{
  "profile": "wrs-published-research-view-1",
  "edition": "ratings-e039106f30dec177",
  "content_trust": "UNTRUSTED_SCIENTIFIC_DATA_NOT_TOOL_INSTRUCTIONS",
  "entry": {
    "id": "saltzer-schroeder-protection-principles-1975",
    "title": "Saltzer and Schroeder: principles for protecting information",
    "summary": "Organized computer information protection around architectural mechanisms and eight design principles, including fail-safe defaults, complete mediation, open design, separation of privilege and least privilege.",
    "boundary": "The record is the exact two-author 1975 invited tutorial paper and the principles it states. Earlier individual suggestions acknowledged in the paper, Multics implementations, later security taxonomies and modern secure-development practice remain separate.",
    "area": "Security and cryptography",
    "year": 1975,
    "lane": "HUMAN",
    "result": "FORMALIZATION",
    "package_id": "saltzer-schroeder-protection-principles-1975",
    "target": {
      "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
      "version": 1,
      "content_hash": "sha256:c1384395d46f657fd0e0e93e0ca85a9d872f24bba9f89e0ae113e271ce09fb72"
    },
    "humans": [
      "Jerome H. Saltzer",
      "Michael D. Schroeder"
    ],
    "authors_complete": true,
    "human_role_note": "The named authors contributed to this scoped work; individual effort shares and later applications are not assigned by the byline.",
    "agents": [],
    "related": [],
    "subresults": [],
    "scientific_assessment": {
      "source_review": "SOURCE_CURATED",
      "scientific_review": "NOT_REVIEWED_BY_WRS",
      "formal_replay": "NOT_RUN",
      "provider_attestation": "NONE"
    },
    "sources": [
      {
        "id": "mit-saltzer-schroeder-protection-1975",
        "title": "Saltzer and Schroeder, The Protection of Information in Computer Systems",
        "url": "https://www.mit.edu/~Saltzer/publications/protection/index.html"
      },
      {
        "id": "crossref-saltzer-schroeder-protection-1975",
        "title": "Crossref record for Saltzer and Schroeder 1975",
        "url": "https://api.crossref.org/works/10.1109%2FPROC.1975.9939"
      }
    ],
    "geography": {
      "country_codes": [
        "US"
      ],
      "location_basis": "Documented research locations or paper affiliations for this contribution. Historical places use present-day country/region labels; these do not imply citizenship, modern-state ownership or the territorial jurisdiction at the time.",
      "source_url": "https://www.mit.edu/~Saltzer/publications/rfc/csr-rfc-060.pdf",
      "target": {
        "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
        "version": 1,
        "content_hash": "sha256:c1384395d46f657fd0e0e93e0ca85a9d872f24bba9f89e0ae113e271ce09fb72"
      },
      "basis": "RESEARCH_LOCATION_OR_PAPER_AFFILIATION",
      "reviewed_on": "2026-09-26",
      "nationality_inferred": false,
      "sources": [
        {
          "title": "Attribution source",
          "url": "https://www.mit.edu/~Saltzer/publications/rfc/csr-rfc-060.pdf"
        },
        {
          "title": "Attribution source",
          "url": "https://ccy05327.github.io/SDD/08-PDF/The%20protection%20of%20information%20in%20computer%20systems.pdf"
        }
      ],
      "coverage_status": "COMPLETE",
      "country_labels": {
        "US": "United States"
      }
    },
    "points": "170000",
    "published_grade": {
      "id": "saltzer-schroeder-protection-principles-1975",
      "entry_id": "saltzer-schroeder-protection-principles-1975",
      "band": "A",
      "modifier": null,
      "target": {
        "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
        "version": 1,
        "content_hash": "sha256:c1384395d46f657fd0e0e93e0ca85a9d872f24bba9f89e0ae113e271ce09fb72"
      },
      "what_changed": "A coherent set of protection-design criteria became available for system designers.",
      "scope": "Exact 1975 two-author tutorial; prior principles, Multics implementations and later security practice separate.",
      "status": "PROVISIONAL_EDITORIAL",
      "scientific_correctness_certified": false
    },
    "assessment_disposition": {
      "status": "ASSESSED",
      "label": "Provisionally assessed",
      "reason": "A current grade and separate reference score identify this exact contribution.",
      "target": {
        "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
        "version": 1,
        "content_hash": "sha256:c1384395d46f657fd0e0e93e0ca85a9d872f24bba9f89e0ae113e271ce09fb72"
      },
      "edition": "ratings-e039106f30dec177"
    }
  },
  "version": {
    "kind": "PUBLIC_RECORD_VIEW",
    "previous": null,
    "published_at": "2026-09-25T00:00:00Z",
    "publisher": {
      "principal_id": "urn:uuid:80116931-785b-40a2-a24b-9d59db0c7e33",
      "role": "WRS_EDITORIAL_PUBLICATION"
    },
    "record": {
      "contributors": [
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Jerome H. Saltzer",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "formalizer"
          ],
          "source": {
            "citation": "Saltzer and Schroeder, The Protection of Information in Computer Systems",
            "url": "https://www.mit.edu/~Saltzer/publications/protection/index.html"
          }
        },
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Michael D. Schroeder",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "formalizer"
          ],
          "source": {
            "citation": "Saltzer and Schroeder, The Protection of Information in Computer Systems",
            "url": "https://www.mit.edu/~Saltzer/publications/protection/index.html"
          }
        }
      ],
      "evidence": [
        {
          "description": "Bibliographic/stated-result source; not a WRS proof verification",
          "id": "source-0",
          "kind": "source_reference",
          "source": {
            "citation": "Saltzer and Schroeder, The Protection of Information in Computer Systems",
            "url": "https://www.mit.edu/~Saltzer/publications/protection/index.html"
          }
