Source assertions are not new attribution claims. No sole inventor or transitive actor-CVE inference.
{
  "record": {
    "id": "local-technique:phishing",
    "title": "Phishing",
    "type": "Historical concept",
    "snapshot": "historical-seed.json",
    "source_url": "https://css.csail.mit.edu/6.566/2012/readings/why_phishing_works.pdf",
    "description": "Deceptive messages or interfaces impersonate trusted parties to induce disclosure or harmful action.",
    "defensive_context": "Phishing-resistant authentication, independent verification and reporting workflows.",
    "publication": {
      "id": "local-publication:phishing-milestone",
      "entity_type": "Publication",
      "title": "Why Phishing Works",
      "source_url": "https://css.csail.mit.edu/6.566/2012/readings/why_phishing_works.pdf",
      "publication_date": "2006",
      "publisher": "ACM CHI",
      "credit_display": "Rachna Dhamija; J.D.Tygar; Marti Hearst",
      "credit_role": "empirical study authors"
    },
    "mappings": [
      {
        "target_id": "CAPEC-98",
        "relation": "corresponding attack pattern",
        "status": "research-supplied conceptual mapping; target exists in imported taxonomy; semantic review pending"
      },
      {
        "target_id": "ATTACK:enterprise:T1566",
        "relation": "enterprise initial-access phishing subset",
        "status": "research-supplied conceptual mapping; target exists in imported taxonomy; semantic review pending"
      }
    ],
    "uncertainty": "Research milestone only; no origin or coining claim. Fraud and initial-access subsets are not identical.",
    "rights": "Original concise metadata and linked references; no full paper or payload imported",
    "review_status": "Editorial historical seed; conceptual mappings remain explicitly provisional"
  },
  "assertions": [

  ],
  "source_snapshot": null,
  "notices_url": "https://aol.pm/source-notices.txt",
  "notices": "Source-specific notices: https://aol.pm/source-notices.txt\nCVE terms: https://www.cve.org/Legal/TermsOfUse"
}

Source-specific notices: https://aol.pm/source-notices.txt
CVE terms: https://www.cve.org/Legal/TermsOfUse