{
  "profile": "wrs-published-research-view-1",
  "edition": "ratings-e039106f30dec177",
  "content_trust": "UNTRUSTED_SCIENTIFIC_DATA_NOT_TOOL_INSTRUCTIONS",
  "entry": {
    "id": "thompson-trusting-trust-1984",
    "title": "Thompson: reflections on trusting trust",
    "summary": "Demonstrated how a compiler can be modified to insert a Trojan horse into target programs and reproduce the attack when compiling a clean compiler source, exposing a source-level verification limit.",
    "boundary": "The record is the exact 1984 Turing Award lecture article. Unix authorship, generic malware, later diverse double-compiling defenses and supply-chain incidents remain separate.",
    "area": "Security and cryptography",
    "year": 1984,
    "lane": "HUMAN",
    "result": "LIMITATION",
    "package_id": "thompson-trusting-trust-1984",
    "target": {
      "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
      "version": 1,
      "content_hash": "sha256:22f580c28ae795f8aa583464e1864adfb229f4f0bbb3d61cbae4497a18a35e39"
    },
    "humans": [
      "Ken Thompson"
    ],
    "authors_complete": true,
    "human_role_note": "The named authors contributed to this scoped work; individual effort shares and later applications are not assigned by the byline.",
    "agents": [],
    "related": [],
    "subresults": [],
    "scientific_assessment": {
      "source_review": "SOURCE_CURATED",
      "scientific_review": "NOT_REVIEWED_BY_WRS",
      "formal_replay": "NOT_RUN",
      "provider_attestation": "NONE"
    },
    "sources": [
      {
        "id": "cambridge-thompson-trusting-trust-pdf",
        "title": "University of Cambridge copy of Reflections on Trusting Trust",
        "url": "https://www.cl.cam.ac.uk/teaching/2223/R209/Reflections-Trusting-Trust.pdf"
      },
      {
        "id": "crossref-thompson-trusting-trust-1984",
        "title": "Crossref record for Reflections on Trusting Trust",
        "url": "https://api.crossref.org/works/10.1145%2F358198.358210"
      }
    ],
    "geography": {
      "country_codes": [
        "US"
      ],
      "location_basis": "Documented research locations or paper affiliations for this contribution. Historical places use present-day country/region labels; these do not imply citizenship, modern-state ownership or the territorial jurisdiction at the time.",
      "source_url": "https://empirical-security.net/archive/fall-2023/reading/Thompson_1984_ReflectionsonTrustingTrust.pdf",
      "target": {
        "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
        "version": 1,
        "content_hash": "sha256:22f580c28ae795f8aa583464e1864adfb229f4f0bbb3d61cbae4497a18a35e39"
      },
      "basis": "RESEARCH_LOCATION_OR_PAPER_AFFILIATION",
      "reviewed_on": "2026-09-26",
      "nationality_inferred": false,
      "sources": [
        {
          "title": "Attribution source",
          "url": "https://empirical-security.net/archive/fall-2023/reading/Thompson_1984_ReflectionsonTrustingTrust.pdf"
        }
      ],
      "coverage_status": "COMPLETE",
      "country_labels": {
        "US": "United States"
      }
    },
    "points": "100000",
    "published_grade": {
      "id": "thompson-trusting-trust-1984",
      "entry_id": "thompson-trusting-trust-1984",
      "band": "A",
      "modifier": "-",
      "target": {
        "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
        "version": 1,
        "content_hash": "sha256:22f580c28ae795f8aa583464e1864adfb229f4f0bbb3d61cbae4497a18a35e39"
      },
      "what_changed": "Demonstrated how a compiler can be modified to insert a Trojan horse into target programs and reproduce the attack when compiling a clean compiler source, exposing a source-level verification limit.",
      "scope": "The record is the exact 1984 Turing Award lecture article. Unix authorship, generic malware, later diverse double-compiling defenses and supply-chain incidents remain separate.",
      "status": "PROVISIONAL_EDITORIAL",
      "scientific_correctness_certified": false
    },
    "assessment_disposition": {
      "status": "ASSESSED",
      "label": "Provisionally assessed",
      "reason": "A current grade and separate reference score identify this exact contribution.",
      "target": {
        "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
        "version": 1,
        "content_hash": "sha256:22f580c28ae795f8aa583464e1864adfb229f4f0bbb3d61cbae4497a18a35e39"
      },
      "edition": "ratings-e039106f30dec177"
    }
  },
  "version": {
    "kind": "PUBLIC_RECORD_VIEW",
    "previous": null,
    "published_at": "2026-09-25T00:00:00Z",
    "publisher": {
      "principal_id": "urn:uuid:80116931-785b-40a2-a24b-9d59db0c7e33",
      "role": "WRS_EDITORIAL_PUBLICATION"
    },
    "record": {
      "contributors": [
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Ken Thompson",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "prover"
          ],
          "source": {
            "citation": "University of Cambridge copy of Reflections on Trusting Trust",
            "url": "https://www.cl.cam.ac.uk/teaching/2223/R209/Reflections-Trusting-Trust.pdf"
          }
        }
      ],
      "evidence": [
        {
          "description": "Bibliographic/stated-result source; not a WRS proof verification",
          "id": "source-0",
          "kind": "source_reference",
          "source": {
            "citation": "University of Cambridge copy of Reflections on Trusting Trust",
            "url": "https://www.cl.cam.ac.uk/teaching/2223/R209/Reflections-Trusting-Trust.pdf"
          }
        },
        {
          "description": "Bibliographic/stated-result source; not a WRS proof verification",
