{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UPYAJSR5HL5GZT2IKCNRRZNC7C","short_pith_number":"pith:UPYAJSR5","canonical_record":{"source":{"id":"2503.11573","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-03-14T16:40:25Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"5e5c13284fb1599f1def0e7181c194367c531a018b4f5c60705b0b6fa5c4b7d8","abstract_canon_sha256":"a6acc4002c97de114765abaaee70c62407c70955d17b6d59fdd357647c9b6940"},"schema_version":"1.0"},"canonical_sha256":"a3f004ca3d3afa6ccf48509b18e5a2f8b01979f8f9f702f0f3d8cbfbb8691a66","source":{"kind":"arxiv","id":"2503.11573","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.11573","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"arxiv_version","alias_value":"2503.11573v1","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.11573","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"pith_short_12","alias_value":"UPYAJSR5HL5G","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"pith_short_16","alias_value":"UPYAJSR5HL5GZT2I","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"pith_short_8","alias_value":"UPYAJSR5","created_at":"2026-07-05T10:31:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UPYAJSR5HL5GZT2IKCNRRZNC7C","target":"record","payload":{"canonical_record":{"source":{"id":"2503.11573","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-03-14T16:40:25Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"5e5c13284fb1599f1def0e7181c194367c531a018b4f5c60705b0b6fa5c4b7d8","abstract_canon_sha256":"a6acc4002c97de114765abaaee70c62407c70955d17b6d59fdd357647c9b6940"},"schema_version":"1.0"},"canonical_sha256":"a3f004ca3d3afa6ccf48509b18e5a2f8b01979f8f9f702f0f3d8cbfbb8691a66","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:31:34.976678Z","signature_b64":"HQU3XuH0VF36JppqcK1uE/t38HNeg1inh1WJfI6JZuRMUQBd0CJ+5BXEsLdjwz9YOtwuIR+HQhiTmqTant9dAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a3f004ca3d3afa6ccf48509b18e5a2f8b01979f8f9f702f0f3d8cbfbb8691a66","last_reissued_at":"2026-07-05T10:31:34.976108Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:31:34.976108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.11573","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Oodzc79IWh/9O+3MdaKC4AcIKdBPmR5DXp0mXHDZnFFVI4VreuiR8pcZd5I/a4ZLfgNvmSBmG7rPmobzaJhHAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T01:23:37.706424Z"},"content_sha256":"2a2b47320070ce0ff095488f00cc7164193295651db196caee02be784067d92e","schema_version":"1.0","event_id":"sha256:2a2b47320070ce0ff095488f00cc7164193295651db196caee02be784067d92e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UPYAJSR5HL5GZT2IKCNRRZNC7C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Synthesizing Access Control Policies using Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.SE","authors_text":"Adarsh Vatsa, Pratyush Patel, William Eiers","submitted_at":"2025-03-14T16:40:25Z","abstract_excerpt":"Cloud compute systems allow administrators to write access control policies that govern access to private data. While policies are written in convenient languages, such as AWS Identity and Access Management Policy Language, manually written policies often become complex and error prone. In this paper, we investigate whether and how well Large Language Models (LLMs) can be used to synthesize access control policies. Our investigation focuses on the task of taking an access control request specification and zero-shot prompting LLMs to synthesize a well-formed access control policy which correctl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.11573","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.11573/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g+tkKpREbU1tt/3ZH+FKspHdyA3jjAGndC3fvBNU7f96mp3ctmY3Ni5qfUAYkmMIGbA8M033BIngoByZeXsDCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T01:23:37.707056Z"},"content_sha256":"d42280dcc8d61f29524d9ed81505e7e029f993dc94926e857cc78c1b36af3a89","schema_version":"1.0","event_id":"sha256:d42280dcc8d61f29524d9ed81505e7e029f993dc94926e857cc78c1b36af3a89"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UPYAJSR5HL5GZT2IKCNRRZNC7C/bundle.json","state_url":"https://pith.science/pith/UPYAJSR5HL5GZT2IKCNRRZNC