{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:NMFQ5DA767Y7I6OZN5COG4CFQQ","short_pith_number":"pith:NMFQ5DA7","canonical_record":{"source":{"id":"2606.13425","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-11T14:54:10Z","cross_cats_sorted":[],"title_canon_sha256":"087fdd1936f6f1fe4e1c762a7a2561b4cd4cc5a819862e3aad322bed59fde080","abstract_canon_sha256":"c7755ff1ca7645a43f9b98c48f06a465b56888c7f86c29044c2207495a905998"},"schema_version":"1.0"},"canonical_sha256":"6b0b0e8c1ff7f1f479d96f44e37045840f78b7eadc492346285dd290661f63b8","source":{"kind":"arxiv","id":"2606.13425","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.13425","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"arxiv_version","alias_value":"2606.13425v1","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.13425","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"pith_short_12","alias_value":"NMFQ5DA767Y7","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"pith_short_16","alias_value":"NMFQ5DA767Y7I6OZ","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"pith_short_8","alias_value":"NMFQ5DA7","created_at":"2026-06-12T01:10:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:NMFQ5DA767Y7I6OZN5COG4CFQQ","target":"record","payload":{"canonical_record":{"source":{"id":"2606.13425","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-11T14:54:10Z","cross_cats_sorted":[],"title_canon_sha256":"087fdd1936f6f1fe4e1c762a7a2561b4cd4cc5a819862e3aad322bed59fde080","abstract_canon_sha256":"c7755ff1ca7645a43f9b98c48f06a465b56888c7f86c29044c2207495a905998"},"schema_version":"1.0"},"canonical_sha256":"6b0b0e8c1ff7f1f479d96f44e37045840f78b7eadc492346285dd290661f63b8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-12T01:10:01.720418Z","signature_b64":"9tUvhqHFuTE1Gx44SlMGVxvAK3oHAerGmnhYjpUHzcl1prlA1Knoyfh/gMP0qp4Y58g7J8AbHAKXiwkAnlxOBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6b0b0e8c1ff7f1f479d96f44e37045840f78b7eadc492346285dd290661f63b8","last_reissued_at":"2026-06-12T01:10:01.719391Z","signature_status":"signed_v1","first_computed_at":"2026-06-12T01:10:01.719391Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.13425","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-12T01:10:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iYV/P0fWFqkF5CIco5tDExK+8rBQEnQwK9swovz3w95/hL9wK5+azw8yyAhNfjZxPuom7DUAYw6xTBHcRcM/Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T22:21:12.466578Z"},"content_sha256":"74f2900a719eae129dc5f6603272ba8a6cbf14fb7b6278ec80b46ff35cdba53c","schema_version":"1.0","event_id":"sha256:74f2900a719eae129dc5f6603272ba8a6cbf14fb7b6278ec80b46ff35cdba53c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:NMFQ5DA767Y7I6OZN5COG4CFQQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Assessment Framework for Application-Level Cryptographic Agility","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Gregoire Messmer, Navaneeth Rameshan","submitted_at":"2026-06-11T14:54:10Z","abstract_excerpt":"The impending post-quantum transition to new cryptography will require complete replacement of algorithms within all software. The cryptographic APIs used today make this transition challenging because they were not designed with agility as a concern. There is no method for systematically assessing cryptographic agility as an overall ability. In addition to this, the term itself refers to multiple independent capabilities. Specifically, it includes replacing algorithms, selecting by policy, and substituting implementations. This lack of structured decomposition limits both the evaluation of sy"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.13425","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.13425/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-12T01:10:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JfmSKqhaHalIsq8tlYC0d95UoNNScAVBCJ3EnL75LCRgtL+vJoRgq/LECrNo28VkHx+ovZj+oKZktOxFHQEOAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T22:21:12.466950Z"},"content_sha256":"af720000f791e7d4bceaac9025272f10a5563a3231804f1dfa3ae98486018ef7","schema_version":"1.0","event_id":"sha256:af720000f791e7d4bceaac9025272f10a5563a3231804f1dfa3ae98486018ef7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NMFQ5DA767Y7I6OZN5COG4CFQQ/bundle.json","state_url":"https