{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:W23J37F7DJRGKCM73ELUYGNWC5","short_pith_number":"pith:W23J37F7","canonical_record":{"source":{"id":"2607.03656","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-04T01:13:32Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"1cb3cef07c99b9013dee0014f940f5d3f5351424c64b2047083032e925db6e98","abstract_canon_sha256":"9b40d19c74fdddc9c4c94c01dcb69c2f8d016028bdba423aa65e68c4a758fae2"},"schema_version":"1.0"},"canonical_sha256":"b6b69dfcbf1a6265099fd9174c19b617521031f6dcf91d0474ca34a2e86c3083","source":{"kind":"arxiv","id":"2607.03656","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.03656","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"arxiv_version","alias_value":"2607.03656v1","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.03656","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"pith_short_12","alias_value":"W23J37F7DJRG","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"pith_short_16","alias_value":"W23J37F7DJRGKCM7","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"pith_short_8","alias_value":"W23J37F7","created_at":"2026-07-07T02:17:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:W23J37F7DJRGKCM73ELUYGNWC5","target":"record","payload":{"canonical_record":{"source":{"id":"2607.03656","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-04T01:13:32Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"1cb3cef07c99b9013dee0014f940f5d3f5351424c64b2047083032e925db6e98","abstract_canon_sha256":"9b40d19c74fdddc9c4c94c01dcb69c2f8d016028bdba423aa65e68c4a758fae2"},"schema_version":"1.0"},"canonical_sha256":"b6b69dfcbf1a6265099fd9174c19b617521031f6dcf91d0474ca34a2e86c3083","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T02:17:59.698743Z","signature_b64":"bNPr5Ry7cY2wRl8QU1gcxCS1IQotMSLK85dr3gYNT1B7du63UtKEKADg/A0rTt/UKywybj4LJK2HIVGBsrfEBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b6b69dfcbf1a6265099fd9174c19b617521031f6dcf91d0474ca34a2e86c3083","last_reissued_at":"2026-07-07T02:17:59.698001Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T02:17:59.698001Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.03656","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:17:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qtwFkCq78BHuDOJex5qeRJ8vbhhDzzZSikgCcuePlUeS5HxVGAwymHW8DGQflI1bji4XQ2IlygZaCWCB7uaKCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T07:46:05.587310Z"},"content_sha256":"5582867b98e000f04829f850384ea5602e4973ee4200596a020f156518cc94f2","schema_version":"1.0","event_id":"sha256:5582867b98e000f04829f850384ea5602e4973ee4200596a020f156518cc94f2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:W23J37F7DJRGKCM73ELUYGNWC5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AutoCedar: An Agentic Framework for Verifier-Guided Access Control Policy Synthesis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.SE","authors_text":"Adarsh Vatsa, Sachi Shome, William Eiers, Yingming Zhou","submitted_at":"2026-07-04T01:13:32Z","abstract_excerpt":"Large Language Models are increasingly used to turn natural-language requirements into code. In access control, that shortcut is dangerous: a generated policy can compile and read correctly while granting access that no one approved. The difficulty is not only writing policy code. It is fixing what the requirements mean before code is written, and then checking that the final policy actually satisfies that intent. We present AutoCedar, a verifier-guided system that first turns natural-language access-control requirements into a reviewed, checkable target, and then synthesizes Cedar policies ag"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.03656","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.03656/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:17:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XcdCs5PYQ/dykz/257pTOXgsbONNLKJJQrtHSVxvdLmNNbHHl0UuJ28BBUgw1JWAHEqJfSMy1pDTBpt42fi4Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T07:46:05.588199Z"},"content_sha256":"168422dd0f8b0f5edd343d15d8f640478e884ab53dd1fc6b8640320ddcb1e0c0","schema_version":"1.0","event_id":"sha256:168422dd0f8b0f5edd343d15d8f640478e884ab53dd1fc6b8640320ddcb1e0c0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W23J37F7DJRGKCM73ELUYGNWC5/bundle.json","