{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:TYGPHL5L5LWEDJMLLEWWSRUE3B","short_pith_number":"pith:TYGPHL5L","schema_version":"1.0","canonical_sha256":"9e0cf3afabeaec41a58b592d694684d8670abfdc5fe1adacb1448a6d296fb3cc","source":{"kind":"arxiv","id":"2606.04739","version":1},"attestation_state":"computed","paper":{"title":"Revisiting Vul-RAG: Reproducibility and Replicability of RAG-based Vulnerability Detection with Open-Weight Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.SE","authors_text":"Fabian Schmidt, Sabrina Kaniewski, Tobias Heer","submitted_at":"2026-06-03T11:20:37Z","abstract_excerpt":"Large language models (LLMs) have shown strong potential for automated software vulnerability detection, particularly in retrieval-augmented generation (RAG) settings. However, for approaches relying on proprietary models and APIs, reproducibility and replicability remain largely unexplored, raising the question of whether reported results generalize or depend primarily on specific model choices. In this work, we present a reproducibility study of Vul-RAG, a RAG-based framework for source code vulnerability detection that enhances LLMs with high-level vulnerability knowledge. We first replicat"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.04739","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-03T11:20:37Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e8978905d84bd2edca23aecac6a6f1f3b001c82bf63ad0b22a22ba1f6c197780","abstract_canon_sha256":"8ece31e5ed8ea02c24c4114212de4ff78f03a29e1acdaacc5a96f85f68ccc02d"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-04T01:09:27.724810Z","signature_b64":"Elb5JftuP247q8LknlBL4TvOkL9jyB2db/GVrpnvH6kpjGLia3/ZoeftoQ2HZ16LQOdS86C6YzTYkLWI9+WmBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9e0cf3afabeaec41a58b592d694684d8670abfdc5fe1adacb1448a6d296fb3cc","last_reissued_at":"2026-06-04T01:09:27.724033Z","signature_status":"signed_v1","first_computed_at":"2026-06-04T01:09:27.724033Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Revisiting Vul-RAG: Reproducibility and Replicability of RAG-based Vulnerability Detection with Open-Weight Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.SE","authors_text":"Fabian Schmidt, Sabrina Kaniewski, Tobias Heer","submitted_at":"2026-06-03T11:20:37Z","abstract_excerpt":"Large language models (LLMs) have shown strong potential for automated software vulnerability detection, particularly in retrieval-augmented generation (RAG) settings. However, for approaches relying on proprietary models and APIs, reproducibility and replicability remain largely unexplored, raising the question of whether reported results generalize or depend primarily on specific model choices. In this work, we present a reproducibility study of Vul-RAG, a RAG-based framework for source code vulnerability detection that enhances LLMs with high-level vulnerability knowledge. We first replicat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.04739","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.04739/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.04739","created_at":"2026-06-04T01:09:27.724159+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.04739v1","created_at":"2026-06-04T01:09:27.724159+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.04739","created_at":"2026-06-04T01:09:27.724159+00:00"},{"alias_kind":"pith_short_12","alias_value":"TYGPHL5L5LWE","created_at":"2026-06-04T01:09:27.724159+00:00"},{"alias_kind":"pith_short_16","alias_value":"TYGPHL5L5LWEDJML","created_at":"2026-06-04T01:09:27.724159+00:00"},{"alias_kind":"pith_short_8","alias_value":"TYGPHL5L","created_at":"2026-06-04T01:09:27.724159+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B","json":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B.json","graph_json":"https://pith.science/api/pith-number/TYGPHL5L5LWEDJMLLEWWSRUE3B/graph.json","events_json":"https://pith.science/api/pith-number/TYGPHL5L5LWEDJMLLEWWSRUE3B/events.json","paper":"https://pith.science/paper/TYGPHL5L"},"agent_actions":{"view_html":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B","download_json":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B.json","view_paper":"https://pith.science/paper/TYGPHL5L","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.04739&json=true","fetch_graph":"https://pith.science/api/pith-number/TYGPHL5L5LWEDJMLLEWWSRUE3B/graph.json","fetch_events":"https://pith.science/api/pith-number/TYGPHL5L5LWEDJMLLEWWSRUE3B/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B/action/timestamp_anchor","attest_storage":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B/action/storage_attestation","attest_author":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B/action/author_attestation","sign_citation":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B/action/citation_signature","submit_replication":"https://pith.science/pith/TYGPHL5L5LWEDJMLLEWWSRUE3B/action/replication_record"}},"created_at":"2026-06-04T01:09:27.724159+00:00","updated_at":"2026-06-04T01:09:27.724159+00:00"}