{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:ZDF7DUXUS6K64XWYZTFCTTHPWA","short_pith_number":"pith:ZDF7DUXU","canonical_record":{"source":{"id":"2606.04104","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-02T18:10:35Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"7714fc079f4fa3ddc547583076f9e79e7f4490fec91e11d2dece0cef36e23aa2","abstract_canon_sha256":"ec81f1b31a22ea84b5d37280140b9a95315ad889da4ce30de8653e0d86db54c4"},"schema_version":"1.0"},"canonical_sha256":"c8cbf1d2f49795ee5ed8ccca29ccefb03f9bd747e47f5548d92f801a45b906a1","source":{"kind":"arxiv","id":"2606.04104","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.04104","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"arxiv_version","alias_value":"2606.04104v1","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.04104","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"pith_short_12","alias_value":"ZDF7DUXUS6K6","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"pith_short_16","alias_value":"ZDF7DUXUS6K64XWY","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"pith_short_8","alias_value":"ZDF7DUXU","created_at":"2026-06-04T00:06:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:ZDF7DUXUS6K64XWYZTFCTTHPWA","target":"record","payload":{"canonical_record":{"source":{"id":"2606.04104","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-02T18:10:35Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"7714fc079f4fa3ddc547583076f9e79e7f4490fec91e11d2dece0cef36e23aa2","abstract_canon_sha256":"ec81f1b31a22ea84b5d37280140b9a95315ad889da4ce30de8653e0d86db54c4"},"schema_version":"1.0"},"canonical_sha256":"c8cbf1d2f49795ee5ed8ccca29ccefb03f9bd747e47f5548d92f801a45b906a1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-04T00:06:46.790036Z","signature_b64":"dCBKnijOFAq3DINjDFU02R/b7LoGa6JXqj71TcPCRPU0zv0oXCCzbga1lHl5ilOc6DwgsMNaQNPgl407FT1rBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c8cbf1d2f49795ee5ed8ccca29ccefb03f9bd747e47f5548d92f801a45b906a1","last_reissued_at":"2026-06-04T00:06:46.789691Z","signature_status":"signed_v1","first_computed_at":"2026-06-04T00:06:46.789691Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.04104","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-04T00:06:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"orwufuE3Yx2grFpwp/EwI+phPRee9Ll3YkHkcCXTK7yYS9c7ljjyHTr5sB+C403Fp+lRIy08jvx1J3520q8qBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-23T09:07:05.747716Z"},"content_sha256":"94521b54a7c9c70a4a664810d6c284f8d4fa3726952de6f92fbb2c8bc059b4cf","schema_version":"1.0","event_id":"sha256:94521b54a7c9c70a4a664810d6c284f8d4fa3726952de6f92fbb2c8bc059b4cf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:ZDF7DUXUS6K64XWYZTFCTTHPWA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Proof-Carrying Agent Actions: Model-Agnostic Runtime Governance for Heterogeneous Agent Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.SE","authors_text":"Zexun Wang","submitted_at":"2026-06-02T18:10:35Z","abstract_excerpt":"Agent systems execute through runtimes with very different control points: local coding tools, framework SDKs, managed agent platforms, API gateways, and observer-only integrations. A high-risk action such as publishing data externally may therefore appear as a shell command in one runtime, a tool call in another, and a hosted session transition in a third. This makes it difficult to answer a basic governance question consistently: what action was authorized, under whose authority, with what approval semantics, and with what evidence after execution?\n  This paper presents Proof-Carrying Agent "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.04104","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.04104/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-04T00:06:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M3WENLENCtPV6aP1VM+1INu17MvDLJUePxpewTx7WGG/vXid5i0SbqimvEQktAX1A4IOiws+0obEgWEONKsoDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-23T09:07:05.748086Z"},"content_sha256":"1bf082a3676b04b048d7d4c1f746cad79d5fd15d3aa31a1101024400b3ff3300","schema_version":"1.0","event_id":"sha256:1bf082a3676b04b048d7d4c1f746cad79d5fd15d3aa31a1101024400b3ff3300"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZDF7DUXUS6K64XWYZTFCTTHPWA/bundle