},{"alias_kind":"pith_short_8","alias_value":"WFM7HFFO","created_at":"2026-07-05T03:04:28Z"}],"graph_snapshots":[{"event_id":"sha256:6312558ec4a3ead02fa8c8b0d2a686727817cb9dbd6b0fe7bcd778a91ddbcc71","target":"graph","created_at":"2026-07-05T03:04:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.03705/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Commodity applications contain more and more combinations of interacting components (user, application, library, and system) and exhibit increasingly diverse tradeoffs between isolation, performance, and programmability. We argue that the challenge of future runtime isolation is best met by embracing the multi-principle nature of applications, rethinking process architecture for fast and extensible intra-process isolation. We present, the Endokernel, a new process model and security architecture that nests an extensible monitor into the standard process for building efficient least-authority a","authors_text":"(2) Texas A&M University, (3) Intel Labs), Anjo Vahldiek-Oberwagner (3), Bumjin Im (1), Chia-Che Tsai (2), Fangfei Yang (1), Michael LeMay (3), Nathan Dautenhahn (1) ((1) Rice University","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-08T18:18:18Z","title":"The Endokernel: Fast, Secure, and Programmable Subprocess Virtualization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.03705","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:be3b557e20a7aea0846d9082ae9ebaf4364a9af7fd32d5dcb029172a7949cb0f","target":"record","created_at":"2026-07-05T03:04:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"088147d1e1bc1d79d29c2b0f42b62e14d346f278efcd1e93139aabb2f415f8fd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-08-08T18:18:18Z","title_canon_sha256":"acfc30471a634af0adc51fe7357c3e606da59d15b15647df304c41870630cabf"},"schema_version":"1.0","source":{"id":"2108.03705","kind":"arxiv","version":2}},"canonical_sha256":"b159f394ae17b374cbd34d02807f7cc80070aa6d48d1948b82bd52cd5d72fc99","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b159f394ae17b374cbd34d02807f7cc80070aa6d48d1948b82bd52cd5d72fc99","first_computed_at":"2026-07-05T03:04:28.627733Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:04:28.627733Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"elXeSdqxCILx38wcqxddi3/KqSI7II2TR3mUVvbHndw/iw6Rho/BucDaQUUj33abEsoFdHCS9V62qYw93cmiCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:04:28.628337Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.03705","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:be3b557e20a7aea0846d9082ae9ebaf4364a9af7fd32d5dcb029172a7949cb0f","sha256:6312558ec4a3ead02fa8c8b0d2a686727817cb9dbd6b0fe7bcd778a91ddbcc71"],"state_sha256":"8892726de09366c0a9eb15c5096cc5cd9adacb99f239503af706c24f5351243b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"21Ounh0elxTYEv3g4CtSBpF8KpZ9+MGaQxUpal2XBscObFp4hNsJzYvUvOb+OV9Q4vdTo/6Xsj0FgKe8ByunDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-20T17:32:04.301132Z","bundle_sha256":"1e586f6c070587fd826e37a054e331aafb4c4790d26620337688c12cf3abebcb"}}