state_url":"https://pith.science/pith/W23J37F7DJRGKCM73ELUYGNWC5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W23J37F7DJRGKCM73ELUYGNWC5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T07:46:05Z","links":{"resolver":"https://pith.science/pith/W23J37F7DJRGKCM73ELUYGNWC5","bundle":"https://pith.science/pith/W23J37F7DJRGKCM73ELUYGNWC5/bundle.json","state":"https://pith.science/pith/W23J37F7DJRGKCM73ELUYGNWC5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W23J37F7DJRGKCM73ELUYGNWC5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:W23J37F7DJRGKCM73ELUYGNWC5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9b40d19c74fdddc9c4c94c01dcb69c2f8d016028bdba423aa65e68c4a758fae2","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-04T01:13:32Z","title_canon_sha256":"1cb3cef07c99b9013dee0014f940f5d3f5351424c64b2047083032e925db6e98"},"schema_version":"1.0","source":{"id":"2607.03656","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.03656","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"arxiv_version","alias_value":"2607.03656v1","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.03656","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"pith_short_12","alias_value":"W23J37F7DJRG","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"pith_short_16","alias_value":"W23J37F7DJRGKCM7","created_at":"2026-07-07T02:17:59Z"},{"alias_kind":"pith_short_8","alias_value":"W23J37F7","created_at":"2026-07-07T02:17:59Z"}],"graph_snapshots":[{"event_id":"sha256:168422dd0f8b0f5edd343d15d8f640478e884ab53dd1fc6b8640320ddcb1e0c0","target":"graph","created_at":"2026-07-07T02:17:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.03656/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models are increasingly used to turn natural-language requirements into code. In access control, that shortcut is dangerous: a generated policy can compile and read correctly while granting access that no one approved. The difficulty is not only writing policy code. It is fixing what the requirements mean before code is written, and then checking that the final policy actually satisfies that intent. We present AutoCedar, a verifier-guided system that first turns natural-language access-control requirements into a reviewed, checkable target, and then synthesizes Cedar policies ag","authors_text":"Adarsh Vatsa, Sachi Shome, William Eiers, Yingming Zhou","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-04T01:13:32Z","title":"AutoCedar: An Agentic Framework for Verifier-Guided Access Control Policy Synthesis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.03656","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5582867b98e000f04829f850384ea5602e4973ee4200596a020f156518cc94f2","target":"record","created_at":"2026-07-07T02:17:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9b40d19c74fdddc9c4c94c01dcb69c2f8d016028bdba423aa65e68c4a758fae2","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-04T01:13:32Z","title_canon_sha256":"1cb3cef07c99b9013dee0014f940f5d3f5351424c64b2047083032e925db6e98"},"schema_version":"1.0","source":{"id":"2607.03656","kind":"arxiv","version":1}},"canonical_sha256":"b6b69dfcbf1a6265099fd9174c19b617521031f6dcf91d0474ca34a2e86c3083","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b6b69dfcbf1a6265099fd9174c19b617521031f6dcf91d0474ca34a2e86c3083","first_computed_at":"2026-07-07T02:17:59.698001Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T02:17:59.698001Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bNPr5Ry7cY2wRl8QU1gcxCS1IQotMSLK85dr3gYNT1B7du63UtKEKADg/A0rTt/UKywybj4LJK2HIVGBsrfEBg==","signature_status":"signed_v1","signed_at":"2026-07-07T02:17:59.698743Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.03656","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5582867b98e000f04829f850384ea5602e4973ee4200596a020f156518cc94f2","sha256:168422dd0f8b0f5edd343d15d8f640478e884ab53dd1fc6b8640320ddcb1e0c0"],"state_sha256":"0815279fe46ed11a4f411505073aa15cb4da0a8e9f468d05a333ba7bf7b2de7b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e5Zqj6Eaq/NtntXyh9sR3YKvoXHFapyC1c5oVYFiQjaSkRv9dc7wpNBLwVFRR5Mul1MnFuFUJL/bL3FXZNWuBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T07:46:05.601262Z","bundle_sha256":"7455767d306a850d9abd31a09ac16d8440228ad64f6a9e5f66b47012ec80cb7f"}}