Comment by bawolff

Presumably in a real application there would be a list of acceptable operations.

Like first you have to show you can do everything necessary in the system which is what this paper does. Step 2 is coming up with a policy of what restrictions to place on allowed transformations