{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:RP7LPMBM5BML6XBLDHRMA4BHER","short_pith_number":"pith:RP7LPMBM","canonical_record":{"source":{"id":"2606.30587","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:31:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ae6cfa1aaff2b3224412b0bbfd2af028a8f96bebd6ec7453885d764e71b8623c","abstract_canon_sha256":"26ab9b5075fb523d7a82a169daa5cfe13a6f4decf3f55d5278e22ea00a5b95ec"},"schema_version":"1.0"},"canonical_sha256":"8bfeb7b02ce858bf5c2b19e2c070272461ee4b7c5fa7677fb3400fb23532a28e","source":{"kind":"arxiv","id":"2606.30587","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.30587","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"arxiv_version","alias_value":"2606.30587v1","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.30587","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"pith_short_12","alias_value":"RP7LPMBM5BML","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"pith_short_16","alias_value":"RP7LPMBM5BML6XBL","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"pith_short_8","alias_value":"RP7LPMBM","created_at":"2026-06-30T02:18:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:RP7LPMBM5BML6XBLDHRMA4BHER","target":"record","payload":{"canonical_record":{"source":{"id":"2606.30587","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:31:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ae6cfa1aaff2b3224412b0bbfd2af028a8f96bebd6ec7453885d764e71b8623c","abstract_canon_sha256":"26ab9b5075fb523d7a82a169daa5cfe13a6f4decf3f55d5278e22ea00a5b95ec"},"schema_version":"1.0"},"canonical_sha256":"8bfeb7b02ce858bf5c2b19e2c070272461ee4b7c5fa7677fb3400fb23532a28e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-30T02:18:21.709213Z","signature_b64":"gp7rTw0t0xwVNpQW8+vCOn8J8S2D3m6aTZvXyw3rEviz2pMXtt6OW4YXo3+9eGIM8ncHcE26YSCx3+P7DZlvAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8bfeb7b02ce858bf5c2b19e2c070272461ee4b7c5fa7677fb3400fb23532a28e","last_reissued_at":"2026-06-30T02:18:21.708598Z","signature_status":"signed_v1","first_computed_at":"2026-06-30T02:18:21.708598Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.30587","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-30T02:18:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SKKHGuDlyJBEvnoDDda3QtarVj2V9QUFOzv+xmBRGLcJGIqUUzILGHKcxVt54DR+oHBjlKKYPOOVp+qyH432DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T04:28:06.110260Z"},"content_sha256":"835d45bb262949d4eee1dbee51e8aebf90a83067f732e74497febf6093031d0d","schema_version":"1.0","event_id":"sha256:835d45bb262949d4eee1dbee51e8aebf90a83067f732e74497febf6093031d0d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:RP7LPMBM5BML6XBLDHRMA4BHER","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Asif Shahriar, Gang Wang, Hadjer Benkraouda, Hongyu Cai, Z. Berkay Celik","submitted_at":"2026-06-29T17:31:10Z","abstract_excerpt":"Researchers and practitioners increasingly apply Large Language Models (LLMs) for automated vulnerability detection. Recent work has shown that LLMs are susceptible to the same cognitive heuristics that bias human judgment. Yet, no work has investigated whether these heuristics affect a model's assessment of code vulnerabilities. In this paper, we present the first systematic exploration of cognitive heuristics in LLM-driven code vulnerability detection. We introduce a controlled framework that holds the code fixed and only varies the surrounding context to trigger three cognitive heuristics: "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.30587","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.30587/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-30T02:18:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RL5ctEgOi9sx3CHzK8oWlOxot7nVKoaxyjyQ8Na5huq1oBtCNNq2P6Ao6rqvgBZbnppdRRzK8Mm9YLikKdh6DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T04:28:06.110770Z"},"content_sha256":"c15682a0d74de7727a716f6fa360e90fd47f42142f00d5c4fe20dc96a7479736","schema_version":"1.0","event_id":"sha256:c15682a0d74de7727a716f6fa360e90fd47f42142f00d5c4fe20dc96a7479736"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RP7LPMBM5BML6XBLDHRMA4BHER/bundle.json","state_url":"https://pith.science/pith/RP