{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ZBXWHQG6YVHZM3CCNYAW42P2PC","short_pith_number":"pith:ZBXWHQG6","canonical_record":{"source":{"id":"2108.07509","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-08-17T08:51:45Z","cross_cats_sorted":[],"title_canon_sha256":"29eebb47b8e5ae6719a027bbc444eb3cc107fbcfadde740f782b96446c22d9ac","abstract_canon_sha256":"44593ed8d3229d09b145047cd9c41fe07d28b67b427c010ea6f53f13e3612b9e"},"schema_version":"1.0"},"canonical_sha256":"c86f63c0dec54f966c426e016e69fa78ad1a7a22655a39ad25574d5bfbec79b6","source":{"kind":"arxiv","id":"2108.07509","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.07509","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"arxiv_version","alias_value":"2108.07509v1","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.07509","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"pith_short_12","alias_value":"ZBXWHQG6YVHZ","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"pith_short_16","alias_value":"ZBXWHQG6YVHZM3CC","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"pith_short_8","alias_value":"ZBXWHQG6","created_at":"2026-07-05T03:06:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ZBXWHQG6YVHZM3CCNYAW42P2PC","target":"record","payload":{"canonical_record":{"source":{"id":"2108.07509","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-08-17T08:51:45Z","cross_cats_sorted":[],"title_canon_sha256":"29eebb47b8e5ae6719a027bbc444eb3cc107fbcfadde740f782b96446c22d9ac","abstract_canon_sha256":"44593ed8d3229d09b145047cd9c41fe07d28b67b427c010ea6f53f13e3612b9e"},"schema_version":"1.0"},"canonical_sha256":"c86f63c0dec54f966c426e016e69fa78ad1a7a22655a39ad25574d5bfbec79b6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:06:39.734469Z","signature_b64":"uMQJR/XnB/t3B6SQkuk2LivB+Jd3AKlZ7N5k907Hsuc8t2ru7mPOh5J1kWb7AFppbDjmtwy9uwSZ8brakPztAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c86f63c0dec54f966c426e016e69fa78ad1a7a22655a39ad25574d5bfbec79b6","last_reissued_at":"2026-07-05T03:06:39.734038Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:06:39.734038Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.07509","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:06:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w4STm7p51b8CU1RdDHfo8AOWcu+gXoa+nRLgTn2DZcpCweHCNwFddbvuaoA+EnLqkZJNVkvLPYDwnLJ7ecSBAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T01:15:08.894022Z"},"content_sha256":"c0bff7dd7bc280e66d642fc3e97ca0e92b74c9ec8a5a440b14e0c79f75175e8f","schema_version":"1.0","event_id":"sha256:c0bff7dd7bc280e66d642fc3e97ca0e92b74c9ec8a5a440b14e0c79f75175e8f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ZBXWHQG6YVHZM3CCNYAW42P2PC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robustifying Controller Specifications of Cyber-Physical Systems Against Perceptual Uncertainty","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Fuyuki Ishikawa, Ichiro Hasuo, Krzysztof Czarnecki, Rick Salay, Shin-ya Katsumata, Tsutomu Kobayashi","submitted_at":"2021-08-17T08:51:45Z","abstract_excerpt":"Formal reasoning on the safety of controller systems interacting with plants is complex because developers need to specify behavior while taking into account perceptual uncertainty. To address this, we propose an automated workflow that takes an Event-B model of an uncertainty-unaware controller and a specification of uncertainty as input. First, our workflow automatically injects the uncertainty into the original model to obtain an uncertainty-aware but potentially unsafe controller. Then, it automatically robustifies the controller so that it satisfies safety even under the uncertainty. The "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.07509","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.07509/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:06:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KzPvLKEcYRRIGgYGdNUtpdMfFePRgFcsnkoLLC7San5T5VkVHg/BsTBOR2slCd2g1yQte4/KCR77Oos465HJCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T01:15:08.894415Z"},"content_sha256":"44bf3d67b8f24f8cd125e2755fb382ac202624849be78694807b0190ad46ffce","schema_version":"1.0","event_id":"sha256:44bf3d67b8f24f8cd125e2755fb382ac202624849be78694807b0190ad46ffce"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZBXWHQG6YVHZM3CCNYAW42P2PC/bundle.json","state_url":"https