7C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UPYAJSR5HL5GZT2IKCNRRZNC7C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T01:23:37Z","links":{"resolver":"https://pith.science/pith/UPYAJSR5HL5GZT2IKCNRRZNC7C","bundle":"https://pith.science/pith/UPYAJSR5HL5GZT2IKCNRRZNC7C/bundle.json","state":"https://pith.science/pith/UPYAJSR5HL5GZT2IKCNRRZNC7C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UPYAJSR5HL5GZT2IKCNRRZNC7C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UPYAJSR5HL5GZT2IKCNRRZNC7C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a6acc4002c97de114765abaaee70c62407c70955d17b6d59fdd357647c9b6940","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-03-14T16:40:25Z","title_canon_sha256":"5e5c13284fb1599f1def0e7181c194367c531a018b4f5c60705b0b6fa5c4b7d8"},"schema_version":"1.0","source":{"id":"2503.11573","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.11573","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"arxiv_version","alias_value":"2503.11573v1","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.11573","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"pith_short_12","alias_value":"UPYAJSR5HL5G","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"pith_short_16","alias_value":"UPYAJSR5HL5GZT2I","created_at":"2026-07-05T10:31:34Z"},{"alias_kind":"pith_short_8","alias_value":"UPYAJSR5","created_at":"2026-07-05T10:31:34Z"}],"graph_snapshots":[{"event_id":"sha256:d42280dcc8d61f29524d9ed81505e7e029f993dc94926e857cc78c1b36af3a89","target":"graph","created_at":"2026-07-05T10:31:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.11573/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Cloud compute systems allow administrators to write access control policies that govern access to private data. While policies are written in convenient languages, such as AWS Identity and Access Management Policy Language, manually written policies often become complex and error prone. In this paper, we investigate whether and how well Large Language Models (LLMs) can be used to synthesize access control policies. Our investigation focuses on the task of taking an access control request specification and zero-shot prompting LLMs to synthesize a well-formed access control policy which correctl","authors_text":"Adarsh Vatsa, Pratyush Patel, William Eiers","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-03-14T16:40:25Z","title":"Synthesizing Access Control Policies using Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.11573","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a2b47320070ce0ff095488f00cc7164193295651db196caee02be784067d92e","target":"record","created_at":"2026-07-05T10:31:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a6acc4002c97de114765abaaee70c62407c70955d17b6d59fdd357647c9b6940","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-03-14T16:40:25Z","title_canon_sha256":"5e5c13284fb1599f1def0e7181c194367c531a018b4f5c60705b0b6fa5c4b7d8"},"schema_version":"1.0","source":{"id":"2503.11573","kind":"arxiv","version":1}},"canonical_sha256":"a3f004ca3d3afa6ccf48509b18e5a2f8b01979f8f9f702f0f3d8cbfbb8691a66","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a3f004ca3d3afa6ccf48509b18e5a2f8b01979f8f9f702f0f3d8cbfbb8691a66","first_computed_at":"2026-07-05T10:31:34.976108Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:31:34.976108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HQU3XuH0VF36JppqcK1uE/t38HNeg1inh1WJfI6JZuRMUQBd0CJ+5BXEsLdjwz9YOtwuIR+HQhiTmqTant9dAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:31:34.976678Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.11573","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a2b47320070ce0ff095488f00cc7164193295651db196caee02be784067d92e","sha256:d42280dcc8d61f29524d9ed81505e7e029f993dc94926e857cc78c1b36af3a89"],"state_sha256":"166620a9bf9a6d48d5e0b8914c1227e9ea67517a999603734edcb03f4df15383"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IrBAQQFfZFIbAHxKmFHGeGYoyp0P5fq9K5EcGteG7J8JMXmY0N1+0pqUz9oHrlnmvCrdqOhDnko7zlE7jfQMAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T01:23:37.712475Z","bundle_sha256":"16c8860b238233363a658cd33fffb55daa0bd99bc0bc8ff1a2a17ba58b9066cf"}}