{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:3M7JEYXFZUFJULQYTJ525EEDOW","short_pith_number":"pith:3M7JEYXF","canonical_record":{"source":{"id":"2106.13012","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-06-24T13:46:03Z","cross_cats_sorted":[],"title_canon_sha256":"041ed45df88e99b502683a8acfe23392bb2766e159b41977f1dbbe265aec6c24","abstract_canon_sha256":"8f56e1988fd0521bf8a5c71289f26ff1e367928b8628f2671d6797a83893b651"},"schema_version":"1.0"},"canonical_sha256":"db3e9262e5cd0a9a2e189a7bae908375b080cfe1347a4d66a26e17dc1c105020","source":{"kind":"arxiv","id":"2106.13012","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.13012","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"arxiv_version","alias_value":"2106.13012v1","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.13012","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"pith_short_12","alias_value":"3M7JEYXFZUFJ","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"pith_short_16","alias_value":"3M7JEYXFZUFJULQY","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"pith_short_8","alias_value":"3M7JEYXF","created_at":"2026-07-05T02:52:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:3M7JEYXFZUFJULQYTJ525EEDOW","target":"record","payload":{"canonical_record":{"source":{"id":"2106.13012","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-06-24T13:46:03Z","cross_cats_sorted":[],"title_canon_sha256":"041ed45df88e99b502683a8acfe23392bb2766e159b41977f1dbbe265aec6c24","abstract_canon_sha256":"8f56e1988fd0521bf8a5c71289f26ff1e367928b8628f2671d6797a83893b651"},"schema_version":"1.0"},"canonical_sha256":"db3e9262e5cd0a9a2e189a7bae908375b080cfe1347a4d66a26e17dc1c105020","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:52:08.758698Z","signature_b64":"P6Xs/97wdAzjpAebYO5rHBCY3fdjGvJ8uqTWo/DsYN/LhjNYa194p/lSPcLa/YTJL9nRWtL9JxSHQyotoDSiAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"db3e9262e5cd0a9a2e189a7bae908375b080cfe1347a4d66a26e17dc1c105020","last_reissued_at":"2026-07-05T02:52:08.758233Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:52:08.758233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.13012","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:52:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kwIAJCA7BmuIbL2JblaWPgXj4rl4gKWz3Eg9p5JzbWnPAjGGLAR6sLsNsrQpJLYNneibknScfkL1fomkTOLVAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:16:04.450755Z"},"content_sha256":"a36e90df417c043024ff97dfcf2db1089c218c32367d21815634ddf03b00aa10","schema_version":"1.0","event_id":"sha256:a36e90df417c043024ff97dfcf2db1089c218c32367d21815634ddf03b00aa10"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:3M7JEYXFZUFJULQYTJ525EEDOW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Runtime Permission Issues in Android Apps: Taxonomy, Practices, and Ways Forward","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Chang Xu, Hai Yu, Shing-Chi Cheung, Sinan Wang, Yepang Liu, Yibo Wang, Ying Wang, Zhiliang Zhu","submitted_at":"2021-06-24T13:46:03Z","abstract_excerpt":"Android introduces a new permission model that allows apps to request permissions at runtime rather than at the installation time since 6.0 (Marshmallow, API level 23). While this runtime permission model provides users with greater flexibility in controlling an app's access to sensitive data and system features, it brings new challenges to app development. First, as users may grant or revoke permissions at any time while they are using an app, developers need to ensure that the app properly checks and requests required permissions before invoking any permission-protected APIs. Second, Android"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.13012","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.13012/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:52:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TMT1CQXrKf9Uy8aHRnneRQEiZ8lCNxnx4yOTn4YiWDiqIvUbUFR7grMXwvhIWRTIP5qnbGz2R6ikfrZpeB0sCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:16:04.451272Z"},"content_sha256":"13b5f72c5cb630bb77a93eb7bdeaa331c4d48a11e4f8727ea1f660714317ca70","schema_version":"1.0","event_id":"sha256:13b5f72c5cb630bb77a93eb7bdeaa331c4d48a11e4f8727ea1f660714317ca70"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3M7JEYXFZUFJULQYTJ525EEDOW/bundle.json","state_url":"https://pith.science/pith/3M7JEYXFZUFJULQYTJ525EEDOW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3M7JEYXFZUFJULQYTJ525EEDOW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T09:16:04Z","links":{"resolver":"https://pith.science/pith/3M7JEYXFZUFJULQYTJ525EEDOW","bundle":"https://pith.science/pith/3M7JEYXFZUFJULQYTJ525EEDOW/bundle.json","state":"https://pith.science/pith/3M7JEYXFZUFJULQYTJ525EEDOW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3M7JEYXFZUFJULQYTJ525EEDOW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:3M7JEYXFZUFJULQYTJ525EEDOW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f56e1988fd0521bf8a5c71289f26ff1e367928b8628f2671d6797a83893b651","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-06-24T13:46:03Z","title_canon_sha256":"041ed45df88e99b502683a8acfe23392bb2766e159b41977f1dbbe265aec6c24"},"schema_version":"1.0","source":{"id":"2106.13012","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.13012","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"arxiv_version","alias_value":"2106.13012v1","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.13012","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"pith_short_12","alias_value":"3M7JEYXFZUFJ","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"pith_short_16","alias_value":"3M7JEYXFZUFJULQY","created_at":"2026-07-05T02:52:08Z"},{"alias_kind":"pith_short_8","alias_value":"3M7JEYXF","created_at":"2026-07-05T02:52:08Z"}],"graph_snapshots":[{"event_id":"sha256:13b5f72c5cb630bb77a93eb7bdeaa331c4d48a11e4f8727ea1f660714317ca70","target":"graph","created_at":"2026-07-05T02:52:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.13012/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Android introduces a new permission model that allows apps to request permissions at runtime rather than at the installation time since 6.0 (Marshmallow, API level 23). While this runtime permission model provides users with greater flexibility in controlling an app's access to sensitive data and system features, it brings new challenges to app development. First, as users may grant or revoke permissions at any time while they are using an app, developers need to ensure that the app properly checks and requests required permissions before invoking any permission-protected APIs. Second, Android","authors_text":"Chang Xu, Hai Yu, Shing-Chi Cheung, Sinan Wang, Yepang Liu, Yibo Wang, Ying Wang, Zhiliang Zhu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-06-24T13:46:03Z","title":"Runtime Permission Issues in Android Apps: Taxonomy, Practices, and Ways Forward"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.13012","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a36e90df417c043024ff97dfcf2db1089c218c32367d21815634ddf03b00aa10","target":"record","created_at":"2026-07-05T02:52:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f56e1988fd0521bf8a5c71289f26ff1e367928b8628f2671d6797a83893b651","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-06-24T13:46:03Z","title_canon_sha256":"041ed45df88e99b502683a8acfe23392bb2766e159b41977f1dbbe265aec6c24"},"schema_version":"1.0","source":{"id":"2106.13012","kind":"arxiv","version":1}},"canonical_sha256":"db3e9262e5cd0a9a2e189a7bae908375b080cfe1347a4d66a26e17dc1c105020","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"db3e9262e5cd0a9a2e189a7bae908375b080cfe1347a4d66a26e17dc1c105020","first_computed_at":"2026-07-05T02:52:08.758233Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:52:08.758233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"P6Xs/97wdAzjpAebYO5rHBCY3fdjGvJ8uqTWo/DsYN/LhjNYa194p/lSPcLa/YTJL9nRWtL9JxSHQyotoDSiAA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:52:08.758698Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.13012","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a36e90df417c043024ff97dfcf2db1089c218c32367d21815634ddf03b00aa10","sha256:13b5f72c5cb630bb77a93eb7bdeaa331c4d48a11e4f8727ea1f660714317ca70"],"state_sha256":"cd60f477bcc926b61eaf4cf3406266f46d527643692d20fb6efbeaa5c8294429"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HrMWuFlNGAXo8BHUEk9udIqrPIFPzzZwCvJ+UMkF0MN6FbjiNqRmd3/CpvlX1fP/JWYNjCR3/MWVSFjmusv/BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T09:16:04.455547Z","bundle_sha256":"832b88e6df0a0490c57f3dfadee7c17114257e9705b5b72384790d643e91a3d2"}}