{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:K4VKU22JQ3GXVANR5DGG45PIES","short_pith_number":"pith:K4VKU22J","canonical_record":{"source":{"id":"1507.07479","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-07-27T16:45:32Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2bb7f62e026ff7a9e46a17d5cdbaad7730d286bf8c06cf3bdf6522cb654fad5d","abstract_canon_sha256":"4b48a04936cc62e6aa62a489f70d26e6d4df609447d7968b0a328e75843a8afa"},"schema_version":"1.0"},"canonical_sha256":"572aaa6b4986cd7a81b1e8cc6e75e824b7e56772fb3b8fbbfa148124f67c7cd7","source":{"kind":"arxiv","id":"1507.07479","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1507.07479","created_at":"2026-05-18T01:36:12Z"},{"alias_kind":"arxiv_version","alias_value":"1507.07479v1","created_at":"2026-05-18T01:36:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1507.07479","created_at":"2026-05-18T01:36:12Z"},{"alias_kind":"pith_short_12","alias_value":"K4VKU22JQ3GX","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_16","alias_value":"K4VKU22JQ3GXVANR","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_8","alias_value":"K4VKU22J","created_at":"2026-05-18T12:29:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:K4VKU22JQ3GXVANR5DGG45PIES","target":"record","payload":{"canonical_record":{"source":{"id":"1507.07479","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-07-27T16:45:32Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2bb7f62e026ff7a9e46a17d5cdbaad7730d286bf8c06cf3bdf6522cb654fad5d","abstract_canon_sha256":"4b48a04936cc62e6aa62a489f70d26e6d4df609447d7968b0a328e75843a8afa"},"schema_version":"1.0"},"canonical_sha256":"572aaa6b4986cd7a81b1e8cc6e75e824b7e56772fb3b8fbbfa148124f67c7cd7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:36:12.438800Z","signature_b64":"T59bUVM2RWdl9To9ewUeQ9DjUz0ZXgBx9zfAFWfbVyl0qtEa1R64vEaCEHHIcbZNDieSS1HcAWkGdG1YDWtnDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"572aaa6b4986cd7a81b1e8cc6e75e824b7e56772fb3b8fbbfa148124f67c7cd7","last_reissued_at":"2026-05-18T01:36:12.438219Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:36:12.438219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1507.07479","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:36:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SWnrip7wKFdO2JlOn1+zOAy42hQtzVRK9biIkxeiRt0gza5FKuY98ElvwnoLxA99L9bZwcdG1S+7+H98A45OCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-29T15:17:35.325681Z"},"content_sha256":"00fc06c846869b2d40821e4d97035a4057cb34b2e81ea08c37df8fc60852f21f","schema_version":"1.0","event_id":"sha256:00fc06c846869b2d40821e4d97035a4057cb34b2e81ea08c37df8fc60852f21f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:K4VKU22JQ3GXVANR5DGG45PIES","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Modularity for Security-Sensitive Workflows","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise","submitted_at":"2015-07-27T16:45:32Z","abstract_excerpt":"An established trend in software engineering insists on using components (sometimes also called services or packages) to encapsulate a set of related functionalities or data. By defining interfaces specifying what functionalities they provide or use, components can be combined with others to form more complex components. In this way, IT systems can be designed by mostly re-using existing components and developing new ones to provide new functionalities. In this paper, we introduce a notion of component and a combination mechanism for an important class of software artifacts, called security-se"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1507.07479","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:36:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MyZnGEmrT20Z2pEuJYmwXWAXajeMjQQ7gL5krGYZ8X3SwC1/18J6w1bnSqnz8OO1/TALysNYzFpsmhED2sVxDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-29T15:17:35.326326Z"},"content_sha256":"7b4d68e4da41b242ebd04246d43940c53a9ed11f9cc69147209243ddd747d180","schema_version":"1.0","event_id":"sha256:7b4d68e4da41b242ebd04246d43940c53a9ed11f9cc69147209243ddd747d180"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/K4VKU22JQ3GXVANR5DGG45PIES/bundle.json","state_url":"https://pith.science/