{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:FLSUVQAYHCINHFVLGCUT3FXZG5","short_pith_number":"pith:FLSUVQAY","canonical_record":{"source":{"id":"2606.24438","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-23T11:16:33Z","cross_cats_sorted":[],"title_canon_sha256":"cfe354749c7a4c01d428c71d6fe43e21cc5d6b0954064765a8beed27a598e8d5","abstract_canon_sha256":"f421724c39aa60ba352d3b165133ce81a0afea2d285a474a53dc8530f76ac43e"},"schema_version":"1.0"},"canonical_sha256":"2ae54ac0183890d396ab30a93d96f93758b64039b6c073077e076e76f8c2f9f0","source":{"kind":"arxiv","id":"2606.24438","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.24438","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"arxiv_version","alias_value":"2606.24438v1","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.24438","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"pith_short_12","alias_value":"FLSUVQAYHCIN","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"pith_short_16","alias_value":"FLSUVQAYHCINHFVL","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"pith_short_8","alias_value":"FLSUVQAY","created_at":"2026-06-24T01:15:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:FLSUVQAYHCINHFVLGCUT3FXZG5","target":"record","payload":{"canonical_record":{"source":{"id":"2606.24438","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-23T11:16:33Z","cross_cats_sorted":[],"title_canon_sha256":"cfe354749c7a4c01d428c71d6fe43e21cc5d6b0954064765a8beed27a598e8d5","abstract_canon_sha256":"f421724c39aa60ba352d3b165133ce81a0afea2d285a474a53dc8530f76ac43e"},"schema_version":"1.0"},"canonical_sha256":"2ae54ac0183890d396ab30a93d96f93758b64039b6c073077e076e76f8c2f9f0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-24T01:15:30.393404Z","signature_b64":"br06Toz1VluXWtQmwA9G3Jq/hrrfb/cHJb/9567D+oXP4gqR10F9slhlj7mbmHbyzMxM1s/JuX5T0IijrTNoCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2ae54ac0183890d396ab30a93d96f93758b64039b6c073077e076e76f8c2f9f0","last_reissued_at":"2026-06-24T01:15:30.393051Z","signature_status":"signed_v1","first_computed_at":"2026-06-24T01:15:30.393051Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.24438","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T01:15:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+wCj4mP7rXDBF1DZIOsfK9sv9Y7EGSrjFW7rsnld9jscx3UcxN9icnuF64jep2XJoyBHWtOZACFApJbCG4IsBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T00:23:58.258000Z"},"content_sha256":"0de5446dd51a35bd7dbedbf1f1e7924044dff828ec9a9f1c92efd7dc498f5cbf","schema_version":"1.0","event_id":"sha256:0de5446dd51a35bd7dbedbf1f1e7924044dff828ec9a9f1c92efd7dc498f5cbf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:FLSUVQAYHCINHFVLGCUT3FXZG5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Comparison of Kubernetes Compliance Standards and Configuration Scanners","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Farooq Shaikh, Mario Kahlhofer, Markus Gierlinger, Michael Krieger","submitted_at":"2026-06-23T11:16:33Z","abstract_excerpt":"Kubernetes has become the industry standard for orchestrating containers in microservice-based software architectures. While several hardening guidelines and scanning tools for securing Kubernetes clusters and deployments have emerged in recent years, their differing guidance and outputs often lead to inconsistent configuration and prioritization decisions. This work presents a systematic comparison of eight commonly used Kubernetes hardening guidelines. Through this comparison and the inclusion of best practices, we established a benchmark of 79 Kubernetes configuration recommendations and co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.24438","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.24438/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T01:15:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WGGtXLZK3oIR8EF6PXfbvhT+RmB3kbDdIA/UVggj3T2/yKYfxLvm+usn55rSLunMOdjVddoe3n7Hgo1tSk3GCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T00:23:58.258379Z"},"content_sha256":"83f1cba322526c0754240852d5b0c38ce43106aabb7f3657c63b13646653c11a","schema_version":"1.0","event_id":"sha256:83f1cba322526c0754240852d5b0c38ce43106aabb7f3657c63b13646653c11a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FLSUVQAYHCINHFVLGCUT3FXZG5/bundle.json","state_url":"https