://pith.science/pith/NMFQ5DA767Y7I6OZN5COG4CFQQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NMFQ5DA767Y7I6OZN5COG4CFQQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-29T22:21:12Z","links":{"resolver":"https://pith.science/pith/NMFQ5DA767Y7I6OZN5COG4CFQQ","bundle":"https://pith.science/pith/NMFQ5DA767Y7I6OZN5COG4CFQQ/bundle.json","state":"https://pith.science/pith/NMFQ5DA767Y7I6OZN5COG4CFQQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NMFQ5DA767Y7I6OZN5COG4CFQQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:NMFQ5DA767Y7I6OZN5COG4CFQQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c7755ff1ca7645a43f9b98c48f06a465b56888c7f86c29044c2207495a905998","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-11T14:54:10Z","title_canon_sha256":"087fdd1936f6f1fe4e1c762a7a2561b4cd4cc5a819862e3aad322bed59fde080"},"schema_version":"1.0","source":{"id":"2606.13425","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.13425","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"arxiv_version","alias_value":"2606.13425v1","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.13425","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"pith_short_12","alias_value":"NMFQ5DA767Y7","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"pith_short_16","alias_value":"NMFQ5DA767Y7I6OZ","created_at":"2026-06-12T01:10:01Z"},{"alias_kind":"pith_short_8","alias_value":"NMFQ5DA7","created_at":"2026-06-12T01:10:01Z"}],"graph_snapshots":[{"event_id":"sha256:af720000f791e7d4bceaac9025272f10a5563a3231804f1dfa3ae98486018ef7","target":"graph","created_at":"2026-06-12T01:10:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.13425/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The impending post-quantum transition to new cryptography will require complete replacement of algorithms within all software. The cryptographic APIs used today make this transition challenging because they were not designed with agility as a concern. There is no method for systematically assessing cryptographic agility as an overall ability. In addition to this, the term itself refers to multiple independent capabilities. Specifically, it includes replacing algorithms, selecting by policy, and substituting implementations. This lack of structured decomposition limits both the evaluation of sy","authors_text":"Gregoire Messmer, Navaneeth Rameshan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-11T14:54:10Z","title":"An Assessment Framework for Application-Level Cryptographic Agility"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.13425","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:74f2900a719eae129dc5f6603272ba8a6cbf14fb7b6278ec80b46ff35cdba53c","target":"record","created_at":"2026-06-12T01:10:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c7755ff1ca7645a43f9b98c48f06a465b56888c7f86c29044c2207495a905998","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-11T14:54:10Z","title_canon_sha256":"087fdd1936f6f1fe4e1c762a7a2561b4cd4cc5a819862e3aad322bed59fde080"},"schema_version":"1.0","source":{"id":"2606.13425","kind":"arxiv","version":1}},"canonical_sha256":"6b0b0e8c1ff7f1f479d96f44e37045840f78b7eadc492346285dd290661f63b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6b0b0e8c1ff7f1f479d96f44e37045840f78b7eadc492346285dd290661f63b8","first_computed_at":"2026-06-12T01:10:01.719391Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-12T01:10:01.719391Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9tUvhqHFuTE1Gx44SlMGVxvAK3oHAerGmnhYjpUHzcl1prlA1Knoyfh/gMP0qp4Y58g7J8AbHAKXiwkAnlxOBA==","signature_status":"signed_v1","signed_at":"2026-06-12T01:10:01.720418Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.13425","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:74f2900a719eae129dc5f6603272ba8a6cbf14fb7b6278ec80b46ff35cdba53c","sha256:af720000f791e7d4bceaac9025272f10a5563a3231804f1dfa3ae98486018ef7"],"state_sha256":"27db6573f48d8af4c2bc035acfc9845ed95ab734fdd70c690f5c8a233d9c8f66"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3Zsd+evIRMfijvmJXnJSKt+QJ+FWqwLiTchwwKz6sYZ/5Wzo7V1B9lPMUWZ/lMOPYci6PX23lNBiEPALscB8Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-29T22:21:12.468871Z","bundle_sha256":"2128d0423782c7d6ce6cc934ac34445581cbd6e1e45c4e8b9199d64b9cc28cb2"}}