{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:MHZ52H5GZAWDEWJ346IH4FI7H6","short_pith_number":"pith:MHZ52H5G","canonical_record":{"source":{"id":"1702.04173","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-02-14T12:22:11Z","cross_cats_sorted":[],"title_canon_sha256":"769545f4712eb592ae0e93674de24c00bf1e429256679cfbb373ce14695a5382","abstract_canon_sha256":"b9d238b539a4c492ec9c05e887cbd871ce85b01c54c3a432eef192efc29f59da"},"schema_version":"1.0"},"canonical_sha256":"61f3dd1fa6c82c32593be7907e151f3f9f773236f6528d5b70132465e0786bd2","source":{"kind":"arxiv","id":"1702.04173","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1702.04173","created_at":"2026-05-18T00:50:48Z"},{"alias_kind":"arxiv_version","alias_value":"1702.04173v1","created_at":"2026-05-18T00:50:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1702.04173","created_at":"2026-05-18T00:50:48Z"},{"alias_kind":"pith_short_12","alias_value":"MHZ52H5GZAWD","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_16","alias_value":"MHZ52H5GZAWDEWJ3","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_8","alias_value":"MHZ52H5G","created_at":"2026-05-18T12:31:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:MHZ52H5GZAWDEWJ346IH4FI7H6","target":"record","payload":{"canonical_record":{"source":{"id":"1702.04173","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-02-14T12:22:11Z","cross_cats_sorted":[],"title_canon_sha256":"769545f4712eb592ae0e93674de24c00bf1e429256679cfbb373ce14695a5382","abstract_canon_sha256":"b9d238b539a4c492ec9c05e887cbd871ce85b01c54c3a432eef192efc29f59da"},"schema_version":"1.0"},"canonical_sha256":"61f3dd1fa6c82c32593be7907e151f3f9f773236f6528d5b70132465e0786bd2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:50:48.883580Z","signature_b64":"ghHPwuBR/uYTBHQOg/tKeZQf9vl1ZI/FVANbm4QJtoWgbXcknzMV14zeJp3UxGaZMVzxXdQQV/IqKbsprbGlDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"61f3dd1fa6c82c32593be7907e151f3f9f773236f6528d5b70132465e0786bd2","last_reissued_at":"2026-05-18T00:50:48.882955Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:50:48.882955Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1702.04173","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:50:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ihceI4hG2RtCmr4kelXPNxl/sDb0sdDbB714R3ZKRicWNzX3i6lY6QdntTRr0+Je50aaMcSn0peF7IuUKvATAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T04:45:54.072648Z"},"content_sha256":"e63c9a547db98f1c297f356fe06e116a63bcce5ce1f1a7abd3f4f10153ecc9ea","schema_version":"1.0","event_id":"sha256:e63c9a547db98f1c297f356fe06e116a63bcce5ce1f1a7abd3f4f10153ecc9ea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:MHZ52H5GZAWDEWJ346IH4FI7H6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Canonical Completeness in Lattice-Based Languages for Attribute-Based Access Control","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Conrad Williams, Jason Crampton","submitted_at":"2017-02-14T12:22:11Z","abstract_excerpt":"The study of canonically complete attribute-based access control (ABAC) languages is relatively new. A canonically complete language is useful as it is functionally complete and provides a \"normal form\" for policies. However, previous work on canonically complete ABAC languages requires that the set of authorization decisions is totally ordered, which does not accurately reflect the intuition behind the use of the allow, deny and not-applicable decisions in access control. A number of recent ABAC languages use a fourth value and the set of authorization decisions is partially ordered. In this "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1702.04173","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:50:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fPPEs/hGvRVFNaW2yLw7ZpViO0OTNliIanxbyQadn4EYOzXDRbhfsbrCljzRIkxG+ryJ+87DzMZ64gJX2oTYDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T04:45:54.072993Z"},"content_sha256":"2882f4c132d4efed48356e1b9e09fdc3e4618ed65362814c98ecc084af0b30e9","schema_version":"1.0","event_id":"sha256:2882f4c132d4efed48356e1b9e09fdc3e4618ed65362814c98ecc084af0b30e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MHZ52H5GZAWDEWJ346IH4FI7H6/bundle.json","state_url":"https://pith.science