{"as_of":"2026-08-17T22:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:378c6e5f50006993c26760795a84d66ec09be2ef3bf2eeaafa24a3c73447c066","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:43:47.246182Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2504.14761/citation-record","integrity":"/paper/2504.14761/integrity","json":"/paper/2504.14761/citation-record.json","paper":"/paper/2504.14761"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.171400Z","title":"Spiegel et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.171400Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:df1d9e3dbda8c53c7a55d7877c1a92fc8b4b1464f18fad3f7e5f408587ea1ea4","observation_id":"81df539e-59cb-49da-918d-2ea6bb26d164","resolution":{"observed_at":"2026-08-16T11:43:47.171400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.572068Z","title":null,"venue":null,"work_id":"934b28b1-27ce-48d0-a77e-543c0e8d96a9","year":2024},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.177859Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:fb35608aed280b85fe32f4b1636d92daa38af04349710bd92800b5b2b857d078","observation_id":"e754eaf8-083f-46d4-bd4a-298768532b0f","resolution":{"observed_at":"2026-08-16T11:43:47.576237Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.553749Z","title":"About Web Identity Federation with OIDC","venue":null,"work_id":"fcd740cb-ed55-47df-93ba-e0eb43a4d607","year":2024},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.183500Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:e224e9f9795cc63b6356b9e99db73c77a2799721485bdd82cdc5b5888f2a51a6","observation_id":"00cf9387-70a0-4da4-9014-9ac099d30403","resolution":{"observed_at":"2026-08-16T11:43:47.558420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.539870Z","title":"Workload Identity Management in Secure Environments","venue":null,"work_id":"2729b03e-fbca-408b-9c6b-c664d7daf5b6","year":null},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.188360Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:dea2659e5d2a4b5c658a97542a02d2eab52459062b8edb77ae7090e67fa19207","observation_id":"2c87bf08-8ede-41cb-9fa4-21e5ded4b670","resolution":{"observed_at":"2026-08-16T11:43:47.544850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12345","last_updated":"2024-04-18T17:20:16Z","snapshot_observed_at":"2026-08-16T13:59:41.360362Z","submitted_at":"2024-04-18T17:20:16Z","title":"High spin axion insulator","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12345","snapshot_observed_at":"2026-08-16T11:43:47.193216Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.193216Z"},"links":{"cited_paper":"/paper/2404.12345","citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:ea669b00807c94880c27e913b4c0b3945c99b21ade76cecb0012ee15812aee17","observation_id":"b75251f8-c69f-4011-b0bc-3008af098218","resolution":{"observed_at":"2026-08-16T11:43:47.193216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.507009Z","title":"SPIFFE Concepts","venue":null,"work_id":"5697054d-a824-4f2b-b0cb-aff6eaa7d1cc","year":2024},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.207331Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:652a9068983b0b5fa9dfefb0db4b20ae752ede5a1bb29f19ca726123d40be250","observation_id":"841f0852-f5c4-4a68-9061-8ccdfa04d235","resolution":{"observed_at":"2026-08-16T11:43:47.514075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.485219Z","title":"Implementing OPA: Comprehensive Overview and Practical Examples","venue":null,"work_id":"c345a971-30c4-4d00-bb15-41ac65fa27a6","year":2024},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.213813Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:29940d745e5d7cd26b64a1d7a5e298c67f4be5e5e8816e4f17354909dceb30f6","observation_id":"d047d561-7c60-499e-88e9-924355167536","resolution":{"observed_at":"2026-08-16T11:43:47.491209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.468210Z","title":"Snowflake Uses Aembit to Secure Workload Access","venue":null,"work_id":"c0e80c43-df23-4474-b3b9-1dbf4c6657c0","year":2024},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.218520Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:3ba5b359a387776a0d347eb40cd9341a6374e5a588e423ae576da68e3ca72de4","observation_id":"98e68072-c248-4ead-8f83-21248f724044","resolution":{"observed_at":"2026-08-16T11:43:47.473526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.451255Z","title":"Security Token Service (STS) Documentation","venue":null,"work_id":"c43fe28f-c2d1-4b7f-bf93-9cb53af312b0","year":2024},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.225639Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:dc51570112123956f067ad8b13ae1b57ecf6be1ced88e4a4a200064674c47a4b","observation_id":"a3847f77-be86-4aab-bdfb-bad575f239aa","resolution":{"observed_at":"2026-08-16T11:43:47.457986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.434596Z","title":"CI/CD Security Best Practices","venue":null,"work_id":"1e40c19c-5e2a-4de0-8e3d-d37dfbaf4b29","year":2025},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.231254Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:d1c2dba310cc3a4239a7d24b1228bc8e3271c7f65e9f73eb861a849640f9bdb5","observation_id":"c88139a0-be41-4f41-a625-95a61fc5aa83","resolution":{"observed_at":"2026-08-16T11:43:47.440236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.526816Z","title":"Defending Continuous Integration/Continuous Delivery (CI/CD) Environments","venue":null,"work_id":"31e6935a-e56a-4f36-8339-a66fcff23b2b","year":2023},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.236696Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:dfea43eaad41239b62107ea4505c69026bf53a3bac80cf25349f98cf5a178a14","observation_id":"d2ca7981-00e0-4f3b-a37a-f227614cadef","resolution":{"observed_at":"2026-08-16T11:43:47.530913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"documents/4018223","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.370085Z","title":"Top Trends in Non-Human Identity Management","venue":null,"work_id":"4f4eb192-73bd-4443-af3a-969053afdf19","year":2024},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.241928Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:5aa6f940b18f2472039acbf3d53c57bcde7f75cde4df72f87c840f74bb2baabf","observation_id":"3b36d926-62ea-499c-8f61-0a3b3fc95e90","resolution":{"observed_at":"2026-08-16T11:43:47.383215Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:43:47.417426Z","title":"Security Strategies for Microservices-based Application Systems (SP 800-204)","venue":null,"work_id":"c65d56a3-cde6-4ab5-a41d-c73c18a87ebe","year":2020},"citing_paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T11:43:47.246182Z"},"links":{"citing_paper":"/paper/2504.14761"},"observation_digest":"sha256:b9b63878db81714e7fc113159a97eb57c4f62960fcd188170ddd237da2702b73","observation_id":"2e06302c-4d20-45af-994b-aaa74f0c6007","resolution":{"observed_at":"2026-08-16T11:43:47.422729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2504.14761","last_updated":"2025-04-20T23:08:17Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T11:39:02.703645Z","submitted_at":"2025-04-20T23:08:17Z","title":"Decoupling Identity from Access: Credential Broker Patterns for Secure CI/CD"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":3,"verified_exact":1,"verified_fuzzy":9},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2504.14761."}