{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:LRBEU6CAZHKHVGBBFZQCW774DP","short_pith_number":"pith:LRBEU6CA","canonical_record":{"source":{"id":"1612.06191","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-19T14:18:13Z","cross_cats_sorted":["cs.DS"],"title_canon_sha256":"b8d444926733047951083cf6423e6f0ffa797d014d4ef50bb2cbabe4db3915bc","abstract_canon_sha256":"855c0a83f216484dab2ae86f0ab12460a366b5498b1687acf74b7833eb578436"},"schema_version":"1.0"},"canonical_sha256":"5c424a7840c9d47a98212e602b7ffc1be07a101d0f0d3844f639a576aa9baca7","source":{"kind":"arxiv","id":"1612.06191","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1612.06191","created_at":"2026-05-18T00:54:42Z"},{"alias_kind":"arxiv_version","alias_value":"1612.06191v1","created_at":"2026-05-18T00:54:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1612.06191","created_at":"2026-05-18T00:54:42Z"},{"alias_kind":"pith_short_12","alias_value":"LRBEU6CAZHKH","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_16","alias_value":"LRBEU6CAZHKHVGBB","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_8","alias_value":"LRBEU6CA","created_at":"2026-05-18T12:30:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:LRBEU6CAZHKHVGBBFZQCW774DP","target":"record","payload":{"canonical_record":{"source":{"id":"1612.06191","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-19T14:18:13Z","cross_cats_sorted":["cs.DS"],"title_canon_sha256":"b8d444926733047951083cf6423e6f0ffa797d014d4ef50bb2cbabe4db3915bc","abstract_canon_sha256":"855c0a83f216484dab2ae86f0ab12460a366b5498b1687acf74b7833eb578436"},"schema_version":"1.0"},"canonical_sha256":"5c424a7840c9d47a98212e602b7ffc1be07a101d0f0d3844f639a576aa9baca7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:54:42.930012Z","signature_b64":"YPplc3U+sCat0262zt2AaT2n1zys+kDyKyalrgXASGarbzXhujTGKN+AuPhaOIpp2I3SrVmT/q99HorMS6U/Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5c424a7840c9d47a98212e602b7ffc1be07a101d0f0d3844f639a576aa9baca7","last_reissued_at":"2026-05-18T00:54:42.929660Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:54:42.929660Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1612.06191","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:54:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3sXt2AgdVGJ757UV5WJOhD90NEIihybh0x9N/8sFJ7YoVyTs7GJVGgwaFl4JpmTFo8Rla0jq+Z+I7WZYqEXUCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T06:38:34.246524Z"},"content_sha256":"1c99edd2d0c60aa8f07a6dd55266b8d053e921c9cc1f11d77d01a400ea3c7e1d","schema_version":"1.0","event_id":"sha256:1c99edd2d0c60aa8f07a6dd55266b8d053e921c9cc1f11d77d01a400ea3c7e1d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:LRBEU6CAZHKHVGBBFZQCW774DP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Authorization Policy Existence Problem","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.DS"],"primary_cat":"cs.CR","authors_text":"Gregory Gutin, Jason Crampton, Pierre Berg\\'e, R\\'emi Watrigant","submitted_at":"2016-12-19T14:18:13Z","abstract_excerpt":"Constraints such as separation-of-duty are widely used to specify requirements that supplement basic authorization policies. However, the existence of constraints (and authorization policies) may mean that a user is unable to fulfill her/his organizational duties because access to resources has been denied. In short, there is a tension between the need to protect resources (using policies and constraints) and the availability of resources. Recent work on workflow satisfiability and resiliency in access control asks whether this tension compromises the ability of an organization to achieve its "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1612.06191","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:54:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wUUHbYSgiyR6euvEO6THoQUxPfd+eXLKROL35vtUC7xZJFvy4bOjYnTupF84ibkdghr1nqCDZOo4DB6sAZYJCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T06:38:34.246880Z"},"content_sha256":"b50024665769ea652b471ec611489436c437a9a238cb1fb614a1db98f21eb672","schema_version":"1.0","event_id":"sha256:b50024665769ea652b471ec611489436c437a9a238cb1fb614a1db98f21eb672"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LRBEU6CAZHKHVGBBFZQCW774DP/bundle.json","state_url":"https://pith.science/pith