{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:FADFAP3VWJNVESAZH4TRGWA64S","short_pith_number":"pith:FADFAP3V","canonical_record":{"source":{"id":"1712.10056","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2017-12-28T20:58:46Z","cross_cats_sorted":["cs.LO"],"title_canon_sha256":"5f70782bd538a965affa6aa4263244b45d4b72e30a88f0778f1f5645a086806e","abstract_canon_sha256":"edb8182f50f7d6c9d0e62675a089fd2f396c229ea01894b4ffc75768eda75250"},"schema_version":"1.0"},"canonical_sha256":"2806503f75b25b5248193f2713581ee4b1093a78c20c41a7b38acd65f97beb85","source":{"kind":"arxiv","id":"1712.10056","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1712.10056","created_at":"2026-05-18T00:27:04Z"},{"alias_kind":"arxiv_version","alias_value":"1712.10056v1","created_at":"2026-05-18T00:27:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1712.10056","created_at":"2026-05-18T00:27:04Z"},{"alias_kind":"pith_short_12","alias_value":"FADFAP3VWJNV","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"FADFAP3VWJNVESAZ","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"FADFAP3V","created_at":"2026-05-18T12:31:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:FADFAP3VWJNVESAZH4TRGWA64S","target":"record","payload":{"canonical_record":{"source":{"id":"1712.10056","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2017-12-28T20:58:46Z","cross_cats_sorted":["cs.LO"],"title_canon_sha256":"5f70782bd538a965affa6aa4263244b45d4b72e30a88f0778f1f5645a086806e","abstract_canon_sha256":"edb8182f50f7d6c9d0e62675a089fd2f396c229ea01894b4ffc75768eda75250"},"schema_version":"1.0"},"canonical_sha256":"2806503f75b25b5248193f2713581ee4b1093a78c20c41a7b38acd65f97beb85","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:27:04.117027Z","signature_b64":"4hzU66UNUjIhvNjntZhu+8iBF7gL1897/s6KWZo5wCoHLZlzairzNXK6ywXVO41vc/G0wfocJL6Bys7j/9FLCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2806503f75b25b5248193f2713581ee4b1093a78c20c41a7b38acd65f97beb85","last_reissued_at":"2026-05-18T00:27:04.116449Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:27:04.116449Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1712.10056","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:27:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m2421VP6QMstow9dEoNEfmJdBRW2ov4eN+f9X9/sxM5mRtCFd7vTx4CqRFiZKKWy6B/wcIgSWTSUtVM1Y0tVDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T01:58:43.113653Z"},"content_sha256":"595b0843860e765b7dc06b23d49ec6bf618d6e0c7428fb7b5b50309d61190c28","schema_version":"1.0","event_id":"sha256:595b0843860e765b7dc06b23d49ec6bf618d6e0c7428fb7b5b50309d61190c28"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:FADFAP3VWJNVESAZH4TRGWA64S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Inferring Formal Properties of Production Key-Value Stores","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LO"],"primary_cat":"cs.DC","authors_text":"Edgar Pek, Indranil Gupta, Karl Palmskog, Muntasir Raihan Rahman, P. Madhusudan, Pranav Garg","submitted_at":"2017-12-28T20:58:46Z","abstract_excerpt":"Production distributed systems are challenging to formally verify, in particular when they are based on distributed protocols that are not rigorously described or fully understood. In this paper, we derive models and properties for two core distributed protocols used in eventually consistent production key-value stores such as Riak and Cassandra. We propose a novel modeling called certified program models, where complete distributed systems are captured as programs written in traditional systems languages such as concurrent C. Specifically, we model the read-repair and hinted-handoff recovery "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1712.10056","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:27:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A3y60dGaZ2QKsgry2OjsRAOQ4b8iVB8Lyd+MD+NR7EtX9G26SyvCWcuDvCxolVNwP8EoPSAG+n3Q1vZ6LlLuCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T01:58:43.114015Z"},"content_sha256":"2a40a7b44d6d3cd1205703b7f932c2f98d801d1c8d325bf87350ddbc3fa8ae06","schema_version":"1.0","event_id":"sha256:2a40a7b44d6d3cd1205703b7f932c2f98d801d1c8d325bf87350ddbc3fa8ae06"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FADFAP3VWJNVESAZH4TRGWA64S/bundle.json","state_url":"https://pith.science/pith