fix association registry; primer-full now works with viz script
added configuration to prov dsl, experimenting with sandboxing for demo