{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:TNMRICVPL5LC2U4U3J66TEH6W6","short_pith_number":"pith:TNMRICVP","canonical_record":{"source":{"id":"1908.08737","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-23T09:44:37Z","cross_cats_sorted":[],"title_canon_sha256":"f0abc218a164a4d85fea195bc9a29b8ded6d87a7f2bdc21434ec895e2245458f","abstract_canon_sha256":"8322a09f44f6e16ebe897a1b87eaf794a1a6230b02c15ec18bbbc134d941791b"},"schema_version":"1.0"},"canonical_sha256":"9b59140aaf5f562d5394da7de990feb7b98d196b4e3b8988a53e945688e9d82b","source":{"kind":"arxiv","id":"1908.08737","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.08737","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"arxiv_version","alias_value":"1908.08737v2","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.08737","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"pith_short_12","alias_value":"TNMRICVPL5LC","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"pith_short_16","alias_value":"TNMRICVPL5LC2U4U","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"pith_short_8","alias_value":"TNMRICVP","created_at":"2026-07-05T00:04:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:TNMRICVPL5LC2U4U3J66TEH6W6","target":"record","payload":{"canonical_record":{"source":{"id":"1908.08737","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-23T09:44:37Z","cross_cats_sorted":[],"title_canon_sha256":"f0abc218a164a4d85fea195bc9a29b8ded6d87a7f2bdc21434ec895e2245458f","abstract_canon_sha256":"8322a09f44f6e16ebe897a1b87eaf794a1a6230b02c15ec18bbbc134d941791b"},"schema_version":"1.0"},"canonical_sha256":"9b59140aaf5f562d5394da7de990feb7b98d196b4e3b8988a53e945688e9d82b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:04:44.142741Z","signature_b64":"Cd6voPO7mVF3XwLPEfudEEMvd4WkRmm0FY5v57aHlQH018/iHMH8PtpgPkpW2Kso7GstXDCAfbN3C7k155QLDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9b59140aaf5f562d5394da7de990feb7b98d196b4e3b8988a53e945688e9d82b","last_reissued_at":"2026-07-05T00:04:44.142261Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:04:44.142261Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.08737","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:04:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uTIM/O2kD2wlbcBW7FSq/v+sUPUBJNAS4JGsXXnlKI9dVc6ONzImgy1i1gyPNCWbBGY97G3OgCx26YV6jVXTAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:55:15.351323Z"},"content_sha256":"66dedc634fa45a4659fbf6812320bc8554c326ee6daa3ed8800df351fe27fb1f","schema_version":"1.0","event_id":"sha256:66dedc634fa45a4659fbf6812320bc8554c326ee6daa3ed8800df351fe27fb1f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:TNMRICVPL5LC2U4U3J66TEH6W6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Design choices for productive, secure, data-intensive research at scale in the cloud","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alvaro Cabrejas Egea, Catalina A. Vallejos, Catherine Lawrence, Claire Austin, David Beavan, Diego Arenas, Evelina Gabasova, Franz Kiraly, Helen Sherwood-Taylor, Ian Carter, James Cunningham, James Geddes, James Hetherington, James Robinson, Jon Atkins, Jules Manser, Kirstie Whitaker, Martin T. O'Reilly, Oliver Forrest, Radka Jersakova, Rob Clarke, Sebastian Vollmer, Serena Tierney, Steven Carlysle-Davies, Tom Doel","submitted_at":"2019-08-23T09:44:37Z","abstract_excerpt":"We present a policy and process framework for secure environments for productive data science research projects at scale, by combining prevailing data security threat and risk profiles into five sensitivity tiers, and, at each tier, specifying recommended policies for data classification, data ingress, software ingress, data egress, user access, user device control, and analysis environments. By presenting design patterns for security choices for each tier, and using software defined infrastructure so that a different, independent, secure research environment can be instantiated for each