{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2013:C6TOX3PMZPEARHMW22L3GLIGNJ","short_pith_number":"pith:C6TOX3PM","canonical_record":{"source":{"id":"1309.3914","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2013-09-16T11:50:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"08b3915f2f85d700ff1273cdaba698a001ba2539213c630542c479691c13efe1","abstract_canon_sha256":"f17e4078efa9ef25b390d58fcedbca55d5a957d9b10aff288a96c8f09649f5f4"},"schema_version":"1.0"},"canonical_sha256":"17a6ebedeccbc8089d96d697b32d066a7f2cbc6607b42bf0f9292e23dc1cc341","source":{"kind":"arxiv","id":"1309.3914","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1309.3914","created_at":"2026-05-18T03:13:11Z"},{"alias_kind":"arxiv_version","alias_value":"1309.3914v1","created_at":"2026-05-18T03:13:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1309.3914","created_at":"2026-05-18T03:13:11Z"},{"alias_kind":"pith_short_12","alias_value":"C6TOX3PMZPEA","created_at":"2026-05-18T12:27:40Z"},{"alias_kind":"pith_short_16","alias_value":"C6TOX3PMZPEARHMW","created_at":"2026-05-18T12:27:40Z"},{"alias_kind":"pith_short_8","alias_value":"C6TOX3PM","created_at":"2026-05-18T12:27:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2013:C6TOX3PMZPEARHMW22L3GLIGNJ","target":"record","payload":{"canonical_record":{"source":{"id":"1309.3914","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2013-09-16T11:50:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"08b3915f2f85d700ff1273cdaba698a001ba2539213c630542c479691c13efe1","abstract_canon_sha256":"f17e4078efa9ef25b390d58fcedbca55d5a957d9b10aff288a96c8f09649f5f4"},"schema_version":"1.0"},"canonical_sha256":"17a6ebedeccbc8089d96d697b32d066a7f2cbc6607b42bf0f9292e23dc1cc341","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T03:13:11.878888Z","signature_b64":"Q3UoqZiAtvEbNXozdwG+J28eSlkrJfDHIaijCe+K698RURc6RHSyRaSpMVoPyTGg0xbJDN/dcXFfqOtkd+zHCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"17a6ebedeccbc8089d96d697b32d066a7f2cbc6607b42bf0f9292e23dc1cc341","last_reissued_at":"2026-05-18T03:13:11.878003Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T03:13:11.878003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1309.3914","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:13:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eVxc5rVco8ZwFN/DYkKX9f8WGabPR93NQpyS6+/yLorLvzZYRynTr3d2BURblfDntvJZn3rFIvU1gModBsoWBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T20:38:24.972552Z"},"content_sha256":"d9fab2f30d3cc0e396f1b4554741f82ed149e82ace027a0fea04585f8dd4a864","schema_version":"1.0","event_id":"sha256:d9fab2f30d3cc0e396f1b4554741f82ed149e82ace027a0fea04585f8dd4a864"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2013:C6TOX3PMZPEARHMW22L3GLIGNJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SafeJS: Hermetic Sandboxing for JavaScript","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.PL","authors_text":"Damien Cassou (INRIA Lille - Nord Europe, LIFL), Nicolas Petton (INRIA Lille - Nord Europe), St\\'ephane Ducasse (INRIA Lille - Nord Europe)","submitted_at":"2013-09-16T11:50:39Z","abstract_excerpt":"Isolating programs is an important mechanism to support more secure applications. Isolating program in dynamic languages such as JavaScript is even more challenging since reflective operations can circumvent simple mechanisms that could protect program parts. In this article we present SafeJS, an approach and implementation that offers isolation based on separate sandboxes and control of information exchanged between them. In SafeJS, sandboxes based on web workers do not share any data. Data exchanged between sandboxes is solely based on strings. Using different policies, this infrastructure