Triple

T8288289
Position Surface form Disambiguated ID Type / Status
Subject Kernel32 E193833 entity
Predicate exportsFunction P38257 FINISHED
Object CreateProcess
CreateProcess is a core Windows API function used to start new processes and their primary threads with specified security, environment, and startup parameters.
E193833 NE FINISHED

How this triple was built (4 steps)

Every LLM step that produced this triple, in pipeline order — named-entity classification, the disambiguation choices (the exact options shown, with the pick highlighted), and the generated description. The batch + timestamp of each is in the Provenance table below.

NER Named-entity recognition gpt-5-mini
Instruction
Given a phrase, classify it is english named entity (e.g., persons, organizations, works of art) in Latin script, or not (e.g., literals, dates, URLs, verbose phrases). For disambiguation, the statement where the phrase occurs as object is also given. Please return a JSON object with `phrase` (string, the phrase being analyzed) and `is_ne` (boolean, indicating whether the phrase is a Named Entity).
Input
Phrase: CreateProcess | Statement: [Kernel32, exportsFunction, CreateProcess]
NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07
Target entity: CreateProcess
Context triple: [Kernel32, exportsFunction, CreateProcess]
  • A. Create
    Create is an American public television multicast network focused on how-to and lifestyle programming, including cooking, travel, home improvement, and crafts.
  • B. Kernel32
    Kernel32 is a core Windows system library that provides fundamental kernel-level functions for process, memory, and thread management in the Win32 API.
  • C. Exec
    Exec is the multitasking operating system kernel at the core of the Amiga computer platform, managing tasks, memory, and hardware resources.
  • D. Upstart
    Upstart is an event-based init daemon developed for Linux systems to manage services and system startup and shutdown.
  • E. Windows Process Activation Service
    Windows Process Activation Service (WAS) is a Windows server component that manages application pool configuration and worker process activation for web and non-HTTP services, enabling flexible hosting of applications such as those built with Windows Communication Foundation.
  • F. None of above. chosen
  • G. Unsure - the case is ambiguous/there is not enough information to decide.
NEDg Description generation gpt-5.1
Instruction
Generate a one-sentence description of the target entity. 
You are given a context triple in the form (subject, predicate, object), where the object is the target entity. 
# Instructions
Use the triple to infer relevant information about the entity. Describe the entity based on what is most defining, well-known. 
Avoid repeating the information from the triple, unless really essential.
# Response Format
Return only the sentence: "Description: [one-sentence description of the target entity]"
Input
Entity: CreateProcess
Triple: [Kernel32, exportsFunction, CreateProcess]
Generated description
CreateProcess is a core Windows API function used to start new processes and their primary threads with specified security, environment, and startup parameters.
NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07
Target entity: CreateProcess
Target entity description: CreateProcess is a core Windows API function used to start new processes and their primary threads with specified security, environment, and startup parameters.
  • A. Create
    Create is an American public television multicast network focused on how-to and lifestyle programming, including cooking, travel, home improvement, and crafts.
  • B. Kernel32 chosen
    Kernel32 is a core Windows system library that provides fundamental kernel-level functions for process, memory, and thread management in the Win32 API.
  • C. Exec
    Exec is the multitasking operating system kernel at the core of the Amiga computer platform, managing tasks, memory, and hardware resources.
  • D. Upstart
    Upstart is an event-based init daemon developed for Linux systems to manage services and system startup and shutdown.
  • E. Windows Process Activation Service
    Windows Process Activation Service (WAS) is a Windows server component that manages application pool configuration and worker process activation for web and non-HTTP services, enabling flexible hosting of applications such as those built with Windows Communication Foundation.
  • F. None of above.

Provenance (5 batches)

The batch behind each pipeline step, in order, with when it ran. Timestamps are batch-level — stages were processed in waves, so the object chain (NER → NED1 → NEDg → NED2) reads in order, but predicate / elicitation batches can sit in a different wave.

Step Stage Batch ID Status When
creating Elicitation batch_69ca82e32db481908b72f3804fa71152 completed March 30, 2026, 2:04 p.m.
NER Named-entity recognition batch_69cb7c98e15c8190ac2a0b2a5ff834c9 completed March 31, 2026, 7:49 a.m.
NED1 Entity disambiguation (via context triple) batch_69cd68898610819091a76f89cd2a6aa2 completed April 1, 2026, 6:48 p.m.
NEDg Description generation batch_69cd6d55196881909cf5ec925792e09f completed April 1, 2026, 7:09 p.m.
NED2 Entity disambiguation (via description) batch_69cd7e2bdae08190adc51e904e85695e completed April 1, 2026, 8:21 p.m.
Created at: March 30, 2026, 5:52 p.m.