arXiv subjects

Edward Ashton

Publications and source records attributed to Edward Ashton.

8 recordsLinked to original sources

arXiv2025

Discovery and dynamics of a Sedna-like object with a perihelion of 66 au

Trans-Neptunian objects (TNOs) with large perihelion distances ($q > 60$ au) and semi-major axes ($a > 200$ au) provide insights into the early evolution of the solar system and the existence of a hypothetical distant planet. These objects are still rare and their detection is challenging, yet they play a crucial role in constraining models of solar system formation. Here we report the discovery of a Sedna-like TNO, 2023\,KQ$_{14}$, nicknamed `Ammonite', with $q = 66$ au, $a = 252$ au, and inclination $i=11^\circ$. Ammonite's orbit does not align with those of the other Sedna-like objects and fills the previously unexplained `$q$-gap' in the observed distribution of distant solar system objects. Simulations demonstrate that Ammonite is dynamically stable over 4.5 billion years. % with less than 1\% variation in its semi-major axis. Our analysis suggests that Ammonite and the other Sedna-like objects may have shared a primordial orbital clustering around 4.2 billion years ago. Furthermore, Ammonite's stable orbit favors larger orbits ($\sim$ 500 au) rather than closer ones for a large hypothetical planet in present-day trans-Neptunian space.

astro-ph.EP↗

arXiv2025

Retrograde predominance of small saturnian moons reiterates a recent retrograde collisional disruption

We report the discovery and careful orbital determination of 64 new irregular moons of Saturn found in images taken using the Canada-France-Hawaii Telescope from 2019-2021, bringing the total number of saturnian irregulars to 122. By more than doubling the sample of saturnian irregular moon orbits, including pushing to smaller sizes, we can now see finer detail in their orbital distribution. We note the emergence of potential subgroups associated with each of Siarnaq and Kiviuq within the Inuit group. We find that in the inclination range 157-172 degrees the ratio of smaller moons (diameters less than 4 km) to larger moons (diameters greater than 4 km) is significantly larger than that of any other inclination range in the retrogrades. We denote this subset of the Norse group as the Mundilfari subgroup after its largest member. The incredibly steep slope of the Mundilfari subgroup's size distribution, with a differential power law index of q = 6, strengthens the hypothesis in Ashton et al. (2021) that this subgroup was created by a recent catastrophic collision, $<10^8$ yr ago.

astro-ph.EP↗

arXiv2024

Smart Casual Verification of the Confidential Consortium Framework

The Confidential Consortium Framework (CCF) is an open-source platform for developing trustworthy and reliable cloud applications. CCF powers Microsoft's Azure Confidential Ledger service and as such it is vital to build confidence in the correctness of CCF's design and implementation. This paper reports our experiences applying smart casual verification to validate the correctness of CCF's novel distributed protocols, focusing on its unique distributed consensus protocol and its custom client consistency model. We use the term smart casual verification to describe our hybrid approach, which combines the rigor of formal specification and model checking with the pragmatism of automated testing, in our case binding the formal specification in TLA+ to the C++ implementation. While traditional formal methods approaches require substantial buy-in and are often one-off efforts by domain experts, we have integrated our smart casual verification approach into CCF's CI pipeline, allowing contributors to continuously validate CCF as it evolves. We describe the challenges we faced in applying smart casual verification to a complex existing codebase and how we overcame them to find six subtle bugs in the design and implementation before they could impact production

cs.DC↗

arXiv2024

Interactive Safety Verification of Distributed Protocols by Inductive Proof Decomposition

Many techniques for the automated verification of distributed protocols have been developed over the past several years, but their performance is still unpredictable and their failure modes can be opaque for industrial scale verification tasks. Thus, in practice, large-scale verification efforts typically require some amount of human guidance. In this paper, we present inductive proof decomposition, a new methodology for interactive safety verification that provides a compositional, interactive approach to inductive invariant development. Our approach guides the human-aided development of inductive invariants via a novel structure, an inductive proof graph, which is built incrementally by a human verifier, working backwards from a target safety property. A user is guided by induction counterexamples that are localized to specific nodes of this graph, and nodes of this proof graph are further decomposed based on logical actions that appear in a protocol's transition relation. Our decomposition also enables a localized variable slicing technique that hides irrelevant protocol state at each sub-component of an inductive proof, allowing a user to focus on fine-grained sub-problems rather than a large, monolithic inductive invariant. We present our technique and experience applying it to develop inductive safety proofs of several complex distributed protocols, including the Raft consensus protocol, which is beyond the capabilities of modern automated verification tools. We also demonstrate how the developed proof graphs provide additional insight into the structure of a protocol proof and its correctness.