s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1309.3914","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:13:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JTJprTZSX4K8Sx/B9ecTJKDt6yfVZQEHt0zkvZfzZ8+WkXvk7Kze0pISTyP5yRhXrQiqO/gCNEKfCX7xar4TAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T20:38:24.972907Z"},"content_sha256":"6bd935d0121ddb3f074cf85e03b60be2fda0eee854e9a7f7564c6c549b0bad19","schema_version":"1.0","event_id":"sha256:6bd935d0121ddb3f074cf85e03b60be2fda0eee854e9a7f7564c6c549b0bad19"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C6TOX3PMZPEARHMW22L3GLIGNJ/bundle.json","state_url":"https://pith.science/pith/C6TOX3PMZPEARHMW22L3GLIGNJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C6TOX3PMZPEARHMW22L3GLIGNJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-03T20:38:24Z","links":{"resolver":"https://pith.science/pith/C6TOX3PMZPEARHMW22L3GLIGNJ","bundle":"https://pith.science/pith/C6TOX3PMZPEARHMW22L3GLIGNJ/bundle.json","state":"https://pith.science/pith/C6TOX3PMZPEARHMW22L3GLIGNJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C6TOX3PMZPEARHMW22L3GLIGNJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2013:C6TOX3PMZPEARHMW22L3GLIGNJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f17e4078efa9ef25b390d58fcedbca55d5a957d9b10aff288a96c8f09649f5f4","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2013-09-16T11:50:39Z","title_canon_sha256":"08b3915f2f85d700ff1273cdaba698a001ba2539213c630542c479691c13efe1"},"schema_version":"1.0","source":{"id":"1309.3914","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1309.3914","created_at":"2026-05-18T03:13:11Z"},{"alias_kind":"arxiv_version","alias_value":"1309.3914v1","created_at":"2026-05-18T03:13:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1309.3914","created_at":"2026-05-18T03:13:11Z"},{"alias_kind":"pith_short_12","alias_value":"C6TOX3PMZPEA","created_at":"2026-05-18T12:27:40Z"},{"alias_kind":"pith_short_16","alias_value":"C6TOX3PMZPEARHMW","created_at":"2026-05-18T12:27:40Z"},{"alias_kind":"pith_short_8","alias_value":"C6TOX3PM","created_at":"2026-05-18T12:27:40Z"}],"graph_snapshots":[{"event_id":"sha256:6bd935d0121ddb3f074cf85e03b60be2fda0eee854e9a7f7564c6c549b0bad19","target":"graph","created_at":"2026-05-18T03:13:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Isolating programs is an important mechanism to support more secure applications. Isolating program in dynamic languages such as JavaScript is even more challenging since reflective operations can circumvent simple mechanisms that could protect program parts. In this article we present SafeJS, an approach and implementation that offers isolation based on separate sandboxes and control of information exchanged between them. In SafeJS, sandboxes based on web workers do not share any data. Data exchanged between sandboxes is solely based on strings. Using different policies, this infrastructure s","authors_text":"Damien Cassou (INRIA Lille - Nord Europe, LIFL), Nicolas Petton (INRIA Lille - Nord Europe), St\\'ephane Ducasse (INRIA Lille - Nord Europe)","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2013-09-16T11:50:39Z","title":"SafeJS: Hermetic Sandboxing for JavaScript"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1309.3914","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d9fab2f30d3cc0e396f1b4554741f82ed149e82ace027a0fea04585f8dd4a864","target":"record","created_at":"2026-05-18T03:13:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f17e4078efa9ef25b390d58fcedbca55d5a957d9b10aff288a96c8f09649f5f4","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2013-09-16T11:50:39Z","title_canon_sha256":"08b3915f2f85d700ff1273cdaba698a001ba2539213c630542c479691c13efe1"},"schema_version":"1.0","source":{"id":"1309.3914","kind":"arxiv","version":1}},"canonical_sha256":"17a6ebedeccbc8089d96d697b32d066a7f2cbc6607b42bf0f9292e23dc1cc341","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"17a6ebedeccbc8089d96d697b32d066a7f2cbc6607b42bf0f9292e23dc1cc341","first_computed_at":"2026-05-18T03:13:11.878003Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T03:13:11.878003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Q3UoqZiAtvEbNXozdwG+J28eSlkrJfDHIaijCe+K698RURc6RHSyRaSpMVoPyTGg0xbJDN/dcXFfqOtkd+zHCA==","signature_status":"signed_v1","signed_at":"2026-05-18T03:13:11.878888Z","signed_message":"canonical_sha256_bytes"},"source_id":"1309.3914","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d9fab2f30d3cc0e396f1b4554741f82ed149e82ace027a0fea04585f8dd4a864","sha256:6bd935d0121ddb3f074cf85e03b60be2fda0eee854e9a7f7564c6c549b0bad19"],"state_sha256":"d02fd695b2cd863bf473d1ca481d650eab1d4f87b6037b4c3add7a6947d42644"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vu0IVePs52lJ69QpcZuT5FZei6K+3eXncoX/+DOiraJ94b5C4qZsy4nX2Arb++pz0427K6uiVGKHD+8zflEhBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-03T20:38:24.974955Z","bundle_sha256":"6664a69dc8ee846f18b2c2e8e4cb7d3e8edd7a3ec6395ee8aec1d0c8c92092e4"}}