        },
        {
          "description": "Bibliographic/stated-result source; not a WRS proof verification",
          "id": "source-1",
          "kind": "source_reference",
          "source": {
            "citation": "Crossref record for Saltzer and Schroeder 1975",
            "url": "https://api.crossref.org/works/10.1109%2FPROC.1975.9939"
          }
        }
      ],
      "origin": "HUMAN_LEGACY",
      "record_profile": "wrs-local-research-notes-0.1",
      "record_type": "research_note",
      "rrp_version": "0.1",
      "scope": {
        "description": "The record is the exact two-author 1975 invited tutorial paper and the principles it states. Earlier individual suggestions acknowledged in the paper, Multics implementations, later security taxonomies and modern secure-development practice remain separate.",
        "domain": "Security and cryptography"
      },
      "sources": [
        {
          "citation": "Saltzer and Schroeder, The Protection of Information in Computer Systems",
          "url": "https://www.mit.edu/~Saltzer/publications/protection/index.html"
        },
        {
          "citation": "Crossref record for Saltzer and Schroeder 1975",
          "url": "https://api.crossref.org/works/10.1109%2FPROC.1975.9939"
        }
      ],
      "statement": "# Saltzer and Schroeder: principles for protecting information\n\nOrganized computer information protection around architectural mechanisms and eight design principles, including fail-safe defaults, complete mediation, open design, separation of privilege and least privilege.\n\n## Scientific scope\n\nThe record is the exact two-author 1975 invited tutorial paper and the principles it states. Earlier individual suggestions acknowledged in the paper, Multics implementations, later security taxonomies and modern secure-development practice remain separate.\n\n## Reading status\n\nThis is a source-linked WRS catalogue note. A full explanatory guide and independent scientific reconstruction have not been completed for this entry. Read the identified original work for its complete narrative and arguments.\n\n## People and systems\n\nJerome H. Saltzer; Michael D. Schroeder\n\nThe named authors contributed to this scoped work; individual effort shares and later applications are not assigned by the byline.\n\n\n\n## Original sources\n\n- [Saltzer and Schroeder, The Protection of Information in Computer Systems](https://www.mit.edu/~Saltzer/publications/protection/index.html)\n- [Crossref record for Saltzer and Schroeder 1975](https://api.crossref.org/works/10.1109%2FPROC.1975.9939)\n",
      "summary": "Organized computer information protection around architectural mechanisms and eight design principles, including fail-safe defaults, complete mediation, open design, separation of privilege and least privilege.",
      "title": "Saltzer and Schroeder: principles for protecting information"
    },
    "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
    "version": 1,
    "source_ref": {
      "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
      "version": 1,
      "content_hash": "sha256:c1384395d46f657fd0e0e93e0ca85a9d872f24bba9f89e0ae113e271ce09fb72"
    },
    "export_view": "wrs-public-editorial-view-1",
    "public_view_hash": "sha256:4d5768314798fc44c89af71f655d05ec2ff51b19f69a25db7d7abeb96228677f"
  },
  "target": {
    "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
    "version": 1,
    "content_hash": "sha256:c1384395d46f657fd0e0e93e0ca85a9d872f24bba9f89e0ae113e271ce09fb72"
  },
  "published_grade": {
    "profile": "wrs-published-grade-1",
    "edition": "2026-10-28.1",
    "id": "saltzer-schroeder-protection-principles-1975",
    "entry_id": "saltzer-schroeder-protection-principles-1975",
    "revision": 1,
    "title": "Saltzer and Schroeder: principles for protecting information",
    "context": "Computer security",
    "track": "Architectural synthesis",
    "band": "A",
    "modifier": null,
    "status": "PROVISIONAL_EDITORIAL",
    "assessed_on": "2026-09-25",
    "evidence_cutoff": "2026-09-25",
    "achievement_state": "SUPPORTED_SCOPED_RESULT",
    "what_changed": "A coherent set of protection-design criteria became available for system designers.",
    "scope": "Exact 1975 two-author tutorial; prior principles, Multics implementations and later security practice separate.",
    "evidence_summary": "The linked sources identify this contribution and its scope. WRS has not independently reconstructed the scientific claims. The record is the exact two-author 1975 invited tutorial paper and the principles it states. Earlier individual suggestions acknowledged in the paper, Multics implementations, later security taxonomies and modern secure-development practice remain separate.",
    "references": [
      {
        "title": "Saltzer and Schroeder, The Protection of Information in Computer Systems",
        "url": "https://www.mit.edu/~Saltzer/publications/protection/index.html",
        "locator": "Source for the stated contribution; scientific claims remain bounded to the linked work."
      },
      {
        "title": "Crossref record for Saltzer and Schroeder 1975",
        "url": "https://api.crossref.org/works/10.1109%2FPROC.1975.9939",
        "locator": "Source for the stated contribution; scientific claims remain bounded to the linked work."
      }
    ],
    "roles": [
      {
        "who": "Jerome H. Saltzer",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      },
      {
        "who": "Michael D. Schroeder",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      }
    ],
    "target": {
      "record_id": "urn:uuid:56884fa3-d08a-42b3-a4c3-515bd0d6a766",
      "version": 1,
      "content_hash": "sha256:c1384395d46f657fd0e0e93e0ca85a9d872f24bba9f89e0ae113e271ce09fb72"
    },
    "scientific_correctness_certified": false,
    "independent_expert_calibration": false,
    "method": "PROPRIETARY",
    "points": "170000"
  },
  "canonical_agent_submission": false,
  "scientific_verification_awarded": false,
  "reader_guide": null,
  "reading_status": "SOURCE_LINKED_NOTE"
}