://pith.science/pith/ZBXWHQG6YVHZM3CCNYAW42P2PC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZBXWHQG6YVHZM3CCNYAW42P2PC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T01:15:08Z","links":{"resolver":"https://pith.science/pith/ZBXWHQG6YVHZM3CCNYAW42P2PC","bundle":"https://pith.science/pith/ZBXWHQG6YVHZM3CCNYAW42P2PC/bundle.json","state":"https://pith.science/pith/ZBXWHQG6YVHZM3CCNYAW42P2PC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZBXWHQG6YVHZM3CCNYAW42P2PC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ZBXWHQG6YVHZM3CCNYAW42P2PC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"44593ed8d3229d09b145047cd9c41fe07d28b67b427c010ea6f53f13e3612b9e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-08-17T08:51:45Z","title_canon_sha256":"29eebb47b8e5ae6719a027bbc444eb3cc107fbcfadde740f782b96446c22d9ac"},"schema_version":"1.0","source":{"id":"2108.07509","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.07509","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"arxiv_version","alias_value":"2108.07509v1","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.07509","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"pith_short_12","alias_value":"ZBXWHQG6YVHZ","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"pith_short_16","alias_value":"ZBXWHQG6YVHZM3CC","created_at":"2026-07-05T03:06:39Z"},{"alias_kind":"pith_short_8","alias_value":"ZBXWHQG6","created_at":"2026-07-05T03:06:39Z"}],"graph_snapshots":[{"event_id":"sha256:44bf3d67b8f24f8cd125e2755fb382ac202624849be78694807b0190ad46ffce","target":"graph","created_at":"2026-07-05T03:06:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.07509/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Formal reasoning on the safety of controller systems interacting with plants is complex because developers need to specify behavior while taking into account perceptual uncertainty. To address this, we propose an automated workflow that takes an Event-B model of an uncertainty-unaware controller and a specification of uncertainty as input. First, our workflow automatically injects the uncertainty into the original model to obtain an uncertainty-aware but potentially unsafe controller. Then, it automatically robustifies the controller so that it satisfies safety even under the uncertainty. The ","authors_text":"Fuyuki Ishikawa, Ichiro Hasuo, Krzysztof Czarnecki, Rick Salay, Shin-ya Katsumata, Tsutomu Kobayashi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-08-17T08:51:45Z","title":"Robustifying Controller Specifications of Cyber-Physical Systems Against Perceptual Uncertainty"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.07509","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c0bff7dd7bc280e66d642fc3e97ca0e92b74c9ec8a5a440b14e0c79f75175e8f","target":"record","created_at":"2026-07-05T03:06:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"44593ed8d3229d09b145047cd9c41fe07d28b67b427c010ea6f53f13e3612b9e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-08-17T08:51:45Z","title_canon_sha256":"29eebb47b8e5ae6719a027bbc444eb3cc107fbcfadde740f782b96446c22d9ac"},"schema_version":"1.0","source":{"id":"2108.07509","kind":"arxiv","version":1}},"canonical_sha256":"c86f63c0dec54f966c426e016e69fa78ad1a7a22655a39ad25574d5bfbec79b6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c86f63c0dec54f966c426e016e69fa78ad1a7a22655a39ad25574d5bfbec79b6","first_computed_at":"2026-07-05T03:06:39.734038Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:06:39.734038Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uMQJR/XnB/t3B6SQkuk2LivB+Jd3AKlZ7N5k907Hsuc8t2ru7mPOh5J1kWb7AFppbDjmtwy9uwSZ8brakPztAA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:06:39.734469Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.07509","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c0bff7dd7bc280e66d642fc3e97ca0e92b74c9ec8a5a440b14e0c79f75175e8f","sha256:44bf3d67b8f24f8cd125e2755fb382ac202624849be78694807b0190ad46ffce"],"state_sha256":"0f94acbd95aa4e09876b8e8d460c94338aeccb262988df34e0e4b1c1b22ec07c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nNmCzafqTQLa9zGVL8PFGma2K2qwKCojpq9HWEWv/oLbvsl4N52ed0lG0bD0Z8v0V2DXoWW5FDlg756ud2qwBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T01:15:08.898100Z","bundle_sha256":"3b207720a197eb799b6b9295282bc104665e6bf36e89f3578fb9cede25931c5c"}}