{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BCBBJZBN3QEF3GYVUTCO5VOFVZ","short_pith_number":"pith:BCBBJZBN","canonical_record":{"source":{"id":"2405.06074","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-09T19:57:59Z","cross_cats_sorted":["cs.NI","cs.PL"],"title_canon_sha256":"743ee81f923a65f0e878371ede351b19ee06d02d134c43e7bd2eefebda93aff3","abstract_canon_sha256":"b344f1e21d133e20eb0b01556d3218d341a5cdc550543a0d25315f1d3d361d58"},"schema_version":"1.0"},"canonical_sha256":"088214e42ddc085d9b15a4c4eed5c5ae6950e575c037a8a6ec5de28bcb6b296e","source":{"kind":"arxiv","id":"2405.06074","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06074","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06074v1","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06074","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"pith_short_12","alias_value":"BCBBJZBN3QEF","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"pith_short_16","alias_value":"BCBBJZBN3QEF3GYV","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"pith_short_8","alias_value":"BCBBJZBN","created_at":"2026-07-05T08:17:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BCBBJZBN3QEF3GYVUTCO5VOFVZ","target":"record","payload":{"canonical_record":{"source":{"id":"2405.06074","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-09T19:57:59Z","cross_cats_sorted":["cs.NI","cs.PL"],"title_canon_sha256":"743ee81f923a65f0e878371ede351b19ee06d02d134c43e7bd2eefebda93aff3","abstract_canon_sha256":"b344f1e21d133e20eb0b01556d3218d341a5cdc550543a0d25315f1d3d361d58"},"schema_version":"1.0"},"canonical_sha256":"088214e42ddc085d9b15a4c4eed5c5ae6950e575c037a8a6ec5de28bcb6b296e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:17:35.018226Z","signature_b64":"mdfonopWsn04Tyfpxv8BEuJXkwVtIYXKrv0ujSTxFsYmCEKpVcuKUtmfg0Fu6UH4oiUcM5x7+n/hJ+ysZefDBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"088214e42ddc085d9b15a4c4eed5c5ae6950e575c037a8a6ec5de28bcb6b296e","last_reissued_at":"2026-07-05T08:17:35.017821Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:17:35.017821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.06074","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:17:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LV11APMuxkER/0Vuz2uAPAqMNqCJ9Ocq7Y8TBK5Qi7UeqcEInmENbI7siGLTRc6Y5aEeITNB54S/auizkkedBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:52:27.682619Z"},"content_sha256":"d8258c569f962249a7053648f95e200bd16a58a57754de475f8a5c884f0dc838","schema_version":"1.0","event_id":"sha256:d8258c569f962249a7053648f95e200bd16a58a57754de475f8a5c884f0dc838"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BCBBJZBN3QEF3GYVUTCO5VOFVZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Protocols to Code: Formal Verification of a Next-Generation Internet Router","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NI","cs.PL"],"primary_cat":"cs.CR","authors_text":"Adrian Perrig, Christoph Sprenger, David Basin, Dionysios Spiliopoulos, Felix A. Wolf, Jo\\~ao C. Pereira, Marco Eilers, Markus Limbeck, Peter M\\\"uller, Sofia Giampietro, Tobias Klenze","submitted_at":"2024-05-09T19:57:59Z","abstract_excerpt":"We present the first formally-verified Internet router, which is part of the SCION Internet architecture. SCION routers run a cryptographic protocol for secure packet forwarding in an adversarial environment. We verify both the protocol's network-wide security properties and low-level properties of its implementation. More precisely, we develop a series of protocol models by refinement in Isabelle/HOL and we use an automated program verifier to prove that the router's Go code satisfies memory safety, crash freedom, freedom from data races, and adheres to the protocol model. Both verification e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06074","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.06074/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:17:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YhQG7EwbAfdjZe+mQncNn9kUGm4zfZnlN01ft6IcI5YDqHyGXw039Y6TXPAzPGc5twtT2ARKWm02/ol5hXb9BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:52:27.683026Z"},"content_sha256":"b5baf32bf06241e9c2abb64cf5d7f5cdc81d203720e0460b990e81a1aca8be16","schema_version":"1.0","event_id":"sha256:b5baf32bf06241e9c2abb64cf5d7f5cdc81d203720e0460b990e81a1aca8be16"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BCBBJZBN3QEF3GYVUTCO5VOFVZ/bundle.json","state_url":"https://pith.