{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ZB7MGQ2BOL7VDEIDUUPOVSQADU","short_pith_number":"pith:ZB7MGQ2B","canonical_record":{"source":{"id":"2401.08476","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T16:27:30Z","cross_cats_sorted":["cs.SY","eess.SY"],"title_canon_sha256":"b5104e480bfb245eecacdfba9e63ee8ddae1d6e4cc61b4ef4822e46049f8eb9e","abstract_canon_sha256":"d32aa4f30c98edeec840af3f286cebe01b9dfabeda3cf05e3ba8991b4e6b2f0a"},"schema_version":"1.0"},"canonical_sha256":"c87ec3434172ff519103a51eeaca001d3d53f99ffaa70040cc5a1b0429ed14de","source":{"kind":"arxiv","id":"2401.08476","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.08476","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"arxiv_version","alias_value":"2401.08476v2","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.08476","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"pith_short_12","alias_value":"ZB7MGQ2BOL7V","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"pith_short_16","alias_value":"ZB7MGQ2BOL7VDEID","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"pith_short_8","alias_value":"ZB7MGQ2B","created_at":"2026-07-05T09:09:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ZB7MGQ2BOL7VDEIDUUPOVSQADU","target":"record","payload":{"canonical_record":{"source":{"id":"2401.08476","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T16:27:30Z","cross_cats_sorted":["cs.SY","eess.SY"],"title_canon_sha256":"b5104e480bfb245eecacdfba9e63ee8ddae1d6e4cc61b4ef4822e46049f8eb9e","abstract_canon_sha256":"d32aa4f30c98edeec840af3f286cebe01b9dfabeda3cf05e3ba8991b4e6b2f0a"},"schema_version":"1.0"},"canonical_sha256":"c87ec3434172ff519103a51eeaca001d3d53f99ffaa70040cc5a1b0429ed14de","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:09:19.070180Z","signature_b64":"cvbbX788b9XkueOqp9jyCpe4o5Ls0rcSz7o0uN6tBmMF99sFJIsfOo/zlW7cvLC7uPp5HE5XoyBIZJ85Ts/GBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c87ec3434172ff519103a51eeaca001d3d53f99ffaa70040cc5a1b0429ed14de","last_reissued_at":"2026-07-05T09:09:19.069717Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:09:19.069717Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.08476","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:09:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HXhO8WYawIcxJS7gOIdHJqyu7bXRHCkuPZdS6KcnHzYYWjacs8KZT8rj/2K3mli9ToV4EynRrbrNm/jc1IW1AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:38:24.529767Z"},"content_sha256":"661f385bf2a5b1236ab85556d25fd0e5d2368ab9bd48f91f1c9ee3eddc194a01","schema_version":"1.0","event_id":"sha256:661f385bf2a5b1236ab85556d25fd0e5d2368ab9bd48f91f1c9ee3eddc194a01"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ZB7MGQ2BOL7VDEIDUUPOVSQADU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Incentivizing Secure Software Development: the Role of Voluntary Audit and Liability Waiver","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SY","eess.SY"],"primary_cat":"cs.CR","authors_text":"Gergely Bicz\\'ok, Mingyan Liu, Ziyuan Huang","submitted_at":"2024-01-16T16:27:30Z","abstract_excerpt":"Misaligned incentives in secure software development have long been the focus of research in the economics of security. Product liability, a powerful legal framework in other industries, has been largely ineffective for software products until recent times. However, the rapid regulatory responses to recent global cyber attacks by both the United States and the European Union, together with the (relative) success of the General Data Protection Regulation in defining both duty and standard of care for software vendors, may enable regulators to use liability to re-align incentives for the benefit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.08476","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.08476/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:09:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IMh7nowtmJ+doeZ8oVdeT39YGh5fOyFqISmNdzN17PSEy4mMSbNgyaaBUQOsGQH9IPdMovTJjJ1drrwsypzRAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:38:24.530274Z"},"content_sha256":"2e5cce2a267db2f58adb6246b0286e3590cb4389385aa490c7602c985b6a4353","schema_version":"1.0","event_id":"sha256:2e5cce2a267db2f58adb6246b0286e3590cb4389385aa490c7602c985b6a4353"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZB7MGQ2BOL7VDEIDUUPOVSQADU/bundle.json","state_url":"https://pith.science/pith/ZB7MGQ2BOL7VDEIDUUPOVSQADU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZB7MGQ2BOL7VDEIDUUPOVSQADU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:38:24Z","links":{"resolver":"https://pith.science/pith/ZB7MGQ2BOL7VDEIDUUPOVSQADU","bundle":"https://pith.science/pith/ZB7MGQ2BOL7VDEIDUUPOVSQADU/bundle.json","state":"https://pith.science/pith/ZB7MGQ2BOL7VDEIDUUPOVSQADU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZB7MGQ2BOL7VDEIDUUPOVSQADU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ZB7MGQ2BOL7VDEIDUUPOVSQADU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d32aa4f30c98edeec840af3f286cebe01b9dfabeda3cf05e3ba8991b4e6b2f0a","cross_cats_sorted":["cs.SY","eess.SY"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T16:27:30Z","title_canon_sha256":"b5104e480bfb245eecacdfba9e63ee8ddae1d6e4cc61b4ef4822e46049f8eb9e"},"schema_version":"1.0","source":{"id":"2401.08476","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.08476","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"arxiv_version","alias_value":"2401.08476v2","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.08476","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"pith_short_12","alias_value":"ZB7MGQ2BOL7V","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"pith_short_16","alias_value":"ZB7MGQ2BOL7VDEID","created_at":"2026-07-05T09:09:19Z"},{"alias_kind":"pith_short_8","alias_value":"ZB7MGQ2B","created_at":"2026-07-05T09:09:19Z"}],"graph_snapshots":[{"event_id":"sha256:2e5cce2a267db2f58adb6246b0286e3590cb4389385aa490c7602c985b6a4353","target":"graph","created_at":"2026-07-05T09:09:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.08476/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Misaligned incentives in secure software development have long been the focus of research in the economics of security. Product liability, a powerful legal framework in other industries, has been largely ineffective for software products until recent times. However, the rapid regulatory responses to recent global cyber attacks by both the United States and the European Union, together with the (relative) success of the General Data Protection Regulation in defining both duty and standard of care for software vendors, may enable regulators to use liability to re-align incentives for the benefit","authors_text":"Gergely Bicz\\'ok, Mingyan Liu, Ziyuan Huang","cross_cats":["cs.SY","eess.SY"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T16:27:30Z","title":"Incentivizing Secure Software Development: the Role of Voluntary Audit and Liability Waiver"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.08476","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:661f385bf2a5b1236ab85556d25fd0e5d2368ab9bd48f91f1c9ee3eddc194a01","target":"record","created_at":"2026-07-05T09:09:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d32aa4f30c98edeec840af3f286cebe01b9dfabeda3cf05e3ba8991b4e6b2f0a","cross_cats_sorted":["cs.SY","eess.SY"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T16:27:30Z","title_canon_sha256":"b5104e480bfb245eecacdfba9e63ee8ddae1d6e4cc61b4ef4822e46049f8eb9e"},"schema_version":"1.0","source":{"id":"2401.08476","kind":"arxiv","version":2}},"canonical_sha256":"c87ec3434172ff519103a51eeaca001d3d53f99ffaa70040cc5a1b0429ed14de","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c87ec3434172ff519103a51eeaca001d3d53f99ffaa70040cc5a1b0429ed14de","first_computed_at":"2026-07-05T09:09:19.069717Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:09:19.069717Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cvbbX788b9XkueOqp9jyCpe4o5Ls0rcSz7o0uN6tBmMF99sFJIsfOo/zlW7cvLC7uPp5HE5XoyBIZJ85Ts/GBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:09:19.070180Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.08476","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:661f385bf2a5b1236ab85556d25fd0e5d2368ab9bd48f91f1c9ee3eddc194a01","sha256:2e5cce2a267db2f58adb6246b0286e3590cb4389385aa490c7602c985b6a4353"],"state_sha256":"4d49c6e947b670ee67311a6b0ef11a8b4d5151cbd8928410bb27428a94501bce"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+UvIuEW6h22rdu3kz4BzInMLX76XB7QTTsq8vBCE3AlghfI/lQTQSzm/vgiKn9Zpp/erk8SQyq/zWyUm7bu+CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:38:24.534927Z","bundle_sha256":"985a273919bd37af186499975600aeaf1724bbb9a2b5f2e1db9deb9c0846f997"}}