{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:WP4MUD2MMTNCNA3NLGXUETTXRA","short_pith_number":"pith:WP4MUD2M","canonical_record":{"source":{"id":"2412.12039","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T18:08:14Z","cross_cats_sorted":["cs.AI","cs.CL","cs.SE"],"title_canon_sha256":"359694543135c760b1fe1917ebfe801bc5a6e7335407267284157e8d7a718883","abstract_canon_sha256":"ec9f09bdb236ee86440219a00185720ca4f41342b0676b7764520dc3d0326a63"},"schema_version":"1.0"},"canonical_sha256":"b3f8ca0f4c64da26836d59af424e778803a416db39f7310406fc2d9f391c6ab2","source":{"kind":"arxiv","id":"2412.12039","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12039","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12039v3","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12039","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"pith_short_12","alias_value":"WP4MUD2MMTNC","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"pith_short_16","alias_value":"WP4MUD2MMTNCNA3N","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"pith_short_8","alias_value":"WP4MUD2M","created_at":"2026-07-05T12:09:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:WP4MUD2MMTNCNA3NLGXUETTXRA","target":"record","payload":{"canonical_record":{"source":{"id":"2412.12039","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T18:08:14Z","cross_cats_sorted":["cs.AI","cs.CL","cs.SE"],"title_canon_sha256":"359694543135c760b1fe1917ebfe801bc5a6e7335407267284157e8d7a718883","abstract_canon_sha256":"ec9f09bdb236ee86440219a00185720ca4f41342b0676b7764520dc3d0326a63"},"schema_version":"1.0"},"canonical_sha256":"b3f8ca0f4c64da26836d59af424e778803a416db39f7310406fc2d9f391c6ab2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:09:42.897418Z","signature_b64":"y+ZE0S1X4THdjZYLs+/Le4GVMmKYGgxA6P4lXCPx3QDPt+t15pEQb/D3lgbbpKPshEY/A9G4VopzE1H9nLxFBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b3f8ca0f4c64da26836d59af424e778803a416db39f7310406fc2d9f391c6ab2","last_reissued_at":"2026-07-05T12:09:42.896825Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:09:42.896825Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.12039","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IPZg0ZeHUVTV8v81BX9xddwvW036kBb/fmwdpNhkaqpGob7M3DndY1/igIXsKcATpF+BDOFDha+rMzNSPceYDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T01:21:38.353318Z"},"content_sha256":"d0ecccf48c8ff8a9ee10685b2c58bcf8457c3a2960311e48672bb21a21d8d8cf","schema_version":"1.0","event_id":"sha256:d0ecccf48c8ff8a9ee10685b2c58bcf8457c3a2960311e48672bb21a21d8d8cf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:WP4MUD2MMTNCNA3NLGXUETTXRA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can LLM Prompting Serve as a Proxy for Static Analysis in Vulnerability Detection","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.SE"],"primary_cat":"cs.CR","authors_text":"Aastha Valecha, Anik Dey, Baishakhi Ray, Feitong Qiao, Gail Kaiser, Ira Ceka","submitted_at":"2024-12-16T18:08:14Z","abstract_excerpt":"Despite their remarkable success, large language models (LLMs) have shown limited ability on safety-critical code tasks such as vulnerability detection. Typically, static analysis (SA) tools, like CodeQL, CodeGuru Security, etc., are used for vulnerability detection. SA relies on predefined, manually-crafted rules for flagging various vulnerabilities. Thus, effectiveness of SA in detecting vulnerabilities depends on human experts and is known to report high error rates. In this study we investigate whether LLM prompting can be an effective alternative to these static analyzers in the partial c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12039","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.12039/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KH3rmEGQGXHQhPvGCBl7Yb+bDfusvLTc5kphs1Bdl8RZ9WV4jq1oF3LHFpnD1lJn3ny19e/YVni2TysvLMBqAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T01:21:38.353843Z"},"content_sha256":"738b98d27b3be409916718ef5be9c0f6501807b05a2c25102cf182c0cc2b7c64","schema_version":"1.0","event_id":"sha256:738b98d27b3be409916718ef5be9c0f6501807b05a2c25102cf182c0cc2b7c64"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WP4MUD2MMTNCNA3NLGXUETTXRA/bundle.json","state_url":"https://pith.science/pith/WP4MUD2MMTNCNA3NLGXUETTXRA