.json","state_url":"https://pith.science/pith/ZDF7DUXUS6K64XWYZTFCTTHPWA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZDF7DUXUS6K64XWYZTFCTTHPWA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-23T09:07:05Z","links":{"resolver":"https://pith.science/pith/ZDF7DUXUS6K64XWYZTFCTTHPWA","bundle":"https://pith.science/pith/ZDF7DUXUS6K64XWYZTFCTTHPWA/bundle.json","state":"https://pith.science/pith/ZDF7DUXUS6K64XWYZTFCTTHPWA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZDF7DUXUS6K64XWYZTFCTTHPWA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:ZDF7DUXUS6K64XWYZTFCTTHPWA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ec81f1b31a22ea84b5d37280140b9a95315ad889da4ce30de8653e0d86db54c4","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-02T18:10:35Z","title_canon_sha256":"7714fc079f4fa3ddc547583076f9e79e7f4490fec91e11d2dece0cef36e23aa2"},"schema_version":"1.0","source":{"id":"2606.04104","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.04104","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"arxiv_version","alias_value":"2606.04104v1","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.04104","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"pith_short_12","alias_value":"ZDF7DUXUS6K6","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"pith_short_16","alias_value":"ZDF7DUXUS6K64XWY","created_at":"2026-06-04T00:06:46Z"},{"alias_kind":"pith_short_8","alias_value":"ZDF7DUXU","created_at":"2026-06-04T00:06:46Z"}],"graph_snapshots":[{"event_id":"sha256:1bf082a3676b04b048d7d4c1f746cad79d5fd15d3aa31a1101024400b3ff3300","target":"graph","created_at":"2026-06-04T00:06:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.04104/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Agent systems execute through runtimes with very different control points: local coding tools, framework SDKs, managed agent platforms, API gateways, and observer-only integrations. A high-risk action such as publishing data externally may therefore appear as a shell command in one runtime, a tool call in another, and a hosted session transition in a third. This makes it difficult to answer a basic governance question consistently: what action was authorized, under whose authority, with what approval semantics, and with what evidence after execution?\n  This paper presents Proof-Carrying Agent ","authors_text":"Zexun Wang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-02T18:10:35Z","title":"Proof-Carrying Agent Actions: Model-Agnostic Runtime Governance for Heterogeneous Agent Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.04104","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:94521b54a7c9c70a4a664810d6c284f8d4fa3726952de6f92fbb2c8bc059b4cf","target":"record","created_at":"2026-06-04T00:06:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ec81f1b31a22ea84b5d37280140b9a95315ad889da4ce30de8653e0d86db54c4","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-02T18:10:35Z","title_canon_sha256":"7714fc079f4fa3ddc547583076f9e79e7f4490fec91e11d2dece0cef36e23aa2"},"schema_version":"1.0","source":{"id":"2606.04104","kind":"arxiv","version":1}},"canonical_sha256":"c8cbf1d2f49795ee5ed8ccca29ccefb03f9bd747e47f5548d92f801a45b906a1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c8cbf1d2f49795ee5ed8ccca29ccefb03f9bd747e47f5548d92f801a45b906a1","first_computed_at":"2026-06-04T00:06:46.789691Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-04T00:06:46.789691Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dCBKnijOFAq3DINjDFU02R/b7LoGa6JXqj71TcPCRPU0zv0oXCCzbga1lHl5ilOc6DwgsMNaQNPgl407FT1rBQ==","signature_status":"signed_v1","signed_at":"2026-06-04T00:06:46.790036Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.04104","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:94521b54a7c9c70a4a664810d6c284f8d4fa3726952de6f92fbb2c8bc059b4cf","sha256:1bf082a3676b04b048d7d4c1f746cad79d5fd15d3aa31a1101024400b3ff3300"],"state_sha256":"11a8227acbb1e3619792e8dce6d6c59f723830121aada6e7545fb39e8f16f9b0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DY0Wc2Gz67Lh4kG6NM63RxbFdglu/rGi4Zo02tf2aaVVLNT2VB/2LjCht6cV4PDku5FvduvgfkL+UAm7hIYvDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-23T09:07:05.750573Z","bundle_sha256":"e48873aa46ce6db755aa0356d6aa64f0d089e7fc2711bdd4d5519d7ac77f3590"}}