{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:KAOPPMWV6QLKBZ5G4BIRGJWMKK","short_pith_number":"pith:KAOPPMWV","canonical_record":{"source":{"id":"1502.03343","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-02-11T15:46:21Z","cross_cats_sorted":[],"title_canon_sha256":"600d8d3d2796304eaaa47da098be2e1ed1b7b434eaf6a129e5ad8ca9dbef806a","abstract_canon_sha256":"31a9e3247a8da9038b03f69dd5d1452507084cba1bd9d5995717f932977d7999"},"schema_version":"1.0"},"canonical_sha256":"501cf7b2d5f416a0e7a6e0511326cc52b6fc7f10b8b38dca95a39387645b38af","source":{"kind":"arxiv","id":"1502.03343","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1502.03343","created_at":"2026-05-18T02:27:19Z"},{"alias_kind":"arxiv_version","alias_value":"1502.03343v1","created_at":"2026-05-18T02:27:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1502.03343","created_at":"2026-05-18T02:27:19Z"},{"alias_kind":"pith_short_12","alias_value":"KAOPPMWV6QLK","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_16","alias_value":"KAOPPMWV6QLKBZ5G","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_8","alias_value":"KAOPPMWV","created_at":"2026-05-18T12:29:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:KAOPPMWV6QLKBZ5G4BIRGJWMKK","target":"record","payload":{"canonical_record":{"source":{"id":"1502.03343","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-02-11T15:46:21Z","cross_cats_sorted":[],"title_canon_sha256":"600d8d3d2796304eaaa47da098be2e1ed1b7b434eaf6a129e5ad8ca9dbef806a","abstract_canon_sha256":"31a9e3247a8da9038b03f69dd5d1452507084cba1bd9d5995717f932977d7999"},"schema_version":"1.0"},"canonical_sha256":"501cf7b2d5f416a0e7a6e0511326cc52b6fc7f10b8b38dca95a39387645b38af","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:27:19.653783Z","signature_b64":"PciDx58vbcHC9s3sSNFm1P9xCnLf4hDjF2qR4SdaSx5GviiQH/A1jkl5QOLX/PTYnzeCK0G/TkRNL26siBZDBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"501cf7b2d5f416a0e7a6e0511326cc52b6fc7f10b8b38dca95a39387645b38af","last_reissued_at":"2026-05-18T02:27:19.653037Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:27:19.653037Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1502.03343","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:27:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vljEyuVsYcJ0Vm5ioyULfQuISBmFZ7LaTt8OmQ6Oy9evaaMk7xyQleNh4sxC1Zo0mogAsVoM3d56RYjt0t06BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T22:32:50.494778Z"},"content_sha256":"6389cd73697165756e12c460d6291bb933bb5516c4afb3c8869badfb36854663","schema_version":"1.0","event_id":"sha256:6389cd73697165756e12c460d6291bb933bb5516c4afb3c8869badfb36854663"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:KAOPPMWV6QLKBZ5G4BIRGJWMKK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Requirements Analysis of a Quad-Redundant Flight Control System","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Darren Cofer, John Backes, Mike Whalen, Steven Miller","submitted_at":"2015-02-11T15:46:21Z","abstract_excerpt":"In this paper we detail our effort to formalize and prove requirements for the Quad-redundant Flight Control System (QFCS) within NASA's Transport Class Model (TCM). We use a compositional approach with assume-guarantee contracts that correspond to the requirements for software components embedded in an AADL system architecture model. This approach is designed to exploit the verification effort and artifacts that are already part of typical software verification processes in the avionics domain. Our approach is supported by an AADL annex that allows specification of contracts along with a tool"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1502.03343","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:27:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x1eqKc2UI11Ev8o9n/3Sfd39zDrN8e+6l9MVr6OcHOPnn+3dLsbndk5E1AicW8xhN33aXjHDFpbrm0tMKWKHCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T22:32:50.495472Z"},"content_sha256":"e10e0c5d6b973eb92f5c212c5cb31768058495b3280642770956ffa26ffe59f6","schema_version":"1.0","event_id":"sha256:e10e0c5d6b973eb92f5c212c5cb31768058495b3280642770956ffa26ffe59f6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KAOPPMWV6QLKBZ5G4BIRGJWMKK/bundle.json","state_url":"https://pith.science/pith/