{
  "schema": "cortist.claim_graph.v2",
  "asOf": "2026-11-05",
  "claim": {
    "id": "claim:CL-0011",
    "type": "LedgerClaim",
    "claimId": "CL-0011",
    "claim": "How many of OpenAI's 948 reported Linux root-exploit findings lead to independently verified and deployed fixes?",
    "status": "Maintainer-accepted fixes not independently counted",
    "originalState": "pending",
    "sourceDate": "2026-11-04",
    "snapshotDate": "2026-11-05",
    "originalVersion": 1,
    "canonicalUrl": "https://cortist.com/reality-ledger/cl-0011/",
    "snapshotUrl": "https://cortist.com/data/reality-ledger/records/cl-0011-v1.json",
    "snapshotSha256": "e7e7152c210f591141edcfe4faa44a36d84a5a21d5de892ef6f368b98810f169",
    "attribution": "OpenAI",
    "topic": "AI Cybersecurity",
    "evidence": "OpenAI reports an October 2026 agent-assisted Linux kernel research campaign that produced 2,308 candidate findings, dynamically reproduced 1,724 faults and identified 948 distinct local privilege-escalation vulnerabilities through exploit and patch analysis, with $1,213,430 in reported API credits. Human researchers were assigned to review and report findings to maintainers. The published company report is evidence for the reported experiment and its methodology, not independent confirmation that all 948 fixes were merged or deployed.",
    "limitations": "The 948 count is deduplicated according to OpenAI's own patch-variant analysis. Candidate patches and working exploits are not proof of upstream acceptance, distribution delivery, exploit uniqueness confirmed by independent maintainers or measured security benefits for users. Company API credits exclude broader operational costs.",
    "nextEvidence": "Dated, deduplicated references to upstream Linux commits, advisories, maintainer acknowledgments, downstream distribution releases and independent reproduction of a disclosed sample; track accepted versus still pending fixes.",
    "statusAsOf": "2026-11-05",
    "independentlyResolved": false,
    "kind": "research_replication",
    "deadline": null,
    "verificationCriteria": [
      "Locate accepted upstream commits and distribution security advisories linked to deduplicated findings.",
      "Distinguish maintainer-reviewed patches from OpenAI-generated candidate patches.",
      "Record independent reproduction and patch-regression results where available."
    ]
  },
  "edges": [
    {
      "id": "edge:claim:CL-0011:ATTRIBUTED_TO:actor:54497523-6",
      "from": "claim:CL-0011",
      "relation": "ATTRIBUTED_TO",
      "to": "actor:54497523-6"
    },
    {
      "id": "edge:claim:CL-0011:ORIGINAL_SOURCE:source:7677e782-56",
      "from": "claim:CL-0011",
      "relation": "ORIGINAL_SOURCE",
      "to": "source:7677e782-56"
    },
    {
      "id": "edge:claim:CL-0011:TOPIC:topic:ai-cybersecurity",
      "from": "claim:CL-0011",
      "relation": "TOPIC",
      "to": "topic:ai-cybersecurity"
    },
    {
      "id": "edge:claim:CL-0011:EDITORIAL_ANALYSIS:news:openai-linux-kernel-948-lpe-agent-pipeline-2026",
      "from": "claim:CL-0011",
      "relation": "EDITORIAL_ANALYSIS",
      "to": "news:openai-linux-kernel-948-lpe-agent-pipeline-2026"
    },
    {
      "id": "edge:claim:CL-0011:TIMELINE_EVENT:event:CL-0011:v1:01",
      "from": "claim:CL-0011",
      "relation": "TIMELINE_EVENT",
      "to": "event:CL-0011:v1:01"
    },
    {
      "id": "edge:claim:CL-0011:TIMELINE_EVENT:event:CL-0011:v1:02",
      "from": "claim:CL-0011",
      "relation": "TIMELINE_EVENT",
      "to": "event:CL-0011:v1:02"
    }
  ],
  "originalTimeline": [
    {
      "id": "event:CL-0011:v1:01",
      "claimId": "CL-0011",
      "originalText": "2026-10 (mid-month) | Controlled security campaign | OpenAI reports finding, reproducing and assessing Linux kernel vulnerabilities.",
      "originalSnapshotUrl": "https://cortist.com/data/reality-ledger/records/cl-0011-v1.json",
      "kind": "NEW_20261105_BASELINE_EVENT",
      "newEvidence": false
    },
    {
      "id": "event:CL-0011:v1:02",
      "claimId": "CL-0011",
      "originalText": "2026-11-04 | Company report published | 948 distinct local privilege-escalation vulnerabilities reported; merged fix count not independently audited.",
      "originalSnapshotUrl": "https://cortist.com/data/reality-ledger/records/cl-0011-v1.json",
      "kind": "NEW_20261105_BASELINE_EVENT",
      "newEvidence": false
    }
  ],
  "sources": [
    {
      "name": "OpenAI: A thousand fewer paths to root (original security report)",
      "url": "https://openai.com/index/a-thousand-fewer-paths-to-root/",
      "published": "2026-11-04"
    }
  ],
  "originalCase": "https://cortist.com/reality-ledger/cl-0011/",
  "originalSnapshot": "https://cortist.com/data/reality-ledger/records/cl-0011-v1.json",
  "snapshotSha256": "e7e7152c210f591141edcfe4faa44a36d84a5a21d5de892ef6f368b98810f169"
}