csrf model; nondeterministic assignments