{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:4R2DOGN6CCN77E7C4NS7K6K2HU","short_pith_number":"pith:4R2DOGN6","canonical_record":{"source":{"id":"2008.06536","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-14T18:35:38Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"1066fb5e10c9b8448e8e2923de29b105d757bcd29858b9ab654f765dc3573de1","abstract_canon_sha256":"d6a04cedbb8d9feb203c83caca1c0aa0161844cb5bc67307e26ec586dbc69dde"},"schema_version":"1.0"},"canonical_sha256":"e4743719be109bff93e2e365f5795a3d2830a95a6974069d9ea28a748e3e96de","source":{"kind":"arxiv","id":"2008.06536","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2008.06536","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"arxiv_version","alias_value":"2008.06536v1","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2008.06536","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"pith_short_12","alias_value":"4R2DOGN6CCN7","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"pith_short_16","alias_value":"4R2DOGN6CCN77E7C","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"pith_short_8","alias_value":"4R2DOGN6","created_at":"2026-07-05T01:27:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:4R2DOGN6CCN77E7C4NS7K6K2HU","target":"record","payload":{"canonical_record":{"source":{"id":"2008.06536","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-14T18:35:38Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"1066fb5e10c9b8448e8e2923de29b105d757bcd29858b9ab654f765dc3573de1","abstract_canon_sha256":"d6a04cedbb8d9feb203c83caca1c0aa0161844cb5bc67307e26ec586dbc69dde"},"schema_version":"1.0"},"canonical_sha256":"e4743719be109bff93e2e365f5795a3d2830a95a6974069d9ea28a748e3e96de","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:27:11.049633Z","signature_b64":"C+6iL/rM4cwmxmf9H1GQw6ja30wKM75tqlQJjeqOYS2eSc9edEMIqKlrigktmuCr4ZM6Iu3K3G/8b8PFBji0Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e4743719be109bff93e2e365f5795a3d2830a95a6974069d9ea28a748e3e96de","last_reissued_at":"2026-07-05T01:27:11.049201Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:27:11.049201Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2008.06536","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:27:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kRCBxEcFGhT8aJo66QYK8tJLfSqOOE1hFPEAr3PjpnH5FP0oxhHvjxVuFQTASZ5pxVb7TjqwvAh9aODClz6ADA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:15:13.934141Z"},"content_sha256":"955caf1fb49e2cb2a5142f516324459d19ae1654f152b16492ce89d33150e400","schema_version":"1.0","event_id":"sha256:955caf1fb49e2cb2a5142f516324459d19ae1654f152b16492ce89d33150e400"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:4R2DOGN6CCN77E7C4NS7K6K2HU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Making Distributed Mobile Applications SAFE: Enforcing User Privacy Policies on Untrusted Applications with Secure Application Flow Enforcement","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Adriana Szekeres, Arvind Krishnamurthy, Dan R. K. Ports, Franziska Roesner, Haichen Shen, Henry M. Levy, Irene Zhang, Isaac Ackerman, Katelin Bailey","submitted_at":"2020-08-14T18:35:38Z","abstract_excerpt":"Today's mobile devices sense, collect, and store huge amounts of personal information, which users share with family and friends through a wide range of applications. Once users give applications access to their data, they must implicitly trust that the apps correctly maintain data privacy. As we know from both experience and all-too-frequent press articles, that trust is often misplaced. While users do not trust applications, they do trust their mobile devices and operating systems. Unfortunately, sharing applications are not limited to mobile clients but must also run on cloud services to sh"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2008.06536","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2008.06536/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:27:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iNyG3THczI49O0G+i0Zjr8lGw20RzrXBn62ZGu/CGjhAYqTb/53VmNT4K2qhANZXL15O7pkZ+bcrCMtTIGxECw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:15:13.934799Z"},"content_sha256":"f02fc14bade4049c4caad6a7f69e53e12173f92c378a514e6fddf3f7afa00f99","schema_version":"1.0","event_id":"sha256:f02fc14bade4049c4caad6a7f69e53e12173f92c378a514e6fddf3f7afa00f99"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4R2DOGN6CCN77E7C4NS7K6K2HU/bundle.json","state_url":"https://pith.science