{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:THE5BDI2MBFRCXKQXVTEMSZYLI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0efc392d3d48640d85493c5ed56b744200ebe32ff6503357e458feb6983837ac","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-10-23T08:39:30Z","title_canon_sha256":"6c55728ae375b410ab7310547d054bd5e18f9fbdddecd9e2c3ac73ed4391d19e"},"schema_version":"1.0","source":{"id":"2510.20340","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.20340","created_at":"2026-06-12T01:08:17Z"},{"alias_kind":"arxiv_version","alias_value":"2510.20340v4","created_at":"2026-06-12T01:08:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.20340","created_at":"2026-06-12T01:08:17Z"},{"alias_kind":"pith_short_12","alias_value":"THE5BDI2MBFR","created_at":"2026-06-12T01:08:17Z"},{"alias_kind":"pith_short_16","alias_value":"THE5BDI2MBFRCXKQ","created_at":"2026-06-12T01:08:17Z"},{"alias_kind":"pith_short_8","alias_value":"THE5BDI2","created_at":"2026-06-12T01:08:17Z"}],"graph_snapshots":[{"event_id":"sha256:90384e215fa5e8d920f91914a94ef29f484271bfda8d4ee68a90bcf3c9d0e2e1","target":"graph","created_at":"2026-06-12T01:08:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":4,"items":[{"attestation":"unclaimed","claim_id":"C1","kind":"strongest_claim","source":"verdict.strongest_claim","status":"machine_extracted","text":"Classport embeds dependency information into Java class files, enabling the retrieval of dependency information at runtime."},{"attestation":"unclaimed","claim_id":"C2","kind":"weakest_assumption","source":"verdict.weakest_assumption","status":"machine_extracted","text":"Embedding additional metadata into standard Java class files will not break compatibility with existing JVMs, build tools, or performance expectations in real deployments."},{"attestation":"unclaimed","claim_id":"C3","kind":"one_line_summary","source":"verdict.one_line_summary","status":"machine_extracted","text":"Classport adds dependency information to Java class files to enable runtime introspection of used dependencies, shown feasible on six real-world projects."},{"attestation":"unclaimed","claim_id":"C4","kind":"headline","source":"verdict.pith_extraction.headline","status":"machine_extracted","text":"Classport embeds dependency information into Java class files to enable its retrieval at runtime."}],"snapshot_sha256":"0fc921df443ecb8386ca16e6534fe9710fd5b8c8425dd586a1bd1d973bc32e36"},"formal_canon":{"evidence_count":2,"snapshot_sha256":"e223b91621521c1c74b15ebc7e6ea3aa3c935bf0fada44b946f5b116c07eef02"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2510.20340/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Runtime introspection of dependencies, i.e., the ability to observe which dependencies are currently used during program execution, is fundamental for Software Supply Chain security. Yet, Java has no support for it. We solve this problem with Classport, a blueprint and system that embeds dependency information into Java class files, enabling the retrieval of dependency information at runtime. We evaluate Classport on six real-world projects, demonstrating the feasibility in identifying dependencies at runtime.","authors_text":"Aman Sharma, Daniel Williams, Martin Monperrus, Serena Cofano","cross_cats":["cs.CR"],"headline":"Classport embeds dependency information into Java class files to enable its retrieval at runtime.","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-10-23T08:39:30Z","title":"Classport: Designing Runtime Dependency Introspection for Java"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.20340","kind":"arxiv","version":4},"verdict":{"created_at":"2026-05-18T05:04:01.213290Z","id":"f192200e-beaa-41c4-afb1-dcf5f657a175","model_set":{"reader":"grok-4.3"},"one_line_summary":"Classport adds dependency information to Java class files to enable runtime introspection of used dependencies, shown feasible on six real-world projects.","pipeline_version":"pith-pipeline@v0.9.0","pith_extraction_headline":"Classport embeds dependency information into Java class files to enable its retrieval at runtime.","strongest_claim":"Classport embeds dependency information into Java class files, enabling the retrieval of dependency information at runtime.","weakest_assumption":"Embedding additional metadata into standard Java class files will not break compatibility with existing JVMs, build tools, or performance expectations in real deployments."}},"verdict_id":"f192200e-beaa-41c4-afb1-dcf5f657a175"}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cd544e2f7b8bee51305308c0245fcf3f1554d41e0362e17984d0d175d1194f8e","target":"record","created_at":"2026-06-12T01:08:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0efc392d3d48640d85493c5ed56b744200ebe32ff6503357e458feb6983837ac","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.SE","submitted_at":"2025-10-23T08:39:30Z","title_canon_sha256":"6c55728ae375b410ab7310547d054bd5e18f9fbdddecd9e2c3ac73ed4391d19e"},"schema_version":"1.0","source":{"id":"2510.20340","kind":"arxiv","version":4}},"canonical_sha256":"99c9d08d1a604b115d50bd66464b385a2915ae155556a64117fc38640ce7b0b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"99c9d08d1a604b115d50bd66464b385a2915ae155556a64117fc38640ce7b0b8","first_computed_at":"2026-06-12T01:08:17.632758Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-12T01:08:17.632758Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"45DIglfkvI07bo/VItSVn6RRlvRXJaWsF8MZ0XdJPbs2zcQgvsjhaMEjO4BhuRiRY7cHXpovrwee+tc4cQEWAA==","signature_status":"signed_v1","signed_at":"2026-06-12T01:08:17.633886Z","signed_message":"canonical_sha256_bytes"},"source_id":"2510.20340","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cd544e2f7b8bee51305308c0245fcf3f1554d41e0362e17984d0d175d1194f8e","sha256:90384e215fa5e8d920f91914a94ef29f484271bfda8d4ee68a90bcf3c9d0e2e1"],"state_sha256":"532566de46d17b666a9105d57cba6a77fc852f3fe178800be5414bbab5edd673"}