/LRBEU6CAZHKHVGBBFZQCW774DP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LRBEU6CAZHKHVGBBFZQCW774DP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-01T06:38:34Z","links":{"resolver":"https://pith.science/pith/LRBEU6CAZHKHVGBBFZQCW774DP","bundle":"https://pith.science/pith/LRBEU6CAZHKHVGBBFZQCW774DP/bundle.json","state":"https://pith.science/pith/LRBEU6CAZHKHVGBBFZQCW774DP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LRBEU6CAZHKHVGBBFZQCW774DP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:LRBEU6CAZHKHVGBBFZQCW774DP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"855c0a83f216484dab2ae86f0ab12460a366b5498b1687acf74b7833eb578436","cross_cats_sorted":["cs.DS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-19T14:18:13Z","title_canon_sha256":"b8d444926733047951083cf6423e6f0ffa797d014d4ef50bb2cbabe4db3915bc"},"schema_version":"1.0","source":{"id":"1612.06191","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1612.06191","created_at":"2026-05-18T00:54:42Z"},{"alias_kind":"arxiv_version","alias_value":"1612.06191v1","created_at":"2026-05-18T00:54:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1612.06191","created_at":"2026-05-18T00:54:42Z"},{"alias_kind":"pith_short_12","alias_value":"LRBEU6CAZHKH","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_16","alias_value":"LRBEU6CAZHKHVGBB","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_8","alias_value":"LRBEU6CA","created_at":"2026-05-18T12:30:29Z"}],"graph_snapshots":[{"event_id":"sha256:b50024665769ea652b471ec611489436c437a9a238cb1fb614a1db98f21eb672","target":"graph","created_at":"2026-05-18T00:54:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Constraints such as separation-of-duty are widely used to specify requirements that supplement basic authorization policies. However, the existence of constraints (and authorization policies) may mean that a user is unable to fulfill her/his organizational duties because access to resources has been denied. In short, there is a tension between the need to protect resources (using policies and constraints) and the availability of resources. Recent work on workflow satisfiability and resiliency in access control asks whether this tension compromises the ability of an organization to achieve its ","authors_text":"Gregory Gutin, Jason Crampton, Pierre Berg\\'e, R\\'emi Watrigant","cross_cats":["cs.DS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-19T14:18:13Z","title":"The Authorization Policy Existence Problem"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1612.06191","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1c99edd2d0c60aa8f07a6dd55266b8d053e921c9cc1f11d77d01a400ea3c7e1d","target":"record","created_at":"2026-05-18T00:54:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"855c0a83f216484dab2ae86f0ab12460a366b5498b1687acf74b7833eb578436","cross_cats_sorted":["cs.DS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-19T14:18:13Z","title_canon_sha256":"b8d444926733047951083cf6423e6f0ffa797d014d4ef50bb2cbabe4db3915bc"},"schema_version":"1.0","source":{"id":"1612.06191","kind":"arxiv","version":1}},"canonical_sha256":"5c424a7840c9d47a98212e602b7ffc1be07a101d0f0d3844f639a576aa9baca7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5c424a7840c9d47a98212e602b7ffc1be07a101d0f0d3844f639a576aa9baca7","first_computed_at":"2026-05-18T00:54:42.929660Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:54:42.929660Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YPplc3U+sCat0262zt2AaT2n1zys+kDyKyalrgXASGarbzXhujTGKN+AuPhaOIpp2I3SrVmT/q99HorMS6U/Bw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:54:42.930012Z","signed_message":"canonical_sha256_bytes"},"source_id":"1612.06191","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1c99edd2d0c60aa8f07a6dd55266b8d053e921c9cc1f11d77d01a400ea3c7e1d","sha256:b50024665769ea652b471ec611489436c437a9a238cb1fb614a1db98f21eb672"],"state_sha256":"054cd2765cbabcea88b18a87687b04d7b6785388470193168a94a49c2a04332d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y3DJS7bAp3qOffWhqGoyfkTwx0QvdTNdB83BnZ1u3oYNEnD9xiLmZC6opUxqTyYkkS+34bLJ2FtQTkJUoQXQBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-01T06:38:34.249182Z","bundle_sha256":"6e4567cb9447bf522be16fb1bb82f99537db9913f6c6e2ea2041941559cca01e"}}