{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:JZWCPWMZPPRO6GG6EH7LAH7UDX","short_pith_number":"pith:JZWCPWMZ","canonical_record":{"source":{"id":"2606.06354","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-04T16:22:44Z","cross_cats_sorted":[],"title_canon_sha256":"59f765c5415c98e59ef1cfb8f394d121f583bf9dc4bcdbca2a20ef5d092c646b","abstract_canon_sha256":"83f780a40349197858b2a2d02b73cad6b7bcbf22fe22de07c6c4c6ee4ccb9ab4"},"schema_version":"1.0"},"canonical_sha256":"4e6c27d9997be2ef18de21feb01ff41df97f6d4135287914950f521df34347fb","source":{"kind":"arxiv","id":"2606.06354","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.06354","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"arxiv_version","alias_value":"2606.06354v1","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.06354","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"pith_short_12","alias_value":"JZWCPWMZPPRO","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"pith_short_16","alias_value":"JZWCPWMZPPRO6GG6","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"pith_short_8","alias_value":"JZWCPWMZ","created_at":"2026-06-05T01:15:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:JZWCPWMZPPRO6GG6EH7LAH7UDX","target":"record","payload":{"canonical_record":{"source":{"id":"2606.06354","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-04T16:22:44Z","cross_cats_sorted":[],"title_canon_sha256":"59f765c5415c98e59ef1cfb8f394d121f583bf9dc4bcdbca2a20ef5d092c646b","abstract_canon_sha256":"83f780a40349197858b2a2d02b73cad6b7bcbf22fe22de07c6c4c6ee4ccb9ab4"},"schema_version":"1.0"},"canonical_sha256":"4e6c27d9997be2ef18de21feb01ff41df97f6d4135287914950f521df34347fb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-05T01:15:42.577179Z","signature_b64":"gZa2ixKTSdy0qNyIOtnesN5ScI1KYm4r/o/yNeMVl2L2yNUQHTpIUzIkL5LUMkrsD+mRPBY9xs9aWeJBum/rCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4e6c27d9997be2ef18de21feb01ff41df97f6d4135287914950f521df34347fb","last_reissued_at":"2026-06-05T01:15:42.576730Z","signature_status":"signed_v1","first_computed_at":"2026-06-05T01:15:42.576730Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.06354","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-05T01:15:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3TKVGAXmhcBOZ/LQ7lFIiq0J+LorqwbzLMbM4wU+Nxd0wd1tIIdJfrYepzMp+VVPpWSgpHV/MFsCJV5kCNJhDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T20:04:58.702709Z"},"content_sha256":"8225bc19cd06a3cd329652415440f50ee99d277a8ed94c67febe8906c1c570a1","schema_version":"1.0","event_id":"sha256:8225bc19cd06a3cd329652415440f50ee99d277a8ed94c67febe8906c1c570a1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:JZWCPWMZPPRO6GG6EH7LAH7UDX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Credential Disclosure in (EU) Digital Identity Wallets: Privacy Risks and Practical Mitigations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Daniele Lain, Kari Kostiainen, Sheila Zingg, Srdjan \\v{C}apkun, Stefan Bechtold, Yoshimichi Nakatsuka","submitted_at":"2026-06-04T16:22:44Z","abstract_excerpt":"The European Union will introduce the EUDI Wallet by late 2026, which allows users to hold digital credentials (i.e., representations of physical official identity documents) on their devices. This will allow users to securely and privately disclose identity attributes to websites. Although such a system has many benefits, it also introduces risks caused by poor credential disclosure decisions. In this paper, we (i) conduct a large-scale survey on credential disclosure with users and experts and (ii) evaluate the effectiveness and feasibility of our Credential Assistant that displays expert re"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.06354","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.06354/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-05T01:15:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fs7muH593G3R5OvaWhyyFeSKADDixo9OYjkDHEfxeyerf7CYJw2uTCefgIlhQ8yGIcCS/pqKwr5Thz//vRJAAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T20:04:58.703227Z"},"content_sha256":"de4d1993041c85cd2832856e5946e9e621bf57ab376058c0f1e3015a2c39957b","schema_version":"1.0","event_id":"sha256:de4d1993041c85cd2832856e5946e9e621bf57ab376058c0f1e3015a2c39957b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JZWCPWMZPPRO6GG6EH7LAH7UDX/bundle.json","state_url