{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:PNTV2TTRQTCHEVDGABCHPYDSIV","short_pith_number":"pith:PNTV2TTR","canonical_record":{"source":{"id":"2606.23905","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-22T20:05:53Z","cross_cats_sorted":[],"title_canon_sha256":"1df81b45b310f0f7a673fa8272484f2f2bde9fc62bbf0cee86973e11bd693a48","abstract_canon_sha256":"c787075dc53ddd8bc218ebb565b3a92a03258f511cb59b5086abeed602d40ff5"},"schema_version":"1.0"},"canonical_sha256":"7b675d4e7184c4725466004477e0724551880b5553b7db7863682cb4885287f4","source":{"kind":"arxiv","id":"2606.23905","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.23905","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"arxiv_version","alias_value":"2606.23905v1","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.23905","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"pith_short_12","alias_value":"PNTV2TTRQTCH","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"pith_short_16","alias_value":"PNTV2TTRQTCHEVDG","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"pith_short_8","alias_value":"PNTV2TTR","created_at":"2026-06-24T00:14:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:PNTV2TTRQTCHEVDGABCHPYDSIV","target":"record","payload":{"canonical_record":{"source":{"id":"2606.23905","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-22T20:05:53Z","cross_cats_sorted":[],"title_canon_sha256":"1df81b45b310f0f7a673fa8272484f2f2bde9fc62bbf0cee86973e11bd693a48","abstract_canon_sha256":"c787075dc53ddd8bc218ebb565b3a92a03258f511cb59b5086abeed602d40ff5"},"schema_version":"1.0"},"canonical_sha256":"7b675d4e7184c4725466004477e0724551880b5553b7db7863682cb4885287f4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-24T00:14:29.834544Z","signature_b64":"+USri8YDepS/gVR2pEs9liQvi29gbG7nBG0eTAt8uqXwHLgXcJK9vOdlAFjhXHg2K0B2wh2BGGQ0g/6wDY07AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7b675d4e7184c4725466004477e0724551880b5553b7db7863682cb4885287f4","last_reissued_at":"2026-06-24T00:14:29.834200Z","signature_status":"signed_v1","first_computed_at":"2026-06-24T00:14:29.834200Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.23905","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T00:14:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GY7k0MErQeo7/C6x7tOtUYzz7KlPTDlt6euHdZYkrg75nJE4catGZuQh/GaVRsbkTcSerk60hov85IxMdDMGAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T16:05:12.271336Z"},"content_sha256":"22e0dda2a400990808456cd1913d1bdf4bb7dc71ad6d668e907b45abf3a81e86","schema_version":"1.0","event_id":"sha256:22e0dda2a400990808456cd1913d1bdf4bb7dc71ad6d668e907b45abf3a81e86"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:PNTV2TTRQTCHEVDGABCHPYDSIV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AutoPRAC: Automating Attack Discovery for PRAC-Based Rowhammer Defenses using Model Checkers","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Gururaj Saileshwar, Joyce Qu","submitted_at":"2026-06-22T20:05:53Z","abstract_excerpt":"Per-Row Activation Counting (PRAC) in DDR5 is a specification to mitigate Rowhammer attacks by tracking activations per row and triggering mitigative refreshes when needed. However, the security of PRAC designs is currently evaluated using human-crafted attack patterns and we lack formal verification of their security properties, or automated techniques to detect implementation flaws. In this work, we present AutoPRAC, the first automated technique to test the security of PRAC-based defenses using model checkers. AutoPRAC models PRAC implementations as bounded state machines and checks securit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.23905","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.23905/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T00:14:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SVNKOfGwOsat/MpwmxpuNJW+pq80mDnU9Kmv6aNR2x3ehmjXd3At8a8tx85eiYBlhy4XBrSXNZE97uwaDLalAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T16:05:12.271716Z"},"content_sha256":"5440561d2aa36a171713f74f51465e0b4c039bb55f1530c479c1c3154503ce19","schema_version":"1.0","event_id":"sha256:5440561d2aa36a171713f74f51465e0b4c039bb55f1530c479c1c3154503ce19"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PNTV2TTRQTCHEVDGABCHPYDSIV/bundle.json","state_url":