pith/K4VKU22JQ3GXVANR5DGG45PIES/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/K4VKU22JQ3GXVANR5DGG45PIES/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-29T15:17:35Z","links":{"resolver":"https://pith.science/pith/K4VKU22JQ3GXVANR5DGG45PIES","bundle":"https://pith.science/pith/K4VKU22JQ3GXVANR5DGG45PIES/bundle.json","state":"https://pith.science/pith/K4VKU22JQ3GXVANR5DGG45PIES/state.json","well_known_bundle":"https://pith.science/.well-known/pith/K4VKU22JQ3GXVANR5DGG45PIES/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:K4VKU22JQ3GXVANR5DGG45PIES","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4b48a04936cc62e6aa62a489f70d26e6d4df609447d7968b0a328e75843a8afa","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-07-27T16:45:32Z","title_canon_sha256":"2bb7f62e026ff7a9e46a17d5cdbaad7730d286bf8c06cf3bdf6522cb654fad5d"},"schema_version":"1.0","source":{"id":"1507.07479","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1507.07479","created_at":"2026-05-18T01:36:12Z"},{"alias_kind":"arxiv_version","alias_value":"1507.07479v1","created_at":"2026-05-18T01:36:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1507.07479","created_at":"2026-05-18T01:36:12Z"},{"alias_kind":"pith_short_12","alias_value":"K4VKU22JQ3GX","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_16","alias_value":"K4VKU22JQ3GXVANR","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_8","alias_value":"K4VKU22J","created_at":"2026-05-18T12:29:27Z"}],"graph_snapshots":[{"event_id":"sha256:7b4d68e4da41b242ebd04246d43940c53a9ed11f9cc69147209243ddd747d180","target":"graph","created_at":"2026-05-18T01:36:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"An established trend in software engineering insists on using components (sometimes also called services or packages) to encapsulate a set of related functionalities or data. By defining interfaces specifying what functionalities they provide or use, components can be combined with others to form more complex components. In this way, IT systems can be designed by mostly re-using existing components and developing new ones to provide new functionalities. In this paper, we introduce a notion of component and a combination mechanism for an important class of software artifacts, called security-se","authors_text":"Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-07-27T16:45:32Z","title":"Modularity for Security-Sensitive Workflows"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1507.07479","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:00fc06c846869b2d40821e4d97035a4057cb34b2e81ea08c37df8fc60852f21f","target":"record","created_at":"2026-05-18T01:36:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4b48a04936cc62e6aa62a489f70d26e6d4df609447d7968b0a328e75843a8afa","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-07-27T16:45:32Z","title_canon_sha256":"2bb7f62e026ff7a9e46a17d5cdbaad7730d286bf8c06cf3bdf6522cb654fad5d"},"schema_version":"1.0","source":{"id":"1507.07479","kind":"arxiv","version":1}},"canonical_sha256":"572aaa6b4986cd7a81b1e8cc6e75e824b7e56772fb3b8fbbfa148124f67c7cd7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"572aaa6b4986cd7a81b1e8cc6e75e824b7e56772fb3b8fbbfa148124f67c7cd7","first_computed_at":"2026-05-18T01:36:12.438219Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:36:12.438219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"T59bUVM2RWdl9To9ewUeQ9DjUz0ZXgBx9zfAFWfbVyl0qtEa1R64vEaCEHHIcbZNDieSS1HcAWkGdG1YDWtnDQ==","signature_status":"signed_v1","signed_at":"2026-05-18T01:36:12.438800Z","signed_message":"canonical_sha256_bytes"},"source_id":"1507.07479","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:00fc06c846869b2d40821e4d97035a4057cb34b2e81ea08c37df8fc60852f21f","sha256:7b4d68e4da41b242ebd04246d43940c53a9ed11f9cc69147209243ddd747d180"],"state_sha256":"cb25c9f84b8c21e29b10d666a48a9ab8a0435b6126e3143ad151bb69997ae177"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FDS+yuIhFbuKlOTPzpNn1wN9VxDo2g58Lw4ji6Ke2ASwOXqrKbIp5TSbFqpUDzIvcgY2iqjWdAKx4MGNNZBwCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-29T15:17:35.329296Z","bundle_sha256":"b9e27fdfdc5e28a61e19b62e9b3321ce90960702b90383b9400174adc357f2e0"}}