{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:D7JTZHPCGQFOJMCIMNIVELIYZG","short_pith_number":"pith:D7JTZHPC","canonical_record":{"source":{"id":"2205.15915","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-31T16:03:53Z","cross_cats_sorted":[],"title_canon_sha256":"cdb9e986594f9fa748afe4b530c1626e99451fe464e780c48d07c022cc9db881","abstract_canon_sha256":"7db76d241ad8d2e0c79d320cc8398d0fd22c6d647be25f29959f8d27a89141ff"},"schema_version":"1.0"},"canonical_sha256":"1fd33c9de2340ae4b0486351522d18c9b0620c0a83fa07de7d6310b680c2306a","source":{"kind":"arxiv","id":"2205.15915","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.15915","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"arxiv_version","alias_value":"2205.15915v1","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.15915","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"pith_short_12","alias_value":"D7JTZHPCGQFO","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"pith_short_16","alias_value":"D7JTZHPCGQFOJMCI","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"pith_short_8","alias_value":"D7JTZHPC","created_at":"2026-07-05T04:28:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:D7JTZHPCGQFOJMCIMNIVELIYZG","target":"record","payload":{"canonical_record":{"source":{"id":"2205.15915","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-31T16:03:53Z","cross_cats_sorted":[],"title_canon_sha256":"cdb9e986594f9fa748afe4b530c1626e99451fe464e780c48d07c022cc9db881","abstract_canon_sha256":"7db76d241ad8d2e0c79d320cc8398d0fd22c6d647be25f29959f8d27a89141ff"},"schema_version":"1.0"},"canonical_sha256":"1fd33c9de2340ae4b0486351522d18c9b0620c0a83fa07de7d6310b680c2306a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:28:03.728104Z","signature_b64":"Z6Jd5Pz1zO8YpWM6phP2NBhowlmWHKWLZ0gcnmDwHSuyyP3MUnSuJe6mfB4UUdybaXaCndimMukMG5WmIHhzAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1fd33c9de2340ae4b0486351522d18c9b0620c0a83fa07de7d6310b680c2306a","last_reissued_at":"2026-07-05T04:28:03.727675Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:28:03.727675Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.15915","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:28:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l+0/mmtxOI9D5Mkw+nw9MQrOmx7UPIda3eTSdHVgI7TCmWG4T3EiBkmr5eYd3NIE4FnBXZh4KS5aCrvZderMDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:59:55.139584Z"},"content_sha256":"a990a7dc87f5dc670340e96042d069c291078937af7a8d510303d6427fa0a0a6","schema_version":"1.0","event_id":"sha256:a990a7dc87f5dc670340e96042d069c291078937af7a8d510303d6427fa0a0a6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:D7JTZHPCGQFOJMCIMNIVELIYZG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IFCIL: An Information Flow Configuration Language for SELinux (Extended Version)","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"David Basin, Letterio Galletta, Lorenzo Ceragioli, Pierpaolo Degano","submitted_at":"2022-05-31T16:03:53Z","abstract_excerpt":"Security Enhanced Linux (SELinux) is a security architecture for Linux implementing mandatory access control. It has been used in numerous security-critical contexts ranging from servers to mobile devices. But this is challenging as SELinux security policies are difficult to write, understand, and maintain. Recently, the intermediate language CIL was introduced to foster the development of high-level policy languages and to write structured configurations. However, CIL lacks mechanisms for ensuring that the resulting configurations obey desired information flow policies. To remedy this, we pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.15915","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.15915/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:28:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xoyLrjduZlAp3kfFopZQKRwcUwlwnRgTp65V/Nuf1uASBIvQxqnWRosvvT5GBu0u67ZUj9XSt/T37idw/sIiBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:59:55.139963Z"},"content_sha256":"4f58bf737e6ad9b83aaaf3592ad64389a4bf81fc41180629858d02b462b02cf5","schema_version":"1.0","event_id":"sha256:4f58bf737e6ad9b83aaaf3592ad64389a4bf81fc41180629858d02b462b02cf5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D7JTZHPCGQFOJMCIMNIVELIYZG/bundle.json","state_url":"https://