science/pith/BCBBJZBN3QEF3GYVUTCO5VOFVZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BCBBJZBN3QEF3GYVUTCO5VOFVZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:52:27Z","links":{"resolver":"https://pith.science/pith/BCBBJZBN3QEF3GYVUTCO5VOFVZ","bundle":"https://pith.science/pith/BCBBJZBN3QEF3GYVUTCO5VOFVZ/bundle.json","state":"https://pith.science/pith/BCBBJZBN3QEF3GYVUTCO5VOFVZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BCBBJZBN3QEF3GYVUTCO5VOFVZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BCBBJZBN3QEF3GYVUTCO5VOFVZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b344f1e21d133e20eb0b01556d3218d341a5cdc550543a0d25315f1d3d361d58","cross_cats_sorted":["cs.NI","cs.PL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-09T19:57:59Z","title_canon_sha256":"743ee81f923a65f0e878371ede351b19ee06d02d134c43e7bd2eefebda93aff3"},"schema_version":"1.0","source":{"id":"2405.06074","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06074","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06074v1","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06074","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"pith_short_12","alias_value":"BCBBJZBN3QEF","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"pith_short_16","alias_value":"BCBBJZBN3QEF3GYV","created_at":"2026-07-05T08:17:35Z"},{"alias_kind":"pith_short_8","alias_value":"BCBBJZBN","created_at":"2026-07-05T08:17:35Z"}],"graph_snapshots":[{"event_id":"sha256:b5baf32bf06241e9c2abb64cf5d7f5cdc81d203720e0460b990e81a1aca8be16","target":"graph","created_at":"2026-07-05T08:17:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.06074/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present the first formally-verified Internet router, which is part of the SCION Internet architecture. SCION routers run a cryptographic protocol for secure packet forwarding in an adversarial environment. We verify both the protocol's network-wide security properties and low-level properties of its implementation. More precisely, we develop a series of protocol models by refinement in Isabelle/HOL and we use an automated program verifier to prove that the router's Go code satisfies memory safety, crash freedom, freedom from data races, and adheres to the protocol model. Both verification e","authors_text":"Adrian Perrig, Christoph Sprenger, David Basin, Dionysios Spiliopoulos, Felix A. Wolf, Jo\\~ao C. Pereira, Marco Eilers, Markus Limbeck, Peter M\\\"uller, Sofia Giampietro, Tobias Klenze","cross_cats":["cs.NI","cs.PL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-09T19:57:59Z","title":"Protocols to Code: Formal Verification of a Next-Generation Internet Router"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06074","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d8258c569f962249a7053648f95e200bd16a58a57754de475f8a5c884f0dc838","target":"record","created_at":"2026-07-05T08:17:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b344f1e21d133e20eb0b01556d3218d341a5cdc550543a0d25315f1d3d361d58","cross_cats_sorted":["cs.NI","cs.PL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-09T19:57:59Z","title_canon_sha256":"743ee81f923a65f0e878371ede351b19ee06d02d134c43e7bd2eefebda93aff3"},"schema_version":"1.0","source":{"id":"2405.06074","kind":"arxiv","version":1}},"canonical_sha256":"088214e42ddc085d9b15a4c4eed5c5ae6950e575c037a8a6ec5de28bcb6b296e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"088214e42ddc085d9b15a4c4eed5c5ae6950e575c037a8a6ec5de28bcb6b296e","first_computed_at":"2026-07-05T08:17:35.017821Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:17:35.017821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mdfonopWsn04Tyfpxv8BEuJXkwVtIYXKrv0ujSTxFsYmCEKpVcuKUtmfg0Fu6UH4oiUcM5x7+n/hJ+ysZefDBw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:17:35.018226Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.06074","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d8258c569f962249a7053648f95e200bd16a58a57754de475f8a5c884f0dc838","sha256:b5baf32bf06241e9c2abb64cf5d7f5cdc81d203720e0460b990e81a1aca8be16"],"state_sha256":"f7018b0fa8172d43db409d0c72a9fd2bb9647648a9176b5d285a3fe870e13e12"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ROUDVtWT9KGcA/Two4gh6v4qggKWfr7O4FxyXa2DBzt/VK9nYCp2IWTFc5olL2K/X3p4T5dGKUgW1lUeg0yrAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:52:27.686419Z","bundle_sha256":"a906871f70ae66b1cd6494eea21888c4e91f6fdc616cd3f51a6b975c13f37c01"}}