proje"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.08737","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.08737/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:04:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"medpUYby4vkN8g+DQEZ3ltez3jfSqImQ43iGssXrq7H2yudNCA6zIIOo1ZEDVykbLg28yPtMrTgQ2goy+gQMAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:55:15.351703Z"},"content_sha256":"e1b9b5f87cefcb958e6f1e88fbdb98b317ba45fdb8499d6fb31b1473cd8150b7","schema_version":"1.0","event_id":"sha256:e1b9b5f87cefcb958e6f1e88fbdb98b317ba45fdb8499d6fb31b1473cd8150b7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TNMRICVPL5LC2U4U3J66TEH6W6/bundle.json","state_url":"https://pith.science/pith/TNMRICVPL5LC2U4U3J66TEH6W6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TNMRICVPL5LC2U4U3J66TEH6W6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T18:55:15Z","links":{"resolver":"https://pith.science/pith/TNMRICVPL5LC2U4U3J66TEH6W6","bundle":"https://pith.science/pith/TNMRICVPL5LC2U4U3J66TEH6W6/bundle.json","state":"https://pith.science/pith/TNMRICVPL5LC2U4U3J66TEH6W6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TNMRICVPL5LC2U4U3J66TEH6W6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:TNMRICVPL5LC2U4U3J66TEH6W6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8322a09f44f6e16ebe897a1b87eaf794a1a6230b02c15ec18bbbc134d941791b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-23T09:44:37Z","title_canon_sha256":"f0abc218a164a4d85fea195bc9a29b8ded6d87a7f2bdc21434ec895e2245458f"},"schema_version":"1.0","source":{"id":"1908.08737","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.08737","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"arxiv_version","alias_value":"1908.08737v2","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.08737","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"pith_short_12","alias_value":"TNMRICVPL5LC","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"pith_short_16","alias_value":"TNMRICVPL5LC2U4U","created_at":"2026-07-05T00:04:44Z"},{"alias_kind":"pith_short_8","alias_value":"TNMRICVP","created_at":"2026-07-05T00:04:44Z"}],"graph_snapshots":[{"event_id":"sha256:e1b9b5f87cefcb958e6f1e88fbdb98b317ba45fdb8499d6fb31b1473cd8150b7","target":"graph","created_at":"2026-07-05T00:04:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.08737/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present a policy and process framework for secure environments for productive data science research projects at scale, by combining prevailing data security threat and risk profiles into five sensitivity tiers, and, at each tier, specifying recommended policies for data classification, data ingress, software ingress, data egress, user access, user device control, and analysis environments. By presenting design patterns for security choices for each tier, and using software defined infrastructure so that a different, independent, secure research environment can be instantiated for each proje","authors_text":"Alvaro Cabrejas Egea, Catalina A. Vallejos, Catherine Lawrence, Claire Austin, David Beavan, Diego Arenas, Evelina Gabasova, Franz Kiraly, Helen Sherwood-Taylor, Ian Carter, James Cunningham, James Geddes, James Hetherington, James Robinson, Jon Atkins, Jules Manser, Kirstie Whitaker, Martin T. O'Reilly, Oliver Forrest, Radka Jersakova, Rob Clarke, Sebastian Vollmer, Serena Tierney, Steven Carlysle-Davies, Tom Doel","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-23T09:44:37Z","title":"Design choices for productive, secure, data-intensive research at scale in the cloud"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.08737","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:66dedc634fa45a4659fbf6812320bc8554c326ee6daa3ed8800df351fe27fb1f","target":"record","created_at":"2026-07-05T00:04:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8322a09f44f6e16ebe897a1b87eaf794a1a6230b02c15ec18bbbc134d941791b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-23T09:44:37Z","title_canon_sha256":"f0abc218a164a4d85fea195bc9a29b8ded6d87a7f2bdc21434ec895e2245458f"},"schema_version":"1.0","source":{"id":"1908.08737","kind":"arxiv","version":2}},"canonical_sha256":"9b59140aaf5f562d5394da7de990feb7b98d196b4e3b8988a53e945688e9d82b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9b59140aaf5f562d5394da7de990feb7b98d196b4e3b8988a53e945688e9d82b","first_computed_at":"2026-07-05T00:04:44.142261Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:04:44.142261Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Cd6voPO7mVF3XwLPEfudEEMvd4WkRmm0FY5v57aHlQH018/iHMH8PtpgPkpW2Kso7GstXDCAfbN3C7k155QLDA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:04:44.142741Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.08737","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:66dedc634fa45a4659fbf6812320bc8554c326ee6daa3ed8800df351fe27fb1f","sha256:e1b9b5f87cefcb958e6f1e88fbdb98b317ba45fdb8499d6fb31b1473cd8150b7"],"state_sha256":"f236238b9d533072c6057880006ed221273403a15dca7568f8edc36f1d65c263"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qRzWP16yoA+0DUJtdoBaZXQyqnDx6sRi+UwphTsOfi0vJDJqYGaAhVY+YHzYJb7WzL6ejVMy5LTBld6bwJi9BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T18:55:15.354441Z","bundle_sha256":"68b8ffc781a4378b6ffc0857388705c0d968c90ca13a8ff97418b133d4123db4"}}