{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:I2LOKZN4XC4CTDBBXQMVI4T25K","short_pith_number":"pith:I2LOKZN4","canonical_record":{"source":{"id":"2606.21276","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2026-06-19T09:50:04Z","cross_cats_sorted":[],"title_canon_sha256":"1cb2a5a53f70aeef0f93159255b0cd5f30f4b4705ff6a022fc31a7dd9b080abf","abstract_canon_sha256":"521b2116138713608ea9d0c2b46334f0d56c4beb301e483229ac0df1ae6cf12f"},"schema_version":"1.0"},"canonical_sha256":"4696e565bcb8b8298c21bc1954727aeab2c8cfd86d0859e1d759e640e655a7bf","source":{"kind":"arxiv","id":"2606.21276","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.21276","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"arxiv_version","alias_value":"2606.21276v1","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21276","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"pith_short_12","alias_value":"I2LOKZN4XC4C","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"pith_short_16","alias_value":"I2LOKZN4XC4CTDBB","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"pith_short_8","alias_value":"I2LOKZN4","created_at":"2026-06-23T01:12:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:I2LOKZN4XC4CTDBBXQMVI4T25K","target":"record","payload":{"canonical_record":{"source":{"id":"2606.21276","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2026-06-19T09:50:04Z","cross_cats_sorted":[],"title_canon_sha256":"1cb2a5a53f70aeef0f93159255b0cd5f30f4b4705ff6a022fc31a7dd9b080abf","abstract_canon_sha256":"521b2116138713608ea9d0c2b46334f0d56c4beb301e483229ac0df1ae6cf12f"},"schema_version":"1.0"},"canonical_sha256":"4696e565bcb8b8298c21bc1954727aeab2c8cfd86d0859e1d759e640e655a7bf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-23T01:12:35.658721Z","signature_b64":"TbhnCX9bn2bvFfbluINlqAUujzMb/YGZ30zi9hYykv1oSISMrWT6XOZFqRRpHVYM+eW9v+CAXfQVgVg199noDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4696e565bcb8b8298c21bc1954727aeab2c8cfd86d0859e1d759e640e655a7bf","last_reissued_at":"2026-06-23T01:12:35.658275Z","signature_status":"signed_v1","first_computed_at":"2026-06-23T01:12:35.658275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.21276","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:12:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y+aEHnNbkmlcw6Waw95DVC29g5h//Plke7Z0UVMlA4PEj6MlUhGXg7Vh++8ccXXOGlEK6+GSlbtstPvW5NiLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-26T20:33:45.901042Z"},"content_sha256":"90185965fee6a0aaf80cc4701266becad26dc1508bf734bae53c00a585d34d3a","schema_version":"1.0","event_id":"sha256:90185965fee6a0aaf80cc4701266becad26dc1508bf734bae53c00a585d34d3a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:I2LOKZN4XC4CTDBBXQMVI4T25K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CEDAR-42001: From ISO/IEC 42001 Conformity to Architecture-Aware, Audit-Visible Assurance Posture for AI Cyber-Physical Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CY","authors_text":"Asaf Shabtai, Priyanka Prakash Surve, Yuval Elovici","submitted_at":"2026-06-19T09:50:04Z","abstract_excerpt":"AI-enabled cyber-physical systems (AI-CPS) turn data-driven decisions into physical actions, creating assurance challenges across sensing, computation, control, human oversight, and governance. ISO/IEC 42001:2023 specifies requirements for an artificial intelligence management system (AIMS), but conformity assessment alone does not show which architectural layers are affected, whether practices are mature enough for the risk context, or what actions should follow. We present CEDAR-42001 (Control-Evidence Decision and Action Reasoning), a two-stage method that converts ISO/IEC 42001 audit evide"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21276","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.21276/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:12:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XmrZ1BHS9rlUhvX7aJt4KVE0ZVco/9iV5xzJjeeDa56FGZ3asI8wTP1DNs/P72QP2BCi86A9TZN3SRu48l7pBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-26T20:33:45.901431Z"},"content_sha256":"4828a6de8feec309fc5ccc096f1481bd2f601a38bb1027509ca12daad44e6f11","schema_version":"1.0","event_id":"sha256:4828a6de8feec309fc5ccc096f1481bd2f601a38bb1027509ca12daad44e6f11"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I2LOKZN4XC4CTDBBXQMVI4T25K/bundle.json","state_url