{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:X4WISGQ34QN2JEZGF55TYF5O6X","short_pith_number":"pith:X4WISGQ3","canonical_record":{"source":{"id":"2606.18619","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-17T02:32:45Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"4fd66b68c4b6f3d41800365e1453f9b6b00af4146e6ca344e266771e37d11085","abstract_canon_sha256":"83e9d232c33d7994046037814a38b133f6f26867624f79ee3055483f00cb4151"},"schema_version":"1.0"},"canonical_sha256":"bf2c891a1be41ba493262f7b3c17aef5dbc407c6b50fc607bcf8c20a58baa6a6","source":{"kind":"arxiv","id":"2606.18619","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.18619","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"arxiv_version","alias_value":"2606.18619v1","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.18619","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"pith_short_12","alias_value":"X4WISGQ34QN2","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"pith_short_16","alias_value":"X4WISGQ34QN2JEZG","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"pith_short_8","alias_value":"X4WISGQ3","created_at":"2026-06-19T16:11:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:X4WISGQ34QN2JEZGF55TYF5O6X","target":"record","payload":{"canonical_record":{"source":{"id":"2606.18619","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-17T02:32:45Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"4fd66b68c4b6f3d41800365e1453f9b6b00af4146e6ca344e266771e37d11085","abstract_canon_sha256":"83e9d232c33d7994046037814a38b133f6f26867624f79ee3055483f00cb4151"},"schema_version":"1.0"},"canonical_sha256":"bf2c891a1be41ba493262f7b3c17aef5dbc407c6b50fc607bcf8c20a58baa6a6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-19T16:11:42.624835Z","signature_b64":"Ui7dLCntJQADvT7WEX5ebEtgrer5ADYDD085q2F8dp45443jSG46guji3UcruVCPgF0qZ5zobJFsZ5KuR+dyBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf2c891a1be41ba493262f7b3c17aef5dbc407c6b50fc607bcf8c20a58baa6a6","last_reissued_at":"2026-06-19T16:11:42.624449Z","signature_status":"signed_v1","first_computed_at":"2026-06-19T16:11:42.624449Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.18619","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:11:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TLaNJUDl7OEQEnJcXeXNmcBv9QoLNG97bIQPGXy79S5TiN8a/FPs6Rv2TOEG4UKuVOP1dgtSUeEC6lM9wv5uBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-30T15:00:54.386607Z"},"content_sha256":"cd091ccfc704d8a719442b3673352bac52f6d454ff4f98d368364ee75a5e3419","schema_version":"1.0","event_id":"sha256:cd091ccfc704d8a719442b3673352bac52f6d454ff4f98d368364ee75a5e3419"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:X4WISGQ34QN2JEZGF55TYF5O6X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Code-Augur: Agentic Vulnerability Detection via Specification Inference","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.SE"],"primary_cat":"cs.CR","authors_text":"Abhik Roychoudhury, Dylan Wolff, Mehtab Zafar, Zhengxiong Luo","submitted_at":"2026-06-17T02:32:45Z","abstract_excerpt":"The advent of agentic vulnerability detection is already becoming a watershed moment for software security. Audits conducted entirely by autonomous LLM agents are uncovering critical vulnerabilities in fundamental software underpinning digital society. Many of these vulnerabilities remained masked for years, surfacing only now with AI agents. Yet the reasoning behind these discoveries remains alarmingly opaque and unvalidated. What assumptions did the agent make about a function's inputs when it deemed that function to be secure? Failures in reasoning and incorrect assumptions can lead to miss"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.18619","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.18619/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:11:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ERfOS8ek5y/dJInfd/A83UUe6RBSCekVehEzqoc8yB3tDeTHpG75FoA/U7sipw/ZawNFg1kOotQYX+0HBEzKDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-30T15:00:54.386980Z"},"content_sha256":"9dc2d0c297aa138bf669ed469095deddc93f690e24806e02f6e12934888040eb","schema_version":"1.0","event_id":"sha256:9dc2d0c297aa138bf669ed469095deddc93f690e24806e02f6e12934888040eb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X4WISGQ34QN2JEZGF55TYF5O6X/bundle.json","