pith.science/pith/D7JTZHPCGQFOJMCIMNIVELIYZG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D7JTZHPCGQFOJMCIMNIVELIYZG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:59:55Z","links":{"resolver":"https://pith.science/pith/D7JTZHPCGQFOJMCIMNIVELIYZG","bundle":"https://pith.science/pith/D7JTZHPCGQFOJMCIMNIVELIYZG/bundle.json","state":"https://pith.science/pith/D7JTZHPCGQFOJMCIMNIVELIYZG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D7JTZHPCGQFOJMCIMNIVELIYZG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:D7JTZHPCGQFOJMCIMNIVELIYZG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7db76d241ad8d2e0c79d320cc8398d0fd22c6d647be25f29959f8d27a89141ff","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-31T16:03:53Z","title_canon_sha256":"cdb9e986594f9fa748afe4b530c1626e99451fe464e780c48d07c022cc9db881"},"schema_version":"1.0","source":{"id":"2205.15915","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.15915","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"arxiv_version","alias_value":"2205.15915v1","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.15915","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"pith_short_12","alias_value":"D7JTZHPCGQFO","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"pith_short_16","alias_value":"D7JTZHPCGQFOJMCI","created_at":"2026-07-05T04:28:03Z"},{"alias_kind":"pith_short_8","alias_value":"D7JTZHPC","created_at":"2026-07-05T04:28:03Z"}],"graph_snapshots":[{"event_id":"sha256:4f58bf737e6ad9b83aaaf3592ad64389a4bf81fc41180629858d02b462b02cf5","target":"graph","created_at":"2026-07-05T04:28:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.15915/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security Enhanced Linux (SELinux) is a security architecture for Linux implementing mandatory access control. It has been used in numerous security-critical contexts ranging from servers to mobile devices. But this is challenging as SELinux security policies are difficult to write, understand, and maintain. Recently, the intermediate language CIL was introduced to foster the development of high-level policy languages and to write structured configurations. However, CIL lacks mechanisms for ensuring that the resulting configurations obey desired information flow policies. To remedy this, we pro","authors_text":"David Basin, Letterio Galletta, Lorenzo Ceragioli, Pierpaolo Degano","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-31T16:03:53Z","title":"IFCIL: An Information Flow Configuration Language for SELinux (Extended Version)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.15915","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a990a7dc87f5dc670340e96042d069c291078937af7a8d510303d6427fa0a0a6","target":"record","created_at":"2026-07-05T04:28:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7db76d241ad8d2e0c79d320cc8398d0fd22c6d647be25f29959f8d27a89141ff","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-31T16:03:53Z","title_canon_sha256":"cdb9e986594f9fa748afe4b530c1626e99451fe464e780c48d07c022cc9db881"},"schema_version":"1.0","source":{"id":"2205.15915","kind":"arxiv","version":1}},"canonical_sha256":"1fd33c9de2340ae4b0486351522d18c9b0620c0a83fa07de7d6310b680c2306a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1fd33c9de2340ae4b0486351522d18c9b0620c0a83fa07de7d6310b680c2306a","first_computed_at":"2026-07-05T04:28:03.727675Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:28:03.727675Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Z6Jd5Pz1zO8YpWM6phP2NBhowlmWHKWLZ0gcnmDwHSuyyP3MUnSuJe6mfB4UUdybaXaCndimMukMG5WmIHhzAg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:28:03.728104Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.15915","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a990a7dc87f5dc670340e96042d069c291078937af7a8d510303d6427fa0a0a6","sha256:4f58bf737e6ad9b83aaaf3592ad64389a4bf81fc41180629858d02b462b02cf5"],"state_sha256":"0d3bd497a5002ab8a8caf2a65e722dfb6bdfcb2ca33e75b5c3aefc6cb20dfaaf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ax8dlE4zm99buJjEnFngDMWsZT8THfa1ak9Xpn167PbBtFRVIQzPK0341eBSWr1qHMGoVwaZkRrZYfY4DflOBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:59:55.141804Z","bundle_sha256":"c4bc0e47637373536aef467e86ab1e6b2c3962a71e87bab144d9fe39a714a3c4"}}