{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:WMK4LUFIA5CFPMMDWDLRTLMDO4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bf1165c45aa6a0d63d18f5639f13a5e743b28eec5f2fc5eff4082358dce1acf4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T01:25:43Z","title_canon_sha256":"aa7d174f3ebf75082361b9940c262be3647ac3f957bdbae3454acd494f9ec598"},"schema_version":"1.0","source":{"id":"2605.29226","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.29226","created_at":"2026-05-29T01:05:25Z"},{"alias_kind":"arxiv_version","alias_value":"2605.29226v1","created_at":"2026-05-29T01:05:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.29226","created_at":"2026-05-29T01:05:25Z"},{"alias_kind":"pith_short_12","alias_value":"WMK4LUFIA5CF","created_at":"2026-05-29T01:05:25Z"},{"alias_kind":"pith_short_16","alias_value":"WMK4LUFIA5CFPMMD","created_at":"2026-05-29T01:05:25Z"},{"alias_kind":"pith_short_8","alias_value":"WMK4LUFI","created_at":"2026-05-29T01:05:25Z"}],"graph_snapshots":[{"event_id":"sha256:d3265bf2724a8b608774684a9635362fd251b97c568ccc004f9b43550060cb83","target":"graph","created_at":"2026-05-29T01:05:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.29226/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Today's digital ecosystem relies heavily on software supply chains, which enable developers to reuse code and ship software at scale. However, a single vulnerable component can jeopardize the entire supply chain. In recent years, cyberattacks in software supply chains have become increasingly common. These attacks can disrupt critical systems and put organizations, including major software companies, government agencies, and open-source contributors, at risk. This growing threat has led to increased attention from both the software industry and the U.S. government toward strengthening software","authors_text":"Alexandros Kapravelos, Christian Kastner, Dominik Wermke, Laurie Williams, Md Atiqur Rahman, Michel Cucker, William Enck, Yasemin Acar","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T01:25:43Z","title":"S3C2 Summit 2025-09: Industry Secure Supply Chain Summit"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.29226","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:096da379159a7ac08a9219f67922ceddb294b81ca3a5a3203b2aedda9595466e","target":"record","created_at":"2026-05-29T01:05:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bf1165c45aa6a0d63d18f5639f13a5e743b28eec5f2fc5eff4082358dce1acf4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T01:25:43Z","title_canon_sha256":"aa7d174f3ebf75082361b9940c262be3647ac3f957bdbae3454acd494f9ec598"},"schema_version":"1.0","source":{"id":"2605.29226","kind":"arxiv","version":1}},"canonical_sha256":"b315c5d0a8074457b183b0d719ad83770ab4f68832df06fe5323c73e573a0f3e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b315c5d0a8074457b183b0d719ad83770ab4f68832df06fe5323c73e573a0f3e","first_computed_at":"2026-05-29T01:05:25.824485Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-29T01:05:25.824485Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eQ1+wpE3upEERiNqRNAR4KDtcQV7f6qFFMiSBghCljGjDqunuQA7YE2C9nawvDE9Uft3MAL7WzjNp9UBH0G5Bw==","signature_status":"signed_v1","signed_at":"2026-05-29T01:05:25.825233Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.29226","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:096da379159a7ac08a9219f67922ceddb294b81ca3a5a3203b2aedda9595466e","sha256:d3265bf2724a8b608774684a9635362fd251b97c568ccc004f9b43550060cb83"],"state_sha256":"46e929234ab58e6a07a853e5046f12e22fce2f32fb7d64ce37a151550f95adda"}