/pith/MHZ52H5GZAWDEWJ346IH4FI7H6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MHZ52H5GZAWDEWJ346IH4FI7H6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-31T04:45:54Z","links":{"resolver":"https://pith.science/pith/MHZ52H5GZAWDEWJ346IH4FI7H6","bundle":"https://pith.science/pith/MHZ52H5GZAWDEWJ346IH4FI7H6/bundle.json","state":"https://pith.science/pith/MHZ52H5GZAWDEWJ346IH4FI7H6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MHZ52H5GZAWDEWJ346IH4FI7H6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:MHZ52H5GZAWDEWJ346IH4FI7H6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b9d238b539a4c492ec9c05e887cbd871ce85b01c54c3a432eef192efc29f59da","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-02-14T12:22:11Z","title_canon_sha256":"769545f4712eb592ae0e93674de24c00bf1e429256679cfbb373ce14695a5382"},"schema_version":"1.0","source":{"id":"1702.04173","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1702.04173","created_at":"2026-05-18T00:50:48Z"},{"alias_kind":"arxiv_version","alias_value":"1702.04173v1","created_at":"2026-05-18T00:50:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1702.04173","created_at":"2026-05-18T00:50:48Z"},{"alias_kind":"pith_short_12","alias_value":"MHZ52H5GZAWD","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_16","alias_value":"MHZ52H5GZAWDEWJ3","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_8","alias_value":"MHZ52H5G","created_at":"2026-05-18T12:31:31Z"}],"graph_snapshots":[{"event_id":"sha256:2882f4c132d4efed48356e1b9e09fdc3e4618ed65362814c98ecc084af0b30e9","target":"graph","created_at":"2026-05-18T00:50:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"The study of canonically complete attribute-based access control (ABAC) languages is relatively new. A canonically complete language is useful as it is functionally complete and provides a \"normal form\" for policies. However, previous work on canonically complete ABAC languages requires that the set of authorization decisions is totally ordered, which does not accurately reflect the intuition behind the use of the allow, deny and not-applicable decisions in access control. A number of recent ABAC languages use a fourth value and the set of authorization decisions is partially ordered. In this ","authors_text":"Conrad Williams, Jason Crampton","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-02-14T12:22:11Z","title":"Canonical Completeness in Lattice-Based Languages for Attribute-Based Access Control"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1702.04173","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e63c9a547db98f1c297f356fe06e116a63bcce5ce1f1a7abd3f4f10153ecc9ea","target":"record","created_at":"2026-05-18T00:50:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b9d238b539a4c492ec9c05e887cbd871ce85b01c54c3a432eef192efc29f59da","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-02-14T12:22:11Z","title_canon_sha256":"769545f4712eb592ae0e93674de24c00bf1e429256679cfbb373ce14695a5382"},"schema_version":"1.0","source":{"id":"1702.04173","kind":"arxiv","version":1}},"canonical_sha256":"61f3dd1fa6c82c32593be7907e151f3f9f773236f6528d5b70132465e0786bd2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"61f3dd1fa6c82c32593be7907e151f3f9f773236f6528d5b70132465e0786bd2","first_computed_at":"2026-05-18T00:50:48.882955Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:50:48.882955Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ghHPwuBR/uYTBHQOg/tKeZQf9vl1ZI/FVANbm4QJtoWgbXcknzMV14zeJp3UxGaZMVzxXdQQV/IqKbsprbGlDw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:50:48.883580Z","signed_message":"canonical_sha256_bytes"},"source_id":"1702.04173","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e63c9a547db98f1c297f356fe06e116a63bcce5ce1f1a7abd3f4f10153ecc9ea","sha256:2882f4c132d4efed48356e1b9e09fdc3e4618ed65362814c98ecc084af0b30e9"],"state_sha256":"1dbebf906067b187de17c11a099333a9e982ae1026ebfaaf2d1198f7344686d0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZyAw2yK8LbupGl3LyyzOHWuowC5tVV65WvuYhJqOVN7ah0vqUCqAJIIEUa2aVE5n3qGpR3O952fw9Apx9BGVCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-31T04:45:54.074941Z","bundle_sha256":"18b145c152186c3ba3f0c3ea2295e61de8b8ef4e3340ba0c2945b323e25db5ec"}}