KAOPPMWV6QLKBZ5G4BIRGJWMKK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KAOPPMWV6QLKBZ5G4BIRGJWMKK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-26T22:32:50Z","links":{"resolver":"https://pith.science/pith/KAOPPMWV6QLKBZ5G4BIRGJWMKK","bundle":"https://pith.science/pith/KAOPPMWV6QLKBZ5G4BIRGJWMKK/bundle.json","state":"https://pith.science/pith/KAOPPMWV6QLKBZ5G4BIRGJWMKK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KAOPPMWV6QLKBZ5G4BIRGJWMKK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:KAOPPMWV6QLKBZ5G4BIRGJWMKK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"31a9e3247a8da9038b03f69dd5d1452507084cba1bd9d5995717f932977d7999","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-02-11T15:46:21Z","title_canon_sha256":"600d8d3d2796304eaaa47da098be2e1ed1b7b434eaf6a129e5ad8ca9dbef806a"},"schema_version":"1.0","source":{"id":"1502.03343","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1502.03343","created_at":"2026-05-18T02:27:19Z"},{"alias_kind":"arxiv_version","alias_value":"1502.03343v1","created_at":"2026-05-18T02:27:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1502.03343","created_at":"2026-05-18T02:27:19Z"},{"alias_kind":"pith_short_12","alias_value":"KAOPPMWV6QLK","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_16","alias_value":"KAOPPMWV6QLKBZ5G","created_at":"2026-05-18T12:29:27Z"},{"alias_kind":"pith_short_8","alias_value":"KAOPPMWV","created_at":"2026-05-18T12:29:27Z"}],"graph_snapshots":[{"event_id":"sha256:e10e0c5d6b973eb92f5c212c5cb31768058495b3280642770956ffa26ffe59f6","target":"graph","created_at":"2026-05-18T02:27:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In this paper we detail our effort to formalize and prove requirements for the Quad-redundant Flight Control System (QFCS) within NASA's Transport Class Model (TCM). We use a compositional approach with assume-guarantee contracts that correspond to the requirements for software components embedded in an AADL system architecture model. This approach is designed to exploit the verification effort and artifacts that are already part of typical software verification processes in the avionics domain. Our approach is supported by an AADL annex that allows specification of contracts along with a tool","authors_text":"Darren Cofer, John Backes, Mike Whalen, Steven Miller","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-02-11T15:46:21Z","title":"Requirements Analysis of a Quad-Redundant Flight Control System"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1502.03343","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6389cd73697165756e12c460d6291bb933bb5516c4afb3c8869badfb36854663","target":"record","created_at":"2026-05-18T02:27:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"31a9e3247a8da9038b03f69dd5d1452507084cba1bd9d5995717f932977d7999","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2015-02-11T15:46:21Z","title_canon_sha256":"600d8d3d2796304eaaa47da098be2e1ed1b7b434eaf6a129e5ad8ca9dbef806a"},"schema_version":"1.0","source":{"id":"1502.03343","kind":"arxiv","version":1}},"canonical_sha256":"501cf7b2d5f416a0e7a6e0511326cc52b6fc7f10b8b38dca95a39387645b38af","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"501cf7b2d5f416a0e7a6e0511326cc52b6fc7f10b8b38dca95a39387645b38af","first_computed_at":"2026-05-18T02:27:19.653037Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:27:19.653037Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PciDx58vbcHC9s3sSNFm1P9xCnLf4hDjF2qR4SdaSx5GviiQH/A1jkl5QOLX/PTYnzeCK0G/TkRNL26siBZDBQ==","signature_status":"signed_v1","signed_at":"2026-05-18T02:27:19.653783Z","signed_message":"canonical_sha256_bytes"},"source_id":"1502.03343","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6389cd73697165756e12c460d6291bb933bb5516c4afb3c8869badfb36854663","sha256:e10e0c5d6b973eb92f5c212c5cb31768058495b3280642770956ffa26ffe59f6"],"state_sha256":"2bfb4354cb0ed0568323d9169d74b6324ee222af0d75610e569741a73800be74"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5dYxD3Ki/RaMe9iT38r3iX8zS+nN688eeDBqhaU4bCyIK6oeXVQX7/O0+Jbj0nPPaWhWnc3TsAAi4xu2Lao2Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-26T22:32:50.499041Z","bundle_sha256":"aacfc5bfd3101b794c7e478bbfb205efcd888b6f7b17243bd2f770fc88327ed0"}}