{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XWRMX4GMCWUG6GREY5CB3WXATL","short_pith_number":"pith:XWRMX4GM","canonical_record":{"source":{"id":"2501.10560","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-17T21:30:55Z","cross_cats_sorted":["cs.DB","cs.PL"],"title_canon_sha256":"e95c9cf744cda342e1d40e06a5da8fb287bd231051d3230678b30a6b91d6f27c","abstract_canon_sha256":"b132e98541665e033c7885d74850fee67478a5cf5f4b94e348effefb473c7f09"},"schema_version":"1.0"},"canonical_sha256":"bda2cbf0cc15a86f1a24c7441ddae09ae131960008654f24a06216f5991de734","source":{"kind":"arxiv","id":"2501.10560","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.10560","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"arxiv_version","alias_value":"2501.10560v1","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.10560","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"pith_short_12","alias_value":"XWRMX4GMCWUG","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"pith_short_16","alias_value":"XWRMX4GMCWUG6GRE","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"pith_short_8","alias_value":"XWRMX4GM","created_at":"2026-07-05T10:02:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XWRMX4GMCWUG6GREY5CB3WXATL","target":"record","payload":{"canonical_record":{"source":{"id":"2501.10560","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-17T21:30:55Z","cross_cats_sorted":["cs.DB","cs.PL"],"title_canon_sha256":"e95c9cf744cda342e1d40e06a5da8fb287bd231051d3230678b30a6b91d6f27c","abstract_canon_sha256":"b132e98541665e033c7885d74850fee67478a5cf5f4b94e348effefb473c7f09"},"schema_version":"1.0"},"canonical_sha256":"bda2cbf0cc15a86f1a24c7441ddae09ae131960008654f24a06216f5991de734","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:02:30.022156Z","signature_b64":"JFf+R+ZmPWDuZ4mKYzCNVecWrOYBuYhK6b57OPhrAQd5WtgsPgQrkaILaiM/2rMGVar/2cAFRV2/Qs+oopJBDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bda2cbf0cc15a86f1a24c7441ddae09ae131960008654f24a06216f5991de734","last_reissued_at":"2026-07-05T10:02:30.021680Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:02:30.021680Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.10560","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:02:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kc1NYpT0j8JzHgoNLPQY58jkxg8x/bWv+W1SVoxLuYG1n/aSGHmQcQRwqHOYYQA4Ga91yvi2tA1I6KbFjPZNCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T10:22:21.437671Z"},"content_sha256":"75d4acb791356542fb59757815a18a259220a15cf9b53f751e2d610e3da49745","schema_version":"1.0","event_id":"sha256:75d4acb791356542fb59757815a18a259220a15cf9b53f751e2d610e3da49745"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XWRMX4GMCWUG6GREY5CB3WXATL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Picachv: Formally Verified Data Use Policy Enforcement for Secure Data Analytics","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.DB","cs.PL"],"primary_cat":"cs.CR","authors_text":"Chenghong Wang, Haobin Hiroki Chen, Hongbo Chen, Mingshen Sun, Xiaofeng Wang","submitted_at":"2025-01-17T21:30:55Z","abstract_excerpt":"Ensuring the proper use of sensitive data in analytics under complex privacy policies is an increasingly critical challenge. Many existing approaches lack portability, verifiability, and scalability across diverse data processing frameworks. We introduce Picachv, a novel security monitor that automatically enforces data use policies. It works on relational algebra as an abstraction for program semantics, enabling policy enforcement on query plans generated by programs during execution. This approach simplifies analysis across diverse analytical operations and supports various front-end query l"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.10560","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.10560/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:02:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e+p1QvoupwIZio8seVkpFlpmNOMguGqawh/VWabD4LetQaMfwNhsOQQG5OSGDc+2CTJe7V0xJgziTXJQzczGDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T10:22:21.438235Z"},"content_sha256":"c6efc03d937164ee0aafc8b6baf5c23542ffbc6771afcc3fae034d3e2fa125d9","schema_version":"1.0","event_id":"sha256:c6efc03d937164ee0aafc8b6baf5c23542ffbc6771afcc3fae034d3e2fa125d9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XWRMX4GMCWUG6GREY5CB3WXATL/bundle.json","state_url":"https://pith.science