cs.DC↗

arXiv2023

Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability

Confidentiality, integrity protection, and high availability, abbreviated to CIA, are essential properties for trustworthy data systems. The rise of cloud computing and the growing demand for multiparty applications however means that building modern CIA systems is more challenging than ever. In response, we present the Confidential Consortium Framework (CCF), a general-purpose foundation for developing secure stateful CIA applications. CCF combines centralized compute with decentralized trust, supporting deployment on untrusted cloud infrastructure and transparent governance by mutually untrusted parties. CCF leverages hardware-based trusted execution environments for remotely verifiable confidentiality and code integrity. This is coupled with state machine replication backed by an auditable immutable ledger for data integrity and high availability. CCF enables each service to bring its own application logic, custom multiparty governance model, and deployment scenario, decoupling the operators of nodes from the consortium that governs them. CCF is open-source and available now at https://github.com/microsoft/CCF.

cs.CR↗

arXiv2022

IA-CCF: Individual Accountability for Permissioned Ledgers

Permissioned ledger systems allow a consortium of members that do not trust one another to execute transactions safely on a set of replicas. Such systems typically use Byzantine fault tolerance (BFT) protocols to distribute trust, which only ensures safety when fewer than 1/3 of the replicas misbehave. Providing guarantees beyond this threshold is a challenge: current systems assume that the ledger is corrupt and fail to identify misbehaving replicas or hold the members that operate them accountable -- instead all members share the blame. We describe IA-CCF, a new permissioned ledger system that provides individual accountability. It can assign blame to the individual members that operate misbehaving replicas regardless of the number of misbehaving replicas or members. IA-CCF achieves this by signing and logging BFT protocol messages in the ledger, and by using Merkle trees to provide clients with succinct, universally-verifiable receipts as evidence of successful transaction execution. Anyone can audit the ledger against a set of receipts to discover inconsistencies and identify replicas that signed contradictory statements. IA-CCF also supports changes to consortium membership and replicas by tracking signing keys using a sub-ledger of governance transactions. IA-CCF provides strong disincentives to misbehavior with low overhead: it executes 47,000 tx/s while providing clients with receipts in two network round trips.

cs.DC↗

arXiv2020

The Population of Kilometer-scale Retrograde Jovian Irregular Moons

We have searched a 2010 archival data set from the Canada-France-Hawaii Telescope for very small (km-scale) irregular moons of Jupiter in order to constrain the size distribution of these moons down to radii of $\sim 400$~m, discovering 52 objects which are moving with Jupiter-like on-sky rates and are nearly certainly irregular moons. The four brightest detections, and seven in total, were all then linked to known jovian moons. Extrapolating our characterized detections (those down to magnitude $m_r=25.7$) to the entire retrograde circum-jovian population, we estimate the population of radius $>0.4$~km moons to be 600 (within a factor of 2). At the faintest magnitudes we find a relatively shallow luminosity function of exponential index $α= 0.29 \pm 0.15$, corresponding to a differential diameter power law of index $q\simeq 2.5$.

astro-ph.EP↗

arXiv2018

OSSOS. VII. 800+ trans-Neptunian objects - the complete data release

The Outer Solar System Origins Survey (OSSOS), a wide-field imaging program in 2013-2017 with the Canada-France-Hawaii Telescope, surveyed 155 deg$^{2}$ of sky to depths of $m_r = 24.1$-25.2. We present 838 outer Solar System discoveries that are entirely free of ephemeris bias. This increases the inventory of trans-Neptunian objects (TNOs) with accurately known orbits by nearly 50%. Each minor planet has 20-60 Gaia/Pan-STARRS-calibrated astrometric measurements made over 2-5 oppositions, which allows accurate classification of their orbits within the trans-Neptunian dynamical populations. The populations orbiting in mean-motion resonance with Neptune are key to understanding Neptune's early migration. Our 313 resonant TNOs, including 132 plutinos, triple the available characterized sample and include new occupancy of distant resonances out to semi-major axis $a \sim 130$ au. OSSOS doubles the known population of the non-resonant Kuiper belt, providing 436 TNOs in this region, all with exceptionally high-quality orbits of $a$ uncertainty $σ_{a} \leq 0.1\%$; they show the belt exists from $a \gtrsim 37$ au, with a lower perihelion bound of $35$ au. We confirm the presence of a concentrated low-inclination $a\simeq 44$ au "kernel" population and a dynamically cold population extending beyond the 2:1 resonance. We finely quantify the survey's observational biases. Our survey simulator provides a straightforward way to impose these biases on models of the trans-Neptunian orbit distributions, allowing statistical comparison to the discoveries. The OSSOS TNOs, unprecedented in their orbital precision for the size of the sample, are ideal for testing concepts of the history of giant planet migration in the Solar System.

astro-ph.EP↗