":"https://pith.science/pith/JZWCPWMZPPRO6GG6EH7LAH7UDX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JZWCPWMZPPRO6GG6EH7LAH7UDX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T20:04:58Z","links":{"resolver":"https://pith.science/pith/JZWCPWMZPPRO6GG6EH7LAH7UDX","bundle":"https://pith.science/pith/JZWCPWMZPPRO6GG6EH7LAH7UDX/bundle.json","state":"https://pith.science/pith/JZWCPWMZPPRO6GG6EH7LAH7UDX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JZWCPWMZPPRO6GG6EH7LAH7UDX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:JZWCPWMZPPRO6GG6EH7LAH7UDX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"83f780a40349197858b2a2d02b73cad6b7bcbf22fe22de07c6c4c6ee4ccb9ab4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-04T16:22:44Z","title_canon_sha256":"59f765c5415c98e59ef1cfb8f394d121f583bf9dc4bcdbca2a20ef5d092c646b"},"schema_version":"1.0","source":{"id":"2606.06354","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.06354","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"arxiv_version","alias_value":"2606.06354v1","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.06354","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"pith_short_12","alias_value":"JZWCPWMZPPRO","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"pith_short_16","alias_value":"JZWCPWMZPPRO6GG6","created_at":"2026-06-05T01:15:42Z"},{"alias_kind":"pith_short_8","alias_value":"JZWCPWMZ","created_at":"2026-06-05T01:15:42Z"}],"graph_snapshots":[{"event_id":"sha256:de4d1993041c85cd2832856e5946e9e621bf57ab376058c0f1e3015a2c39957b","target":"graph","created_at":"2026-06-05T01:15:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.06354/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The European Union will introduce the EUDI Wallet by late 2026, which allows users to hold digital credentials (i.e., representations of physical official identity documents) on their devices. This will allow users to securely and privately disclose identity attributes to websites. Although such a system has many benefits, it also introduces risks caused by poor credential disclosure decisions. In this paper, we (i) conduct a large-scale survey on credential disclosure with users and experts and (ii) evaluate the effectiveness and feasibility of our Credential Assistant that displays expert re","authors_text":"Daniele Lain, Kari Kostiainen, Sheila Zingg, Srdjan \\v{C}apkun, Stefan Bechtold, Yoshimichi Nakatsuka","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-04T16:22:44Z","title":"Credential Disclosure in (EU) Digital Identity Wallets: Privacy Risks and Practical Mitigations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.06354","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8225bc19cd06a3cd329652415440f50ee99d277a8ed94c67febe8906c1c570a1","target":"record","created_at":"2026-06-05T01:15:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"83f780a40349197858b2a2d02b73cad6b7bcbf22fe22de07c6c4c6ee4ccb9ab4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-04T16:22:44Z","title_canon_sha256":"59f765c5415c98e59ef1cfb8f394d121f583bf9dc4bcdbca2a20ef5d092c646b"},"schema_version":"1.0","source":{"id":"2606.06354","kind":"arxiv","version":1}},"canonical_sha256":"4e6c27d9997be2ef18de21feb01ff41df97f6d4135287914950f521df34347fb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4e6c27d9997be2ef18de21feb01ff41df97f6d4135287914950f521df34347fb","first_computed_at":"2026-06-05T01:15:42.576730Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-05T01:15:42.576730Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gZa2ixKTSdy0qNyIOtnesN5ScI1KYm4r/o/yNeMVl2L2yNUQHTpIUzIkL5LUMkrsD+mRPBY9xs9aWeJBum/rCQ==","signature_status":"signed_v1","signed_at":"2026-06-05T01:15:42.577179Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.06354","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8225bc19cd06a3cd329652415440f50ee99d277a8ed94c67febe8906c1c570a1","sha256:de4d1993041c85cd2832856e5946e9e621bf57ab376058c0f1e3015a2c39957b"],"state_sha256":"d8621ae4258b5a5adc4d30b1d365ebcd66cffef823410793b3ad52c613f54624"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3cIO+KQ2l6DYBi8CR2viALmVVxHpMGkac8MZQ8qaoRf4Na9s+39tQwRRCSeSTKPlwrrh/7aheWXAyCFCnfp9Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T20:04:58.709267Z","bundle_sha256":"5ec252265dac7ee4d6a544ba061fdb175fa22ee7b044d7ce3760691d16c6cfb7"}}