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WP4MUD2MMTNCNA3NLGXUETTXRA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T01:21:38Z","links":{"resolver":"https://pith.science/pith/WP4MUD2MMTNCNA3NLGXUETTXRA","bundle":"https://pith.science/pith/WP4MUD2MMTNCNA3NLGXUETTXRA/bundle.json","state":"https://pith.science/pith/WP4MUD2MMTNCNA3NLGXUETTXRA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WP4MUD2MMTNCNA3NLGXUETTXRA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WP4MUD2MMTNCNA3NLGXUETTXRA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ec9f09bdb236ee86440219a00185720ca4f41342b0676b7764520dc3d0326a63","cross_cats_sorted":["cs.AI","cs.CL","cs.SE"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T18:08:14Z","title_canon_sha256":"359694543135c760b1fe1917ebfe801bc5a6e7335407267284157e8d7a718883"},"schema_version":"1.0","source":{"id":"2412.12039","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12039","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12039v3","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12039","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"pith_short_12","alias_value":"WP4MUD2MMTNC","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"pith_short_16","alias_value":"WP4MUD2MMTNCNA3N","created_at":"2026-07-05T12:09:42Z"},{"alias_kind":"pith_short_8","alias_value":"WP4MUD2M","created_at":"2026-07-05T12:09:42Z"}],"graph_snapshots":[{"event_id":"sha256:738b98d27b3be409916718ef5be9c0f6501807b05a2c25102cf182c0cc2b7c64","target":"graph","created_at":"2026-07-05T12:09:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.12039/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite their remarkable success, large language models (LLMs) have shown limited ability on safety-critical code tasks such as vulnerability detection. Typically, static analysis (SA) tools, like CodeQL, CodeGuru Security, etc., are used for vulnerability detection. SA relies on predefined, manually-crafted rules for flagging various vulnerabilities. Thus, effectiveness of SA in detecting vulnerabilities depends on human experts and is known to report high error rates. In this study we investigate whether LLM prompting can be an effective alternative to these static analyzers in the partial c","authors_text":"Aastha Valecha, Anik Dey, Baishakhi Ray, Feitong Qiao, Gail Kaiser, Ira Ceka","cross_cats":["cs.AI","cs.CL","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T18:08:14Z","title":"Can LLM Prompting Serve as a Proxy for Static Analysis in Vulnerability Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12039","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d0ecccf48c8ff8a9ee10685b2c58bcf8457c3a2960311e48672bb21a21d8d8cf","target":"record","created_at":"2026-07-05T12:09:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ec9f09bdb236ee86440219a00185720ca4f41342b0676b7764520dc3d0326a63","cross_cats_sorted":["cs.AI","cs.CL","cs.SE"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T18:08:14Z","title_canon_sha256":"359694543135c760b1fe1917ebfe801bc5a6e7335407267284157e8d7a718883"},"schema_version":"1.0","source":{"id":"2412.12039","kind":"arxiv","version":3}},"canonical_sha256":"b3f8ca0f4c64da26836d59af424e778803a416db39f7310406fc2d9f391c6ab2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b3f8ca0f4c64da26836d59af424e778803a416db39f7310406fc2d9f391c6ab2","first_computed_at":"2026-07-05T12:09:42.896825Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:42.896825Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"y+ZE0S1X4THdjZYLs+/Le4GVMmKYGgxA6P4lXCPx3QDPt+t15pEQb/D3lgbbpKPshEY/A9G4VopzE1H9nLxFBg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:42.897418Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.12039","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d0ecccf48c8ff8a9ee10685b2c58bcf8457c3a2960311e48672bb21a21d8d8cf","sha256:738b98d27b3be409916718ef5be9c0f6501807b05a2c25102cf182c0cc2b7c64"],"state_sha256":"7acd4caaf8edae687b4bb8e4dbc94cd748634d88c6fd09a248eccb3e68d13849"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bXeSivaCFqdM8EK32+4oEn+cpZv68cz6qg+mxzKg3tg8rESkD5VyD/MHH6uqDL4nZrUM71I4uIU42e6qwxtfAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T01:21:38.357564Z","bundle_sha256":"f343d0d58a09891ed0850c34e5995f1a079a3a6d354a4315c664d8c8ac8fff06"}}