://pith.science/pith/FLSUVQAYHCINHFVLGCUT3FXZG5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FLSUVQAYHCINHFVLGCUT3FXZG5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-28T00:23:58Z","links":{"resolver":"https://pith.science/pith/FLSUVQAYHCINHFVLGCUT3FXZG5","bundle":"https://pith.science/pith/FLSUVQAYHCINHFVLGCUT3FXZG5/bundle.json","state":"https://pith.science/pith/FLSUVQAYHCINHFVLGCUT3FXZG5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FLSUVQAYHCINHFVLGCUT3FXZG5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:FLSUVQAYHCINHFVLGCUT3FXZG5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f421724c39aa60ba352d3b165133ce81a0afea2d285a474a53dc8530f76ac43e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-23T11:16:33Z","title_canon_sha256":"cfe354749c7a4c01d428c71d6fe43e21cc5d6b0954064765a8beed27a598e8d5"},"schema_version":"1.0","source":{"id":"2606.24438","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.24438","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"arxiv_version","alias_value":"2606.24438v1","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.24438","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"pith_short_12","alias_value":"FLSUVQAYHCIN","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"pith_short_16","alias_value":"FLSUVQAYHCINHFVL","created_at":"2026-06-24T01:15:30Z"},{"alias_kind":"pith_short_8","alias_value":"FLSUVQAY","created_at":"2026-06-24T01:15:30Z"}],"graph_snapshots":[{"event_id":"sha256:83f1cba322526c0754240852d5b0c38ce43106aabb7f3657c63b13646653c11a","target":"graph","created_at":"2026-06-24T01:15:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.24438/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Kubernetes has become the industry standard for orchestrating containers in microservice-based software architectures. While several hardening guidelines and scanning tools for securing Kubernetes clusters and deployments have emerged in recent years, their differing guidance and outputs often lead to inconsistent configuration and prioritization decisions. This work presents a systematic comparison of eight commonly used Kubernetes hardening guidelines. Through this comparison and the inclusion of best practices, we established a benchmark of 79 Kubernetes configuration recommendations and co","authors_text":"Farooq Shaikh, Mario Kahlhofer, Markus Gierlinger, Michael Krieger","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-23T11:16:33Z","title":"A Comparison of Kubernetes Compliance Standards and Configuration Scanners"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.24438","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0de5446dd51a35bd7dbedbf1f1e7924044dff828ec9a9f1c92efd7dc498f5cbf","target":"record","created_at":"2026-06-24T01:15:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f421724c39aa60ba352d3b165133ce81a0afea2d285a474a53dc8530f76ac43e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-23T11:16:33Z","title_canon_sha256":"cfe354749c7a4c01d428c71d6fe43e21cc5d6b0954064765a8beed27a598e8d5"},"schema_version":"1.0","source":{"id":"2606.24438","kind":"arxiv","version":1}},"canonical_sha256":"2ae54ac0183890d396ab30a93d96f93758b64039b6c073077e076e76f8c2f9f0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2ae54ac0183890d396ab30a93d96f93758b64039b6c073077e076e76f8c2f9f0","first_computed_at":"2026-06-24T01:15:30.393051Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-24T01:15:30.393051Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"br06Toz1VluXWtQmwA9G3Jq/hrrfb/cHJb/9567D+oXP4gqR10F9slhlj7mbmHbyzMxM1s/JuX5T0IijrTNoCA==","signature_status":"signed_v1","signed_at":"2026-06-24T01:15:30.393404Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.24438","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0de5446dd51a35bd7dbedbf1f1e7924044dff828ec9a9f1c92efd7dc498f5cbf","sha256:83f1cba322526c0754240852d5b0c38ce43106aabb7f3657c63b13646653c11a"],"state_sha256":"5a630021568b4fbe337d4b209270be678ce6b0c687c08aa01cb54a09f50f2c12"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"41p5/q66mJGVI8ZZ1t6/ZKN3XOAXXQUWV+S68BZROe3veqin8oyIMaX3Uho9uhUUlXS6Pvp5bTLcfdga3+0DBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-28T00:23:58.260486Z","bundle_sha256":"e59e47a466cb8e60e37725ff7368955c6ac45914502a490b4635541362f275d6"}}