/pith/4R2DOGN6CCN77E7C4NS7K6K2HU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4R2DOGN6CCN77E7C4NS7K6K2HU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T07:15:13Z","links":{"resolver":"https://pith.science/pith/4R2DOGN6CCN77E7C4NS7K6K2HU","bundle":"https://pith.science/pith/4R2DOGN6CCN77E7C4NS7K6K2HU/bundle.json","state":"https://pith.science/pith/4R2DOGN6CCN77E7C4NS7K6K2HU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4R2DOGN6CCN77E7C4NS7K6K2HU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:4R2DOGN6CCN77E7C4NS7K6K2HU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d6a04cedbb8d9feb203c83caca1c0aa0161844cb5bc67307e26ec586dbc69dde","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-14T18:35:38Z","title_canon_sha256":"1066fb5e10c9b8448e8e2923de29b105d757bcd29858b9ab654f765dc3573de1"},"schema_version":"1.0","source":{"id":"2008.06536","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2008.06536","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"arxiv_version","alias_value":"2008.06536v1","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2008.06536","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"pith_short_12","alias_value":"4R2DOGN6CCN7","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"pith_short_16","alias_value":"4R2DOGN6CCN77E7C","created_at":"2026-07-05T01:27:11Z"},{"alias_kind":"pith_short_8","alias_value":"4R2DOGN6","created_at":"2026-07-05T01:27:11Z"}],"graph_snapshots":[{"event_id":"sha256:f02fc14bade4049c4caad6a7f69e53e12173f92c378a514e6fddf3f7afa00f99","target":"graph","created_at":"2026-07-05T01:27:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2008.06536/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Today's mobile devices sense, collect, and store huge amounts of personal information, which users share with family and friends through a wide range of applications. Once users give applications access to their data, they must implicitly trust that the apps correctly maintain data privacy. As we know from both experience and all-too-frequent press articles, that trust is often misplaced. While users do not trust applications, they do trust their mobile devices and operating systems. Unfortunately, sharing applications are not limited to mobile clients but must also run on cloud services to sh","authors_text":"Adriana Szekeres, Arvind Krishnamurthy, Dan R. K. Ports, Franziska Roesner, Haichen Shen, Henry M. Levy, Irene Zhang, Isaac Ackerman, Katelin Bailey","cross_cats":["cs.OS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-14T18:35:38Z","title":"Making Distributed Mobile Applications SAFE: Enforcing User Privacy Policies on Untrusted Applications with Secure Application Flow Enforcement"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2008.06536","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:955caf1fb49e2cb2a5142f516324459d19ae1654f152b16492ce89d33150e400","target":"record","created_at":"2026-07-05T01:27:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d6a04cedbb8d9feb203c83caca1c0aa0161844cb5bc67307e26ec586dbc69dde","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-14T18:35:38Z","title_canon_sha256":"1066fb5e10c9b8448e8e2923de29b105d757bcd29858b9ab654f765dc3573de1"},"schema_version":"1.0","source":{"id":"2008.06536","kind":"arxiv","version":1}},"canonical_sha256":"e4743719be109bff93e2e365f5795a3d2830a95a6974069d9ea28a748e3e96de","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e4743719be109bff93e2e365f5795a3d2830a95a6974069d9ea28a748e3e96de","first_computed_at":"2026-07-05T01:27:11.049201Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:27:11.049201Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"C+6iL/rM4cwmxmf9H1GQw6ja30wKM75tqlQJjeqOYS2eSc9edEMIqKlrigktmuCr4ZM6Iu3K3G/8b8PFBji0Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T01:27:11.049633Z","signed_message":"canonical_sha256_bytes"},"source_id":"2008.06536","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:955caf1fb49e2cb2a5142f516324459d19ae1654f152b16492ce89d33150e400","sha256:f02fc14bade4049c4caad6a7f69e53e12173f92c378a514e6fddf3f7afa00f99"],"state_sha256":"70d72da7183d458a197d8d36cea5ee640f78b0b443fe0bf4c7294d2035a74b94"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F7Fbv5vu8Z6Azzdu/mmBhVLGiUMLVnkfE1cQ/iiviWZjVbD5QRXIu7BA0uz38U4SaKnQzQzaxiKbh1ru+0RFDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T07:15:13.938204Z","bundle_sha256":"1ee4d90d4129e480fcb753e877933654774d46abcc573fba1782a4a1355d1cae"}}