arXiv paper· software engineering / formal methods (access control & governance automation)· method paper

Compiling Sufficient Governance Context from Declared Losses and Reachable States: Exact Observation-Contract Synthesis with Cardinality and Cost Objectives

Gaston Besanson

cs.SE · cs.AI · cs.LO

Quick verdict

Standard rough-set reduct synthesis via SAT/MaxSAT applied to constructed governance domains; rigorous and honest, but novelty modest and evidence synthetic.

Summary

The paper formulates governance-gate design as exact sufficient-set synthesis: given a finite reachable-state model, a deterministic declared verdict, and candidate observable attributes, it computes observation contracts — attribute sets whose values determine the verdict on every reachable state. Using classical rough-set machinery (discernibility families; Pawlak 1982, Skowron–Rauszer 1992), the pipeline prunes pairwise difference sets, encodes them as CNF, and selects contracts via plain SAT, cardinality MaxSAT, or cost-weighted MaxSAT, then machine-checks each contract's sufficiency and returns counterexamples on failure. On a ten-attribute code/cloud domain (15,120 reachable tuples) the six-attribute core is individually indispensable yet insufficient, and two seven-attribute reducts are separated exactly by a declared cost model (6.124 vs 7.354). On a 35-attribute domain (27,000 tuples) the pattern recurs (four-property core, minimum cardinality nine, at least five minimum-cardinality contracts) but that domain's cost model ties all known alternatives at 9.153 — reported as found. Exhaustive reduct enumeration times out at a registered 300 seconds on families up to 100 attributes while SAT/MaxSAT solves in well under a second; MaxSAT showed no cardinality advantage over plain SAT. In AuthorityBench, the manual declared-only baseline is not exactly sufficient on any of three domains. Main limitations: all domains are constructed rather than operational, the machinery is standard reduct and test-cost-sensitive reduction repackaged for governance, timing excludes pipeline-construction costs, and no cost-weight sensitivity analysis was performed.

Review complete

Assessment at a glance

software engineering / formal methods (access control & governance automation)

3

risk flags identified

● high 0

● medium 2

● low 1

Reproducibility readinesshigh
Code & data availableyes
Review confidencehigh
AI text signal0/20 passages flagged
Deep research viableCode-reproducible

5 strengths · 5 weaknesses · 0 author questions

AI text signal = Binoculars zero-shot detector score over 20 sampled passages (Fast-DetectGPT co-reported) — absence does not prove human authorship, and a flag does not imply misconduct.

Levels reflect verification complexity — not a quality score. Evolve never rates your paper.

Key claims under review

  • Observation contracts sufficient for a declared verdict over a finite reachable-state model can be synthesized exactly via pruned discernibility families and SAT/MaxSAT, with every selected contract machine-checked for sufficiency.
  • On both constructed domains the individually-indispensable core is not itself a sufficient contract (six of ten, and four of thirty-five, attributes), and multiple distinct minimum-cardinality reducts exist (exactly two; at least five).
  • A declared additive cost model exactly separates the two equal-cardinality reducts on the code/cloud domain (6.124 vs 7.354) but ties all known minimum-cardinality contracts on the larger domain (9.153), reported as a negative finding.
  • Where exhaustive reduct enumeration exceeds a registered 300-second timeout (families up to 100 attributes), SAT/MaxSAT synthesis completes in well under a second, with no measured cardinality advantage for MaxSAT over plain SAT.
  • The manually declared least-privilege baseline is not exactly sufficient on any of the three AuthorityBench domains.

Strengths

  • Exceptional epistemic discipline

    Section 8 adjudicates ten registered claims as Supported/Partial; Section 13's append-only log discloses a corrected singleton-sufficiency overclaim (Proposition 1→1′), a degenerate scaling benchmark (v5.0), and a self-found internal-validity defect (v3.1) — with mechanisms, not excuses.

  • Negative results retained, bounds not inflated

    CH-C2's cost tie at 9.153 is reported as not-supported; CH-C1's contract multiplicity is a capped lower bound (≥5) via blocking clauses, never rounded up; the ABAC-mining comparison is ruled inconclusive by the registered decision rule rather than spun as a win (Section 6).

  • Verification layered, encoding not assumed

  • Reproducibility engineered, externally confirmed

  • Thorough related-work fence

Weaknesses

  • Formal core is off-the-shelf

  • Entirely synthetic evidence base

  • Unmeasured end-to-end cost

  • Scaling evidence thin and workload-asymmetric

  • Cost objective's value rests on one domain

Full Review Report

$1.99 · one-time

Unlock the complete preliminary analysis Evolve produced for this paper.

  • All 5 strengths & 5 weaknesses, analyzed in detail
  • 3 risk flags with severity, section & reviewer questions
  • Methods & statistical evidence assessment
  • 0 questions a peer reviewer would ask
  • Full six-dimension evaluation report & recommendations

One-time purchase · this paper only

One-time purchase, this paper only. AI-generated preliminary analysis — not peer review.

Frequently asked questions

What is an "observation contract" in this paper?

It is a set of candidate attributes whose values determine the paper's declared verdict on every reachable state of the modeled system (sufficient set). An inclusion-minimal such set is a reduct; a reduct chosen by minimum cardinality or minimum declared cost and bound to a gate schema is called an authority contract.

Is the core of indispensable attributes always sufficient as an observation set?

No — that is the paper's central empirical finding. On both constructed domains the core (6 of 10, and 4 of 35, attributes) is individually indispensable but not jointly sufficient; separate reducts (two, and at least five, respectively) are needed to close the gap, each independently verified sufficient.

How are the observation contracts computed and verified?

Plain SAT finds any sufficient contract, cardinality MaxSAT finds a minimum-cardinality one, and weighted MaxSAT finds a minimum-cost one using the declared per-attribute costs as soft-clause weights. Every returned contract is re-checked for sufficiency, with a concrete counterexample on failure. Exhaustive enumeration of all reducts is only feasible for small attribute sets.

Is the code available and has anyone reproduced the results?

Yes. A pip-installable companion artifact (sarc-authority-derivation) is described, with a bootstrap script and committed result files; an independent reproducer reportedly ran the packaged example from a clean clone and matched the CH-B1 output hash.

About this review

This is an AI-generated preliminary review by Evolve.Pub, produced from the openly available text of the paper. It is not peer review and does not represent the authors' views. The canonical record of the paper is at the publisher link above.

  • Companion artifact (repository, committed JSON outputs, prereg files) not directly inspected; all numbers taken from the paper text as stated.
  • arXiv v1 text only; v0.6.6 revision history suggests text was evolving — extracted text may not reflect the final posted version.
  • No figures analyzed; the paper appears tables/text-only in the extraction.
  • External-reproduction and rerun claims (Section 5 states this revision reran no benchmark) are accepted as reported, not independently verified.

Go deeper on this paper

Wrote a paper? Stress-test it before reviewers do.

Upload your manuscript for the same structured scrutiny — reasoning, statistics, evidence, figures, and reproducibility.

Scan your paper
Compiling Sufficient Governance Context from Declared Losses and Reachable States: Exact Observation-Contract Synthesis with Cardinality and Cost Objectives | Evolve.Pub