/pith/XWRMX4GMCWUG6GREY5CB3WXATL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XWRMX4GMCWUG6GREY5CB3WXATL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T10:22:21Z","links":{"resolver":"https://pith.science/pith/XWRMX4GMCWUG6GREY5CB3WXATL","bundle":"https://pith.science/pith/XWRMX4GMCWUG6GREY5CB3WXATL/bundle.json","state":"https://pith.science/pith/XWRMX4GMCWUG6GREY5CB3WXATL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XWRMX4GMCWUG6GREY5CB3WXATL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XWRMX4GMCWUG6GREY5CB3WXATL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b132e98541665e033c7885d74850fee67478a5cf5f4b94e348effefb473c7f09","cross_cats_sorted":["cs.DB","cs.PL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-17T21:30:55Z","title_canon_sha256":"e95c9cf744cda342e1d40e06a5da8fb287bd231051d3230678b30a6b91d6f27c"},"schema_version":"1.0","source":{"id":"2501.10560","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.10560","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"arxiv_version","alias_value":"2501.10560v1","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.10560","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"pith_short_12","alias_value":"XWRMX4GMCWUG","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"pith_short_16","alias_value":"XWRMX4GMCWUG6GRE","created_at":"2026-07-05T10:02:30Z"},{"alias_kind":"pith_short_8","alias_value":"XWRMX4GM","created_at":"2026-07-05T10:02:30Z"}],"graph_snapshots":[{"event_id":"sha256:c6efc03d937164ee0aafc8b6baf5c23542ffbc6771afcc3fae034d3e2fa125d9","target":"graph","created_at":"2026-07-05T10:02:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.10560/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Ensuring the proper use of sensitive data in analytics under complex privacy policies is an increasingly critical challenge. Many existing approaches lack portability, verifiability, and scalability across diverse data processing frameworks. We introduce Picachv, a novel security monitor that automatically enforces data use policies. It works on relational algebra as an abstraction for program semantics, enabling policy enforcement on query plans generated by programs during execution. This approach simplifies analysis across diverse analytical operations and supports various front-end query l","authors_text":"Chenghong Wang, Haobin Hiroki Chen, Hongbo Chen, Mingshen Sun, Xiaofeng Wang","cross_cats":["cs.DB","cs.PL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-17T21:30:55Z","title":"Picachv: Formally Verified Data Use Policy Enforcement for Secure Data Analytics"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.10560","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:75d4acb791356542fb59757815a18a259220a15cf9b53f751e2d610e3da49745","target":"record","created_at":"2026-07-05T10:02:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b132e98541665e033c7885d74850fee67478a5cf5f4b94e348effefb473c7f09","cross_cats_sorted":["cs.DB","cs.PL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-17T21:30:55Z","title_canon_sha256":"e95c9cf744cda342e1d40e06a5da8fb287bd231051d3230678b30a6b91d6f27c"},"schema_version":"1.0","source":{"id":"2501.10560","kind":"arxiv","version":1}},"canonical_sha256":"bda2cbf0cc15a86f1a24c7441ddae09ae131960008654f24a06216f5991de734","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bda2cbf0cc15a86f1a24c7441ddae09ae131960008654f24a06216f5991de734","first_computed_at":"2026-07-05T10:02:30.021680Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:02:30.021680Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JFf+R+ZmPWDuZ4mKYzCNVecWrOYBuYhK6b57OPhrAQd5WtgsPgQrkaILaiM/2rMGVar/2cAFRV2/Qs+oopJBDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:02:30.022156Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.10560","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:75d4acb791356542fb59757815a18a259220a15cf9b53f751e2d610e3da49745","sha256:c6efc03d937164ee0aafc8b6baf5c23542ffbc6771afcc3fae034d3e2fa125d9"],"state_sha256":"126ff29f65900c6727bf15b5735e2b1365ce20ec60ec10d52dd3636720f0df3a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4r8D6YzzC98z0sDR0DW8ODVkYcZeJIq4voH/RGTu7HLmmx0ID8dahjTif1inI1bXuo0jbtPuxkQlsGE+ZRAnBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T10:22:21.443284Z","bundle_sha256":"c3c15f62382c9677150f4e6c547dfc27e065fd550e3d788fd6d74c14bebfd680"}}