7LPMBM5BML6XBLDHRMA4BHER/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RP7LPMBM5BML6XBLDHRMA4BHER/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-02T04:28:06Z","links":{"resolver":"https://pith.science/pith/RP7LPMBM5BML6XBLDHRMA4BHER","bundle":"https://pith.science/pith/RP7LPMBM5BML6XBLDHRMA4BHER/bundle.json","state":"https://pith.science/pith/RP7LPMBM5BML6XBLDHRMA4BHER/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RP7LPMBM5BML6XBLDHRMA4BHER/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:RP7LPMBM5BML6XBLDHRMA4BHER","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"26ab9b5075fb523d7a82a169daa5cfe13a6f4decf3f55d5278e22ea00a5b95ec","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:31:10Z","title_canon_sha256":"ae6cfa1aaff2b3224412b0bbfd2af028a8f96bebd6ec7453885d764e71b8623c"},"schema_version":"1.0","source":{"id":"2606.30587","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.30587","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"arxiv_version","alias_value":"2606.30587v1","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.30587","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"pith_short_12","alias_value":"RP7LPMBM5BML","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"pith_short_16","alias_value":"RP7LPMBM5BML6XBL","created_at":"2026-06-30T02:18:21Z"},{"alias_kind":"pith_short_8","alias_value":"RP7LPMBM","created_at":"2026-06-30T02:18:21Z"}],"graph_snapshots":[{"event_id":"sha256:c15682a0d74de7727a716f6fa360e90fd47f42142f00d5c4fe20dc96a7479736","target":"graph","created_at":"2026-06-30T02:18:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.30587/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Researchers and practitioners increasingly apply Large Language Models (LLMs) for automated vulnerability detection. Recent work has shown that LLMs are susceptible to the same cognitive heuristics that bias human judgment. Yet, no work has investigated whether these heuristics affect a model's assessment of code vulnerabilities. In this paper, we present the first systematic exploration of cognitive heuristics in LLM-driven code vulnerability detection. We introduce a controlled framework that holds the code fixed and only varies the surrounding context to trigger three cognitive heuristics: ","authors_text":"Asif Shahriar, Gang Wang, Hadjer Benkraouda, Hongyu Cai, Z. Berkay Celik","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:31:10Z","title":"Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.30587","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:835d45bb262949d4eee1dbee51e8aebf90a83067f732e74497febf6093031d0d","target":"record","created_at":"2026-06-30T02:18:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"26ab9b5075fb523d7a82a169daa5cfe13a6f4decf3f55d5278e22ea00a5b95ec","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-29T17:31:10Z","title_canon_sha256":"ae6cfa1aaff2b3224412b0bbfd2af028a8f96bebd6ec7453885d764e71b8623c"},"schema_version":"1.0","source":{"id":"2606.30587","kind":"arxiv","version":1}},"canonical_sha256":"8bfeb7b02ce858bf5c2b19e2c070272461ee4b7c5fa7677fb3400fb23532a28e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8bfeb7b02ce858bf5c2b19e2c070272461ee4b7c5fa7677fb3400fb23532a28e","first_computed_at":"2026-06-30T02:18:21.708598Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-30T02:18:21.708598Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gp7rTw0t0xwVNpQW8+vCOn8J8S2D3m6aTZvXyw3rEviz2pMXtt6OW4YXo3+9eGIM8ncHcE26YSCx3+P7DZlvAw==","signature_status":"signed_v1","signed_at":"2026-06-30T02:18:21.709213Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.30587","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:835d45bb262949d4eee1dbee51e8aebf90a83067f732e74497febf6093031d0d","sha256:c15682a0d74de7727a716f6fa360e90fd47f42142f00d5c4fe20dc96a7479736"],"state_sha256":"a355031f8f14ac069a8fc4400461c70e4848b5e12af803ab21e4b233c7539e19"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8LA9wmrWRw7yMtmuZlzOr6fNCj0CzTM8BRdLBm1+cP79uMMJocvSFeE/qOgojZi1wGI4cG00Xv9HVt1efDNSBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-02T04:28:06.113199Z","bundle_sha256":"8468f08624e2c3ae08677cf40b3041a8cec138781ab64e17e60c0100440c6d9d"}}