":"https://pith.science/pith/I2LOKZN4XC4CTDBBXQMVI4T25K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I2LOKZN4XC4CTDBBXQMVI4T25K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-26T20:33:45Z","links":{"resolver":"https://pith.science/pith/I2LOKZN4XC4CTDBBXQMVI4T25K","bundle":"https://pith.science/pith/I2LOKZN4XC4CTDBBXQMVI4T25K/bundle.json","state":"https://pith.science/pith/I2LOKZN4XC4CTDBBXQMVI4T25K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I2LOKZN4XC4CTDBBXQMVI4T25K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:I2LOKZN4XC4CTDBBXQMVI4T25K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"521b2116138713608ea9d0c2b46334f0d56c4beb301e483229ac0df1ae6cf12f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2026-06-19T09:50:04Z","title_canon_sha256":"1cb2a5a53f70aeef0f93159255b0cd5f30f4b4705ff6a022fc31a7dd9b080abf"},"schema_version":"1.0","source":{"id":"2606.21276","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.21276","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"arxiv_version","alias_value":"2606.21276v1","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21276","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"pith_short_12","alias_value":"I2LOKZN4XC4C","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"pith_short_16","alias_value":"I2LOKZN4XC4CTDBB","created_at":"2026-06-23T01:12:35Z"},{"alias_kind":"pith_short_8","alias_value":"I2LOKZN4","created_at":"2026-06-23T01:12:35Z"}],"graph_snapshots":[{"event_id":"sha256:4828a6de8feec309fc5ccc096f1481bd2f601a38bb1027509ca12daad44e6f11","target":"graph","created_at":"2026-06-23T01:12:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.21276/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI-enabled cyber-physical systems (AI-CPS) turn data-driven decisions into physical actions, creating assurance challenges across sensing, computation, control, human oversight, and governance. ISO/IEC 42001:2023 specifies requirements for an artificial intelligence management system (AIMS), but conformity assessment alone does not show which architectural layers are affected, whether practices are mature enough for the risk context, or what actions should follow. We present CEDAR-42001 (Control-Evidence Decision and Action Reasoning), a two-stage method that converts ISO/IEC 42001 audit evide","authors_text":"Asaf Shabtai, Priyanka Prakash Surve, Yuval Elovici","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2026-06-19T09:50:04Z","title":"CEDAR-42001: From ISO/IEC 42001 Conformity to Architecture-Aware, Audit-Visible Assurance Posture for AI Cyber-Physical Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21276","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:90185965fee6a0aaf80cc4701266becad26dc1508bf734bae53c00a585d34d3a","target":"record","created_at":"2026-06-23T01:12:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"521b2116138713608ea9d0c2b46334f0d56c4beb301e483229ac0df1ae6cf12f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2026-06-19T09:50:04Z","title_canon_sha256":"1cb2a5a53f70aeef0f93159255b0cd5f30f4b4705ff6a022fc31a7dd9b080abf"},"schema_version":"1.0","source":{"id":"2606.21276","kind":"arxiv","version":1}},"canonical_sha256":"4696e565bcb8b8298c21bc1954727aeab2c8cfd86d0859e1d759e640e655a7bf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4696e565bcb8b8298c21bc1954727aeab2c8cfd86d0859e1d759e640e655a7bf","first_computed_at":"2026-06-23T01:12:35.658275Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-23T01:12:35.658275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TbhnCX9bn2bvFfbluINlqAUujzMb/YGZ30zi9hYykv1oSISMrWT6XOZFqRRpHVYM+eW9v+CAXfQVgVg199noDA==","signature_status":"signed_v1","signed_at":"2026-06-23T01:12:35.658721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.21276","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:90185965fee6a0aaf80cc4701266becad26dc1508bf734bae53c00a585d34d3a","sha256:4828a6de8feec309fc5ccc096f1481bd2f601a38bb1027509ca12daad44e6f11"],"state_sha256":"17f57a00406f5b23f302852096cfe0a305dcd3b2f536280d630aeb4314062b1a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wwa+4lc9bo/NJReN7N7EnK/8yq17NYDO4TkYbPdtzmVVB2IUZmuHuGsJtdjsOhTn5IIYFErly/o3CP5EzciGCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-26T20:33:45.903469Z","bundle_sha256":"15eb2087bde7af3ff79ba54dd3a280efae1c33391af882205063cccd34d620ed"}}