state_url":"https://pith.science/pith/X4WISGQ34QN2JEZGF55TYF5O6X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X4WISGQ34QN2JEZGF55TYF5O6X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-30T15:00:54Z","links":{"resolver":"https://pith.science/pith/X4WISGQ34QN2JEZGF55TYF5O6X","bundle":"https://pith.science/pith/X4WISGQ34QN2JEZGF55TYF5O6X/bundle.json","state":"https://pith.science/pith/X4WISGQ34QN2JEZGF55TYF5O6X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X4WISGQ34QN2JEZGF55TYF5O6X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:X4WISGQ34QN2JEZGF55TYF5O6X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"83e9d232c33d7994046037814a38b133f6f26867624f79ee3055483f00cb4151","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-17T02:32:45Z","title_canon_sha256":"4fd66b68c4b6f3d41800365e1453f9b6b00af4146e6ca344e266771e37d11085"},"schema_version":"1.0","source":{"id":"2606.18619","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.18619","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"arxiv_version","alias_value":"2606.18619v1","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.18619","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"pith_short_12","alias_value":"X4WISGQ34QN2","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"pith_short_16","alias_value":"X4WISGQ34QN2JEZG","created_at":"2026-06-19T16:11:42Z"},{"alias_kind":"pith_short_8","alias_value":"X4WISGQ3","created_at":"2026-06-19T16:11:42Z"}],"graph_snapshots":[{"event_id":"sha256:9dc2d0c297aa138bf669ed469095deddc93f690e24806e02f6e12934888040eb","target":"graph","created_at":"2026-06-19T16:11:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.18619/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The advent of agentic vulnerability detection is already becoming a watershed moment for software security. Audits conducted entirely by autonomous LLM agents are uncovering critical vulnerabilities in fundamental software underpinning digital society. Many of these vulnerabilities remained masked for years, surfacing only now with AI agents. Yet the reasoning behind these discoveries remains alarmingly opaque and unvalidated. What assumptions did the agent make about a function's inputs when it deemed that function to be secure? Failures in reasoning and incorrect assumptions can lead to miss","authors_text":"Abhik Roychoudhury, Dylan Wolff, Mehtab Zafar, Zhengxiong Luo","cross_cats":["cs.AI","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-17T02:32:45Z","title":"Code-Augur: Agentic Vulnerability Detection via Specification Inference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.18619","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cd091ccfc704d8a719442b3673352bac52f6d454ff4f98d368364ee75a5e3419","target":"record","created_at":"2026-06-19T16:11:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"83e9d232c33d7994046037814a38b133f6f26867624f79ee3055483f00cb4151","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-17T02:32:45Z","title_canon_sha256":"4fd66b68c4b6f3d41800365e1453f9b6b00af4146e6ca344e266771e37d11085"},"schema_version":"1.0","source":{"id":"2606.18619","kind":"arxiv","version":1}},"canonical_sha256":"bf2c891a1be41ba493262f7b3c17aef5dbc407c6b50fc607bcf8c20a58baa6a6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bf2c891a1be41ba493262f7b3c17aef5dbc407c6b50fc607bcf8c20a58baa6a6","first_computed_at":"2026-06-19T16:11:42.624449Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-19T16:11:42.624449Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ui7dLCntJQADvT7WEX5ebEtgrer5ADYDD085q2F8dp45443jSG46guji3UcruVCPgF0qZ5zobJFsZ5KuR+dyBA==","signature_status":"signed_v1","signed_at":"2026-06-19T16:11:42.624835Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.18619","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cd091ccfc704d8a719442b3673352bac52f6d454ff4f98d368364ee75a5e3419","sha256:9dc2d0c297aa138bf669ed469095deddc93f690e24806e02f6e12934888040eb"],"state_sha256":"eea28293289e8622324f1c5f52d3b2a2268fc885c27e182a2f0dc818b1b3123d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QgR/J5XzHVRnXIl3fxpj7jbH1d2oL5PpK6XsfOPf5/r/secWIGNXkv4GSagFRcSiU3D7L8GeGDvUSYfaAgXMAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-30T15:00:54.388925Z","bundle_sha256":"9daa8939a4526bdbfc39c4082e4ee7fc03356af3cefa34918b4e7785b2401b8f"}}