/FADFAP3VWJNVESAZH4TRGWA64S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FADFAP3VWJNVESAZH4TRGWA64S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T01:58:43Z","links":{"resolver":"https://pith.science/pith/FADFAP3VWJNVESAZH4TRGWA64S","bundle":"https://pith.science/pith/FADFAP3VWJNVESAZH4TRGWA64S/bundle.json","state":"https://pith.science/pith/FADFAP3VWJNVESAZH4TRGWA64S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FADFAP3VWJNVESAZH4TRGWA64S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:FADFAP3VWJNVESAZH4TRGWA64S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"edb8182f50f7d6c9d0e62675a089fd2f396c229ea01894b4ffc75768eda75250","cross_cats_sorted":["cs.LO"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2017-12-28T20:58:46Z","title_canon_sha256":"5f70782bd538a965affa6aa4263244b45d4b72e30a88f0778f1f5645a086806e"},"schema_version":"1.0","source":{"id":"1712.10056","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1712.10056","created_at":"2026-05-18T00:27:04Z"},{"alias_kind":"arxiv_version","alias_value":"1712.10056v1","created_at":"2026-05-18T00:27:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1712.10056","created_at":"2026-05-18T00:27:04Z"},{"alias_kind":"pith_short_12","alias_value":"FADFAP3VWJNV","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"FADFAP3VWJNVESAZ","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"FADFAP3V","created_at":"2026-05-18T12:31:15Z"}],"graph_snapshots":[{"event_id":"sha256:2a40a7b44d6d3cd1205703b7f932c2f98d801d1c8d325bf87350ddbc3fa8ae06","target":"graph","created_at":"2026-05-18T00:27:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Production distributed systems are challenging to formally verify, in particular when they are based on distributed protocols that are not rigorously described or fully understood. In this paper, we derive models and properties for two core distributed protocols used in eventually consistent production key-value stores such as Riak and Cassandra. We propose a novel modeling called certified program models, where complete distributed systems are captured as programs written in traditional systems languages such as concurrent C. Specifically, we model the read-repair and hinted-handoff recovery ","authors_text":"Edgar Pek, Indranil Gupta, Karl Palmskog, Muntasir Raihan Rahman, P. Madhusudan, Pranav Garg","cross_cats":["cs.LO"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2017-12-28T20:58:46Z","title":"Inferring Formal Properties of Production Key-Value Stores"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1712.10056","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:595b0843860e765b7dc06b23d49ec6bf618d6e0c7428fb7b5b50309d61190c28","target":"record","created_at":"2026-05-18T00:27:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"edb8182f50f7d6c9d0e62675a089fd2f396c229ea01894b4ffc75768eda75250","cross_cats_sorted":["cs.LO"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2017-12-28T20:58:46Z","title_canon_sha256":"5f70782bd538a965affa6aa4263244b45d4b72e30a88f0778f1f5645a086806e"},"schema_version":"1.0","source":{"id":"1712.10056","kind":"arxiv","version":1}},"canonical_sha256":"2806503f75b25b5248193f2713581ee4b1093a78c20c41a7b38acd65f97beb85","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2806503f75b25b5248193f2713581ee4b1093a78c20c41a7b38acd65f97beb85","first_computed_at":"2026-05-18T00:27:04.116449Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:27:04.116449Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4hzU66UNUjIhvNjntZhu+8iBF7gL1897/s6KWZo5wCoHLZlzairzNXK6ywXVO41vc/G0wfocJL6Bys7j/9FLCA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:27:04.117027Z","signed_message":"canonical_sha256_bytes"},"source_id":"1712.10056","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:595b0843860e765b7dc06b23d49ec6bf618d6e0c7428fb7b5b50309d61190c28","sha256:2a40a7b44d6d3cd1205703b7f932c2f98d801d1c8d325bf87350ddbc3fa8ae06"],"state_sha256":"90c5f15c62d58a0a58cddbb377ca1bdb3385e95118b9f858eeae9fb1b855e962"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HxXQojCwGcMYOSzagkh0e7NCtxTAlzRHIAQpEmqN9SwOFP3RvPTKcb81ay+ZxlvxDlF1YJtSNuQtBkABxWdfAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T01:58:43.116170Z","bundle_sha256":"8fe1ea1591fd5ea568552bae9759d0de7666fffc90f9284403bd2e15751f8df0"}}