"https://pith.science/pith/PNTV2TTRQTCHEVDGABCHPYDSIV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PNTV2TTRQTCHEVDGABCHPYDSIV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-29T16:05:12Z","links":{"resolver":"https://pith.science/pith/PNTV2TTRQTCHEVDGABCHPYDSIV","bundle":"https://pith.science/pith/PNTV2TTRQTCHEVDGABCHPYDSIV/bundle.json","state":"https://pith.science/pith/PNTV2TTRQTCHEVDGABCHPYDSIV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PNTV2TTRQTCHEVDGABCHPYDSIV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:PNTV2TTRQTCHEVDGABCHPYDSIV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c787075dc53ddd8bc218ebb565b3a92a03258f511cb59b5086abeed602d40ff5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-22T20:05:53Z","title_canon_sha256":"1df81b45b310f0f7a673fa8272484f2f2bde9fc62bbf0cee86973e11bd693a48"},"schema_version":"1.0","source":{"id":"2606.23905","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.23905","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"arxiv_version","alias_value":"2606.23905v1","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.23905","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"pith_short_12","alias_value":"PNTV2TTRQTCH","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"pith_short_16","alias_value":"PNTV2TTRQTCHEVDG","created_at":"2026-06-24T00:14:29Z"},{"alias_kind":"pith_short_8","alias_value":"PNTV2TTR","created_at":"2026-06-24T00:14:29Z"}],"graph_snapshots":[{"event_id":"sha256:5440561d2aa36a171713f74f51465e0b4c039bb55f1530c479c1c3154503ce19","target":"graph","created_at":"2026-06-24T00:14:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.23905/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Per-Row Activation Counting (PRAC) in DDR5 is a specification to mitigate Rowhammer attacks by tracking activations per row and triggering mitigative refreshes when needed. However, the security of PRAC designs is currently evaluated using human-crafted attack patterns and we lack formal verification of their security properties, or automated techniques to detect implementation flaws. In this work, we present AutoPRAC, the first automated technique to test the security of PRAC-based defenses using model checkers. AutoPRAC models PRAC implementations as bounded state machines and checks securit","authors_text":"Gururaj Saileshwar, Joyce Qu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-22T20:05:53Z","title":"AutoPRAC: Automating Attack Discovery for PRAC-Based Rowhammer Defenses using Model Checkers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.23905","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:22e0dda2a400990808456cd1913d1bdf4bb7dc71ad6d668e907b45abf3a81e86","target":"record","created_at":"2026-06-24T00:14:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c787075dc53ddd8bc218ebb565b3a92a03258f511cb59b5086abeed602d40ff5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-22T20:05:53Z","title_canon_sha256":"1df81b45b310f0f7a673fa8272484f2f2bde9fc62bbf0cee86973e11bd693a48"},"schema_version":"1.0","source":{"id":"2606.23905","kind":"arxiv","version":1}},"canonical_sha256":"7b675d4e7184c4725466004477e0724551880b5553b7db7863682cb4885287f4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7b675d4e7184c4725466004477e0724551880b5553b7db7863682cb4885287f4","first_computed_at":"2026-06-24T00:14:29.834200Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-24T00:14:29.834200Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+USri8YDepS/gVR2pEs9liQvi29gbG7nBG0eTAt8uqXwHLgXcJK9vOdlAFjhXHg2K0B2wh2BGGQ0g/6wDY07AA==","signature_status":"signed_v1","signed_at":"2026-06-24T00:14:29.834544Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.23905","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:22e0dda2a400990808456cd1913d1bdf4bb7dc71ad6d668e907b45abf3a81e86","sha256:5440561d2aa36a171713f74f51465e0b4c039bb55f1530c479c1c3154503ce19"],"state_sha256":"83c82a947bc7a1b8608de8cba775572608c28bf00eb6bd52075abbacb30511b8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"foLdCZl+RhiwgxOBxVv/hZb85FsthgCnq7sXN5QZB4M+1Oqld/60HLB80rA3UoQiBEG8fNwkH4cRyJ2Xo6XFBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-29T16:05:12.273691Z","bundle_sha256":"14226f7cb48f271bc249e26ff63f8df147015d3e27d273a5eec02e6ca018c2a0"}}