{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2014:JUXTXG3UQS7372WTVYTSY2NB7Y","short_pith_number":"pith:JUXTXG3U","canonical_record":{"source":{"id":"1405.1115","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-05-06T00:54:04Z","cross_cats_sorted":[],"title_canon_sha256":"54fce51404e0e8ba81d16440cc67fc794beeb41fbd710384fb446f9be5583ba6","abstract_canon_sha256":"1c28b85f64b7d58766eff1e27b7f7a3bc3ef7f40129a1355d4fb5f4fc73ca4d4"},"schema_version":"1.0"},"canonical_sha256":"4d2f3b9b7484bfbfead3ae272c69a1fe1c7edd10940d1610ada50cdd02702d65","source":{"kind":"arxiv","id":"1405.1115","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1405.1115","created_at":"2026-05-18T02:52:33Z"},{"alias_kind":"arxiv_version","alias_value":"1405.1115v1","created_at":"2026-05-18T02:52:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1405.1115","created_at":"2026-05-18T02:52:33Z"},{"alias_kind":"pith_short_12","alias_value":"JUXTXG3UQS73","created_at":"2026-05-18T12:28:35Z"},{"alias_kind":"pith_short_16","alias_value":"JUXTXG3UQS7372WT","created_at":"2026-05-18T12:28:35Z"},{"alias_kind":"pith_short_8","alias_value":"JUXTXG3U","created_at":"2026-05-18T12:28:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2014:JUXTXG3UQS7372WTVYTSY2NB7Y","target":"record","payload":{"canonical_record":{"source":{"id":"1405.1115","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-05-06T00:54:04Z","cross_cats_sorted":[],"title_canon_sha256":"54fce51404e0e8ba81d16440cc67fc794beeb41fbd710384fb446f9be5583ba6","abstract_canon_sha256":"1c28b85f64b7d58766eff1e27b7f7a3bc3ef7f40129a1355d4fb5f4fc73ca4d4"},"schema_version":"1.0"},"canonical_sha256":"4d2f3b9b7484bfbfead3ae272c69a1fe1c7edd10940d1610ada50cdd02702d65","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:52:33.454345Z","signature_b64":"1GOIhUSvn8m3XAH//YG3M0hEA1OQHJPuxnaiTwMTQDK5L2rZO2De/JSptEK9KgyjXy3AELWl8nBjw9vm7dohCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4d2f3b9b7484bfbfead3ae272c69a1fe1c7edd10940d1610ada50cdd02702d65","last_reissued_at":"2026-05-18T02:52:33.453867Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:52:33.453867Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1405.1115","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:52:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7qG8cauAzL4Gr5+GsaQ0h/GwZshiBROlT31swW4s7ZMoqtyrXXoTt/xpX+UlKJZF2C+V9AinUGW0dCdBc4iNCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T14:55:21.405788Z"},"content_sha256":"31e269b69cbdde39a6c52524730fba1a4757dd224d3f0a1af9ac535188555923","schema_version":"1.0","event_id":"sha256:31e269b69cbdde39a6c52524730fba1a4757dd224d3f0a1af9ac535188555923"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2014:JUXTXG3UQS7372WTVYTSY2NB7Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"In my Wish List, an Automated Tool for Fail-Secure Design Analysis: an Alloy-Based Feasibility Draft","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"France), Gurvan Le Guernic (DGA Ma\\^itrise de l'Information","submitted_at":"2014-05-06T00:54:04Z","abstract_excerpt":"A system is said to be fail-secure, sometimes confused with fail-safe, if it maintains its security requirements even in the event of some faults. Fail-secure analyses are required by some validation schemes, such as some Common Criteria or NATO certifications. However, it is an aspect of security which as been overlooked by the community. This paper attempts to shed some light on the fail-secure field of study by: giving a definition of fail-secure as used in those certification schemes, and emphasizing the differences with fail-safe; and exhibiting a first feasibility draft of a fail-secure "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1405.1115","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:52:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Gb4ga5kZn1cmBG4677kPFIKLA9SQdaW+IlBTAHUQn4R75F3JVSutqjrwG/BCCbrOK0EY/rYmCTXNF0osiSikBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T14:55:21.406335Z"},"content_sha256":"d20e4ee3c968023da49a90028df660263c147f07227450741c85cc49cdec7367","schema_version":"1.0","event_id":"sha256:d20e4ee3c968023da49a90028df660263c147f07227450741c85cc49cdec7367"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JUXTXG3UQS7372WTVYTSY2NB7Y/bundle.json","state_url":"https://pith.science/pith/JUXTXG3UQS7372WTVYTSY2NB7Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JUXTXG3UQS7372WTVYTSY2NB7Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-09T14:55:21Z","links":{"resolver":"https://pith.science/pith/JUXTXG3UQS7372WTVYTSY2NB7Y","bundle":"https://pith.science/pith/JUXTXG3UQS7372WTVYTSY2NB7Y/bundle.json","state":"https://pith.science/pith/JUXTXG3UQS7372WTVYTSY2NB7Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JUXTXG3UQS7372WTVYTSY2NB7Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2014:JUXTXG3UQS7372WTVYTSY2NB7Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1c28b85f64b7d58766eff1e27b7f7a3bc3ef7f40129a1355d4fb5f4fc73ca4d4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-05-06T00:54:04Z","title_canon_sha256":"54fce51404e0e8ba81d16440cc67fc794beeb41fbd710384fb446f9be5583ba6"},"schema_version":"1.0","source":{"id":"1405.1115","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1405.1115","created_at":"2026-05-18T02:52:33Z"},{"alias_kind":"arxiv_version","alias_value":"1405.1115v1","created_at":"2026-05-18T02:52:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1405.1115","created_at":"2026-05-18T02:52:33Z"},{"alias_kind":"pith_short_12","alias_value":"JUXTXG3UQS73","created_at":"2026-05-18T12:28:35Z"},{"alias_kind":"pith_short_16","alias_value":"JUXTXG3UQS7372WT","created_at":"2026-05-18T12:28:35Z"},{"alias_kind":"pith_short_8","alias_value":"JUXTXG3U","created_at":"2026-05-18T12:28:35Z"}],"graph_snapshots":[{"event_id":"sha256:d20e4ee3c968023da49a90028df660263c147f07227450741c85cc49cdec7367","target":"graph","created_at":"2026-05-18T02:52:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"A system is said to be fail-secure, sometimes confused with fail-safe, if it maintains its security requirements even in the event of some faults. Fail-secure analyses are required by some validation schemes, such as some Common Criteria or NATO certifications. However, it is an aspect of security which as been overlooked by the community. This paper attempts to shed some light on the fail-secure field of study by: giving a definition of fail-secure as used in those certification schemes, and emphasizing the differences with fail-safe; and exhibiting a first feasibility draft of a fail-secure ","authors_text":"France), Gurvan Le Guernic (DGA Ma\\^itrise de l'Information","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-05-06T00:54:04Z","title":"In my Wish List, an Automated Tool for Fail-Secure Design Analysis: an Alloy-Based Feasibility Draft"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1405.1115","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:31e269b69cbdde39a6c52524730fba1a4757dd224d3f0a1af9ac535188555923","target":"record","created_at":"2026-05-18T02:52:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1c28b85f64b7d58766eff1e27b7f7a3bc3ef7f40129a1355d4fb5f4fc73ca4d4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-05-06T00:54:04Z","title_canon_sha256":"54fce51404e0e8ba81d16440cc67fc794beeb41fbd710384fb446f9be5583ba6"},"schema_version":"1.0","source":{"id":"1405.1115","kind":"arxiv","version":1}},"canonical_sha256":"4d2f3b9b7484bfbfead3ae272c69a1fe1c7edd10940d1610ada50cdd02702d65","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4d2f3b9b7484bfbfead3ae272c69a1fe1c7edd10940d1610ada50cdd02702d65","first_computed_at":"2026-05-18T02:52:33.453867Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:52:33.453867Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1GOIhUSvn8m3XAH//YG3M0hEA1OQHJPuxnaiTwMTQDK5L2rZO2De/JSptEK9KgyjXy3AELWl8nBjw9vm7dohCg==","signature_status":"signed_v1","signed_at":"2026-05-18T02:52:33.454345Z","signed_message":"canonical_sha256_bytes"},"source_id":"1405.1115","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:31e269b69cbdde39a6c52524730fba1a4757dd224d3f0a1af9ac535188555923","sha256:d20e4ee3c968023da49a90028df660263c147f07227450741c85cc49cdec7367"],"state_sha256":"e9c4b76a7e0f987f8a583d3936e597ca1e9427a4d3f19d20aed87c33ca709779"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zhcwTCxYxmVo3KaorT8Prj2sioMoFSjEVQNhcLbNhF3/i4awowNrRB7+rQJXM4luTvcOt2kJDetclU3BBJGzCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-09T14:55:21.408948Z","bundle_sha256":"e6063d599c6607ccf4ca3208937e1ba3ce0eeb05b3c32346902f5061e15dbb55"}}