0) Bob was just hired on Monday. On that day, Bob gives access to his secretary to everything Bob has access in Soda, namely Soda/*. On Tuesday, the building manager gives access to Bob to Soda/floor 5/*. For what resource can Bob's secretary create a proof of authorization on Monday and on Tuesday? 1) In WAVE, Reverse-Discoverable-Encryption (RDE) aims to restrict which entities see what attestations, but it does not aim to be fully tight. Namely, there are some cases in which WAVE can reveal attestations that the final recipient can see, but not use. Give an example of an authorization graph in which Alice sees an attestation for some entity that is not relevant to her? 2) What operation in WAVE requires non-inclusion proofs? What would happen if these non-inclusion proofs were missing?