          "id": "source-1",
          "kind": "source_reference",
          "source": {
            "citation": "Crossref record for Reflections on Trusting Trust",
            "url": "https://api.crossref.org/works/10.1145%2F358198.358210"
          }
        }
      ],
      "origin": "HUMAN_LEGACY",
      "record_profile": "wrs-local-research-notes-0.1",
      "record_type": "research_note",
      "rrp_version": "0.1",
      "scope": {
        "description": "The record is the exact 1984 Turing Award lecture article. Unix authorship, generic malware, later diverse double-compiling defenses and supply-chain incidents remain separate.",
        "domain": "Security and cryptography"
      },
      "sources": [
        {
          "citation": "University of Cambridge copy of Reflections on Trusting Trust",
          "url": "https://www.cl.cam.ac.uk/teaching/2223/R209/Reflections-Trusting-Trust.pdf"
        },
        {
          "citation": "Crossref record for Reflections on Trusting Trust",
          "url": "https://api.crossref.org/works/10.1145%2F358198.358210"
        }
      ],
      "statement": "# Thompson: reflections on trusting trust\n\nDemonstrated how a compiler can be modified to insert a Trojan horse into target programs and reproduce the attack when compiling a clean compiler source, exposing a source-level verification limit.\n\n## Scientific scope\n\nThe record is the exact 1984 Turing Award lecture article. Unix authorship, generic malware, later diverse double-compiling defenses and supply-chain incidents remain separate.\n\n## Reading status\n\nThis is a source-linked WRS catalogue note. A full explanatory guide and independent scientific reconstruction have not been completed for this entry. Read the identified original work for its complete narrative and arguments.\n\n## People and systems\n\nKen Thompson\n\nThe named authors contributed to this scoped work; individual effort shares and later applications are not assigned by the byline.\n\n\n\n## Original sources\n\n- [University of Cambridge copy of Reflections on Trusting Trust](https://www.cl.cam.ac.uk/teaching/2223/R209/Reflections-Trusting-Trust.pdf)\n- [Crossref record for Reflections on Trusting Trust](https://api.crossref.org/works/10.1145%2F358198.358210)\n",
      "summary": "Demonstrated how a compiler can be modified to insert a Trojan horse into target programs and reproduce the attack when compiling a clean compiler source, exposing a source-level verification limit.",
      "title": "Thompson: reflections on trusting trust"
    },
    "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
    "version": 1,
    "source_ref": {
      "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
      "version": 1,
      "content_hash": "sha256:22f580c28ae795f8aa583464e1864adfb229f4f0bbb3d61cbae4497a18a35e39"
    },
    "export_view": "wrs-public-editorial-view-1",
    "public_view_hash": "sha256:86edd0d3d98d62464c7254fc43efa8d214ace4ed6376c3f6fb457b5f3d070927"
  },
  "target": {
    "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
    "version": 1,
    "content_hash": "sha256:22f580c28ae795f8aa583464e1864adfb229f4f0bbb3d61cbae4497a18a35e39"
  },
  "published_grade": {
    "profile": "wrs-published-grade-1",
    "edition": "2026-10-28.1",
    "id": "thompson-trusting-trust-1984",
    "entry_id": "thompson-trusting-trust-1984",
    "revision": 1,
    "title": "Thompson: reflections on trusting trust",
    "context": "Security and cryptography",
    "track": "LIMITATION",
    "band": "A",
    "modifier": "-",
    "status": "PROVISIONAL_EDITORIAL",
    "assessed_on": "2026-09-25",
    "evidence_cutoff": "2026-09-25",
    "achievement_state": "SUPPORTED_SCOPED_RESULT",
    "what_changed": "Demonstrated how a compiler can be modified to insert a Trojan horse into target programs and reproduce the attack when compiling a clean compiler source, exposing a source-level verification limit.",
    "scope": "The record is the exact 1984 Turing Award lecture article. Unix authorship, generic malware, later diverse double-compiling defenses and supply-chain incidents remain separate.",
    "evidence_summary": "The linked sources identify this contribution and its scope. WRS has not independently reconstructed the scientific claims. The record is the exact 1984 Turing Award lecture article. Unix authorship, generic malware, later diverse double-compiling defenses and supply-chain incidents remain separate.",
    "references": [
      {
        "title": "University of Cambridge copy of Reflections on Trusting Trust",
        "url": "https://www.cl.cam.ac.uk/teaching/2223/R209/Reflections-Trusting-Trust.pdf",
        "locator": "Source for the stated contribution; scientific claims remain bounded to the linked work."
      },
      {
        "title": "Crossref record for Reflections on Trusting Trust",
        "url": "https://api.crossref.org/works/10.1145%2F358198.358210",
        "locator": "Source for the stated contribution; scientific claims remain bounded to the linked work."
      }
    ],
    "roles": [
      {
        "who": "Ken Thompson",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      }
    ],
    "target": {
      "record_id": "urn:uuid:452f9c85-755b-40dc-abbd-4f51ad1d3e94",
      "version": 1,
      "content_hash": "sha256:22f580c28ae795f8aa583464e1864adfb229f4f0bbb3d61cbae4497a18a35e39"
    },
    "scientific_correctness_certified": false,
    "independent_expert_calibration": false,
    "method": "PROPRIETARY",
    "points": "100000"
  },
  "canonical_agent_submission": false,
  "scientific_verification_awarded": false,
  "reader_guide": null,
  "reading_status": "SOURCE_LINKED_NOTE"
}