{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:ISJBN5BQLDR2RYGG7SUHTHD7Y4","short_pith_number":"pith:ISJBN5BQ","canonical_record":{"source":{"id":"2605.24283","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.SE","submitted_at":"2026-05-22T23:30:38Z","cross_cats_sorted":[],"title_canon_sha256":"5a823177b6e6c7f0a06e4a025185ab3bdd6d98a81e77ad85ff86cf0bff491127","abstract_canon_sha256":"8ec4302ca62f8cf8ad73bf319751fcf2fc7465bce1108932254c6cb00d58c233"},"schema_version":"1.0"},"canonical_sha256":"449216f43058e3a8e0c6fca8799c7fc717b2594aa2b95eedc99ca7d8b01f9bf8","source":{"kind":"arxiv","id":"2605.24283","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.24283","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"arxiv_version","alias_value":"2605.24283v1","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.24283","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"pith_short_12","alias_value":"ISJBN5BQLDR2","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"pith_short_16","alias_value":"ISJBN5BQLDR2RYGG","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"pith_short_8","alias_value":"ISJBN5BQ","created_at":"2026-05-26T01:02:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:ISJBN5BQLDR2RYGG7SUHTHD7Y4","target":"record","payload":{"canonical_record":{"source":{"id":"2605.24283","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.SE","submitted_at":"2026-05-22T23:30:38Z","cross_cats_sorted":[],"title_canon_sha256":"5a823177b6e6c7f0a06e4a025185ab3bdd6d98a81e77ad85ff86cf0bff491127","abstract_canon_sha256":"8ec4302ca62f8cf8ad73bf319751fcf2fc7465bce1108932254c6cb00d58c233"},"schema_version":"1.0"},"canonical_sha256":"449216f43058e3a8e0c6fca8799c7fc717b2594aa2b95eedc99ca7d8b01f9bf8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-26T01:02:57.707211Z","signature_b64":"MbO8tCsJ7OoEcbEfS7gqp7NbklLrsRP4HozbYLubI6DdHFntrCnDRlNWD2MwypF8mkaQilxKGDZRb2mqasKwBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"449216f43058e3a8e0c6fca8799c7fc717b2594aa2b95eedc99ca7d8b01f9bf8","last_reissued_at":"2026-05-26T01:02:57.706459Z","signature_status":"signed_v1","first_computed_at":"2026-05-26T01:02:57.706459Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.24283","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T01:02:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y1jiLP0y8gg/fs2sTYfeTgK9fmsuFOhu0p5qtdYmELjNZpLfjU+CUPBAALoSJTVnd2RTaQiKDCoYJPrYBdozDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T14:11:31.434986Z"},"content_sha256":"f98e76d69b4fa8abf569a611facfb38a7673b797d36d31ecdaff43c6ff0a5b0b","schema_version":"1.0","event_id":"sha256:f98e76d69b4fa8abf569a611facfb38a7673b797d36d31ecdaff43c6ff0a5b0b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:ISJBN5BQLDR2RYGG7SUHTHD7Y4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can Graph-Based Microservice Performance Detection Be Used for Microservice Intrusion Detection?","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Yunjian Ma","submitted_at":"2026-05-22T23:30:38Z","abstract_excerpt":"Microservice systems expose rich telemetry streams, including metrics, logs, and distributed traces. Existing performance anomaly detection methods increasingly model these systems as graphs, where nodes represent services and edges represent runtime dependencies. This paper asks whether graph-based microservice performance detection can also serve as a foundation for microservice intrusion detection. We deploy a Docker Compose based synthetic e-commerce microservice benchmark, run 50 controlled trials across five attack types under normal workloads, and collect metrics, logs, and distributed "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.24283","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.24283/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T01:02:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ggcJnL38KHbgzy4D+SerjNlTHGQDtHwHnVBerraFxccNL+tZm+OStUn+3cAEKK+fuyVhoF7ahgvN95zpjN5KBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T14:11:31.435366Z"},"content_sha256":"cfb5663c074193e68935e9485a85d16a349519f68d2ce7bed7537433760a421c","schema_version":"1.0","event_id":"sha256:cfb5663c074193e68935e9485a85d16a349519f68d2ce7bed7537433760a421c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ISJBN5BQLDR2RYGG7SUHTHD7Y4/bundle.json","state_url":"https://pith.science/pith/ISJBN5BQLDR2RYGG7SUHTHD7Y4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ISJBN5BQLDR2RYGG7SUHTHD7Y4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-02T14:11:31Z","links":{"resolver":"https://pith.science/pith/ISJBN5BQLDR2RYGG7SUHTHD7Y4","bundle":"https://pith.science/pith/ISJBN5BQLDR2RYGG7SUHTHD7Y4/bundle.json","state":"https://pith.science/pith/ISJBN5BQLDR2RYGG7SUHTHD7Y4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ISJBN5BQLDR2RYGG7SUHTHD7Y4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:ISJBN5BQLDR2RYGG7SUHTHD7Y4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8ec4302ca62f8cf8ad73bf319751fcf2fc7465bce1108932254c6cb00d58c233","cross_cats_sorted":[],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.SE","submitted_at":"2026-05-22T23:30:38Z","title_canon_sha256":"5a823177b6e6c7f0a06e4a025185ab3bdd6d98a81e77ad85ff86cf0bff491127"},"schema_version":"1.0","source":{"id":"2605.24283","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.24283","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"arxiv_version","alias_value":"2605.24283v1","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.24283","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"pith_short_12","alias_value":"ISJBN5BQLDR2","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"pith_short_16","alias_value":"ISJBN5BQLDR2RYGG","created_at":"2026-05-26T01:02:57Z"},{"alias_kind":"pith_short_8","alias_value":"ISJBN5BQ","created_at":"2026-05-26T01:02:57Z"}],"graph_snapshots":[{"event_id":"sha256:cfb5663c074193e68935e9485a85d16a349519f68d2ce7bed7537433760a421c","target":"graph","created_at":"2026-05-26T01:02:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.24283/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Microservice systems expose rich telemetry streams, including metrics, logs, and distributed traces. Existing performance anomaly detection methods increasingly model these systems as graphs, where nodes represent services and edges represent runtime dependencies. This paper asks whether graph-based microservice performance detection can also serve as a foundation for microservice intrusion detection. We deploy a Docker Compose based synthetic e-commerce microservice benchmark, run 50 controlled trials across five attack types under normal workloads, and collect metrics, logs, and distributed ","authors_text":"Yunjian Ma","cross_cats":[],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.SE","submitted_at":"2026-05-22T23:30:38Z","title":"Can Graph-Based Microservice Performance Detection Be Used for Microservice Intrusion Detection?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.24283","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f98e76d69b4fa8abf569a611facfb38a7673b797d36d31ecdaff43c6ff0a5b0b","target":"record","created_at":"2026-05-26T01:02:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8ec4302ca62f8cf8ad73bf319751fcf2fc7465bce1108932254c6cb00d58c233","cross_cats_sorted":[],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.SE","submitted_at":"2026-05-22T23:30:38Z","title_canon_sha256":"5a823177b6e6c7f0a06e4a025185ab3bdd6d98a81e77ad85ff86cf0bff491127"},"schema_version":"1.0","source":{"id":"2605.24283","kind":"arxiv","version":1}},"canonical_sha256":"449216f43058e3a8e0c6fca8799c7fc717b2594aa2b95eedc99ca7d8b01f9bf8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"449216f43058e3a8e0c6fca8799c7fc717b2594aa2b95eedc99ca7d8b01f9bf8","first_computed_at":"2026-05-26T01:02:57.706459Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-26T01:02:57.706459Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MbO8tCsJ7OoEcbEfS7gqp7NbklLrsRP4HozbYLubI6DdHFntrCnDRlNWD2MwypF8mkaQilxKGDZRb2mqasKwBA==","signature_status":"signed_v1","signed_at":"2026-05-26T01:02:57.707211Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.24283","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f98e76d69b4fa8abf569a611facfb38a7673b797d36d31ecdaff43c6ff0a5b0b","sha256:cfb5663c074193e68935e9485a85d16a349519f68d2ce7bed7537433760a421c"],"state_sha256":"250120d2dad3bb4750275cf2e595902dab75c58390716f87b2680979bb0343e6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uXmhwOs2xhK8rFn7SvVub65Jzs3oWBR+eq4KxV9ilArGKZJvLY7RazTkEd688YEwmqo/Vx7DOHxlVZAkYwtlCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-02T14:11:31.437425Z","bundle_sha256":"3d99d5b85565359ea5c334bcff4c6d9b5e8739d4236e7aac2fae352d24162f1a"}}