{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ZSHTGW4M2SZWAYRR2JDWX2E2WK","short_pith_number":"pith:ZSHTGW4M","canonical_record":{"source":{"id":"2509.01612","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-01T16:44:59Z","cross_cats_sorted":[],"title_canon_sha256":"b44a31e796f2736c706134272342a31d61a0067781ad60a78046b2a758cb8bef","abstract_canon_sha256":"131d4663d9eec5508da245eab05b9988d6938481831fd7ad7ca78af5f6784b3b"},"schema_version":"1.0"},"canonical_sha256":"cc8f335b8cd4b3606231d2476be89ab2af19bd5f55f7f80bf60fa9b6b1f65686","source":{"kind":"arxiv","id":"2509.01612","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.01612","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"arxiv_version","alias_value":"2509.01612v1","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.01612","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"pith_short_12","alias_value":"ZSHTGW4M2SZW","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"pith_short_16","alias_value":"ZSHTGW4M2SZWAYRR","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"pith_short_8","alias_value":"ZSHTGW4M","created_at":"2026-07-05T12:03:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ZSHTGW4M2SZWAYRR2JDWX2E2WK","target":"record","payload":{"canonical_record":{"source":{"id":"2509.01612","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-01T16:44:59Z","cross_cats_sorted":[],"title_canon_sha256":"b44a31e796f2736c706134272342a31d61a0067781ad60a78046b2a758cb8bef","abstract_canon_sha256":"131d4663d9eec5508da245eab05b9988d6938481831fd7ad7ca78af5f6784b3b"},"schema_version":"1.0"},"canonical_sha256":"cc8f335b8cd4b3606231d2476be89ab2af19bd5f55f7f80bf60fa9b6b1f65686","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:03:04.513894Z","signature_b64":"2+VgZsasx3hFgsOVkG8/wUFkyw5vKr2YhV2QIl4Q2LayCSBzpMTetZRpS4jh5eW8fmRM+3ALOqzLv5A7W8twAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cc8f335b8cd4b3606231d2476be89ab2af19bd5f55f7f80bf60fa9b6b1f65686","last_reissued_at":"2026-07-05T12:03:04.513328Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:03:04.513328Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.01612","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:03:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UlsTGhuYXV164yx93sXN9klVhguQgQqMJ0p1uFFHYlHdHvjROLEq4ujD+MyctUnANOj4b6Z7R8HPWl/SF6o+DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T00:20:41.711783Z"},"content_sha256":"f5fb1a4a6cf6464c2ef83514d0ceec6bff2e11e54d2d2477eace2ccc60e3c75b","schema_version":"1.0","event_id":"sha256:f5fb1a4a6cf6464c2ef83514d0ceec6bff2e11e54d2d2477eace2ccc60e3c75b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ZSHTGW4M2SZWAYRR2JDWX2E2WK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Andrea Arcuri, Man Zhang, Omur Sahin","submitted_at":"2025-09-01T16:44:59Z","abstract_excerpt":"Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the last few years. However, there are three major issues that hinder further progress: how to deal with API authentication; how to catalog and compare different fault types found by different fuzzers; and what to use as case study to facilitate fair comparisons among fuzzers. To address these important challenges, we present Web Fuzzing Commons (WFC) and Web Fuzzing Dataset (WFD). WFC is a set of open-source libraries and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.01612","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.01612/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:03:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dY5OV9ucAumpozaJlsdJtpUKH6mZbkqw4qd7kvVww7qBeqJwCyWm+MxGdA4WC/ldOCdfv0mNps403unfg4R1Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T00:20:41.712199Z"},"content_sha256":"1f08f0ba192ebdf7bbc92d9e22bd3a2f3fc8118538d6d75d3c58270a52756f3e","schema_version":"1.0","event_id":"sha256:1f08f0ba192ebdf7bbc92d9e22bd3a2f3fc8118538d6d75d3c58270a52756f3e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/bundle.json","state_url":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T00:20:41Z","links":{"resolver":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK","bundle":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/bundle.json","state":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ZSHTGW4M2SZWAYRR2JDWX2E2WK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"131d4663d9eec5508da245eab05b9988d6938481831fd7ad7ca78af5f6784b3b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-01T16:44:59Z","title_canon_sha256":"b44a31e796f2736c706134272342a31d61a0067781ad60a78046b2a758cb8bef"},"schema_version":"1.0","source":{"id":"2509.01612","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.01612","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"arxiv_version","alias_value":"2509.01612v1","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.01612","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"pith_short_12","alias_value":"ZSHTGW4M2SZW","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"pith_short_16","alias_value":"ZSHTGW4M2SZWAYRR","created_at":"2026-07-05T12:03:04Z"},{"alias_kind":"pith_short_8","alias_value":"ZSHTGW4M","created_at":"2026-07-05T12:03:04Z"}],"graph_snapshots":[{"event_id":"sha256:1f08f0ba192ebdf7bbc92d9e22bd3a2f3fc8118538d6d75d3c58270a52756f3e","target":"graph","created_at":"2026-07-05T12:03:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.01612/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the last few years. However, there are three major issues that hinder further progress: how to deal with API authentication; how to catalog and compare different fault types found by different fuzzers; and what to use as case study to facilitate fair comparisons among fuzzers. To address these important challenges, we present Web Fuzzing Commons (WFC) and Web Fuzzing Dataset (WFD). WFC is a set of open-source libraries and","authors_text":"Andrea Arcuri, Man Zhang, Omur Sahin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-01T16:44:59Z","title":"WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.01612","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f5fb1a4a6cf6464c2ef83514d0ceec6bff2e11e54d2d2477eace2ccc60e3c75b","target":"record","created_at":"2026-07-05T12:03:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"131d4663d9eec5508da245eab05b9988d6938481831fd7ad7ca78af5f6784b3b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-01T16:44:59Z","title_canon_sha256":"b44a31e796f2736c706134272342a31d61a0067781ad60a78046b2a758cb8bef"},"schema_version":"1.0","source":{"id":"2509.01612","kind":"arxiv","version":1}},"canonical_sha256":"cc8f335b8cd4b3606231d2476be89ab2af19bd5f55f7f80bf60fa9b6b1f65686","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cc8f335b8cd4b3606231d2476be89ab2af19bd5f55f7f80bf60fa9b6b1f65686","first_computed_at":"2026-07-05T12:03:04.513328Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:03:04.513328Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2+VgZsasx3hFgsOVkG8/wUFkyw5vKr2YhV2QIl4Q2LayCSBzpMTetZRpS4jh5eW8fmRM+3ALOqzLv5A7W8twAA==","signature_status":"signed_v1","signed_at":"2026-07-05T12:03:04.513894Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.01612","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f5fb1a4a6cf6464c2ef83514d0ceec6bff2e11e54d2d2477eace2ccc60e3c75b","sha256:1f08f0ba192ebdf7bbc92d9e22bd3a2f3fc8118538d6d75d3c58270a52756f3e"],"state_sha256":"100eb4f669d97b7ba012f91df8dd26f634e31644bb4c22b937c9af2e889c4377"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+0Y6w6a/pEwQk6pUdSHfqSVJMTN509/V9TrokAVGLcdKhb5cYHK7CQexFjxWwmPAAR/K09aIKzWEyxSZ3rTLCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T00:20:41.715775Z","bundle_sha256":"92e4d394eeae82a303eb8bc46584c78f1562dc591aafbfb85a796a217ca240ef"}}