{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:6H7NNNME4MJIFWCMGDMOHF5WVA","short_pith_number":"pith:6H7NNNME","canonical_record":{"source":{"id":"2606.02960","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-01T23:36:47Z","cross_cats_sorted":[],"title_canon_sha256":"a397be5bfe546b4b7e750ceb8968a5a8737361c80daa6622d2ecd221b219ad87","abstract_canon_sha256":"5b4a5a679255ad15bc9d0c009b49da80479bcf61ce9be151df038a9353a22c3b"},"schema_version":"1.0"},"canonical_sha256":"f1fed6b584e31282d84c30d8e397b6a8109e66726028ac2910392234b177656e","source":{"kind":"arxiv","id":"2606.02960","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.02960","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"arxiv_version","alias_value":"2606.02960v1","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.02960","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"pith_short_12","alias_value":"6H7NNNME4MJI","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"pith_short_16","alias_value":"6H7NNNME4MJIFWCM","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"pith_short_8","alias_value":"6H7NNNME","created_at":"2026-06-03T01:05:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:6H7NNNME4MJIFWCMGDMOHF5WVA","target":"record","payload":{"canonical_record":{"source":{"id":"2606.02960","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-01T23:36:47Z","cross_cats_sorted":[],"title_canon_sha256":"a397be5bfe546b4b7e750ceb8968a5a8737361c80daa6622d2ecd221b219ad87","abstract_canon_sha256":"5b4a5a679255ad15bc9d0c009b49da80479bcf61ce9be151df038a9353a22c3b"},"schema_version":"1.0"},"canonical_sha256":"f1fed6b584e31282d84c30d8e397b6a8109e66726028ac2910392234b177656e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-03T01:05:27.696871Z","signature_b64":"NFjKzkbKcurKI1/huvFcbpGh4NRbwwb6Ehihw2vTvrzaFb44PSA147ptTxJS13bEHYimSYVuyjIfOwS7g1u0DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1fed6b584e31282d84c30d8e397b6a8109e66726028ac2910392234b177656e","last_reissued_at":"2026-06-03T01:05:27.696464Z","signature_status":"signed_v1","first_computed_at":"2026-06-03T01:05:27.696464Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.02960","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-03T01:05:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9X3SQgNGY0ZnPEJc3zYagA/yK5GwLtR86ecSu02c1FXYtWG8uOqn+n7MtKrNiOj8djF3/muPj+uCY/ptZwWyBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T21:49:03.929633Z"},"content_sha256":"7797dbaba3c4b3b3fec61b96b4837e2f067ba2f458613810f065ba69c9c725f0","schema_version":"1.0","event_id":"sha256:7797dbaba3c4b3b3fec61b96b4837e2f067ba2f458613810f065ba69c9c725f0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:6H7NNNME4MJIFWCMGDMOHF5WVA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Many a Little Makes a Mickle: A Code-Centric Empirical Study of Data Minimization Principle in Android App Development","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Dianshu Liao, Shidong Pan, Xiaoyu Sun, Zhenchang Xing","submitted_at":"2026-06-01T23:36:47Z","abstract_excerpt":"Modern mobile applications consume large amounts of data to function, raising significant privacy concerns and regulatory challenges. While prior work has primarily focused on detecting compliance gaps through policy analysis, there remains a lack of actionable guidance for developers to implement privacy principles at the code level. In this paper, we focus on data minimization as a developer-operationalizable principle and investigate its realization in Android applications. We conduct a formative study on 1,114 open-source Android apps to identify ten recurring data minimization scenarios a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.02960","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.02960/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-03T01:05:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Th/7M4bK/NxZ/j2Kn+j54z47c8VDWRMHoM6xEaC3zqg64aL90XWzV2EEbQWWiphSrYxS24hflIT8bE8dyLm3Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T21:49:03.930008Z"},"content_sha256":"a9ce830690a03bda9d7cbc04d7ba8c9902490ca6989ee57302c5683e2f0a0990","schema_version":"1.0","event_id":"sha256:a9ce830690a03bda9d7cbc04d7ba8c9902490ca6989ee57302c5683e2f0a0990"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6H7NNNME4MJIFWCMGDMOHF5WVA/bundle.json","state_url":"https://pith.science/pith/6H7NNNME4MJIFWCMGDMOHF5WVA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6H7NNNME4MJIFWCMGDMOHF5WVA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-04T21:49:03Z","links":{"resolver":"https://pith.science/pith/6H7NNNME4MJIFWCMGDMOHF5WVA","bundle":"https://pith.science/pith/6H7NNNME4MJIFWCMGDMOHF5WVA/bundle.json","state":"https://pith.science/pith/6H7NNNME4MJIFWCMGDMOHF5WVA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6H7NNNME4MJIFWCMGDMOHF5WVA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:6H7NNNME4MJIFWCMGDMOHF5WVA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5b4a5a679255ad15bc9d0c009b49da80479bcf61ce9be151df038a9353a22c3b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-01T23:36:47Z","title_canon_sha256":"a397be5bfe546b4b7e750ceb8968a5a8737361c80daa6622d2ecd221b219ad87"},"schema_version":"1.0","source":{"id":"2606.02960","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.02960","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"arxiv_version","alias_value":"2606.02960v1","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.02960","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"pith_short_12","alias_value":"6H7NNNME4MJI","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"pith_short_16","alias_value":"6H7NNNME4MJIFWCM","created_at":"2026-06-03T01:05:27Z"},{"alias_kind":"pith_short_8","alias_value":"6H7NNNME","created_at":"2026-06-03T01:05:27Z"}],"graph_snapshots":[{"event_id":"sha256:a9ce830690a03bda9d7cbc04d7ba8c9902490ca6989ee57302c5683e2f0a0990","target":"graph","created_at":"2026-06-03T01:05:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.02960/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern mobile applications consume large amounts of data to function, raising significant privacy concerns and regulatory challenges. While prior work has primarily focused on detecting compliance gaps through policy analysis, there remains a lack of actionable guidance for developers to implement privacy principles at the code level. In this paper, we focus on data minimization as a developer-operationalizable principle and investigate its realization in Android applications. We conduct a formative study on 1,114 open-source Android apps to identify ten recurring data minimization scenarios a","authors_text":"Dianshu Liao, Shidong Pan, Xiaoyu Sun, Zhenchang Xing","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-01T23:36:47Z","title":"Many a Little Makes a Mickle: A Code-Centric Empirical Study of Data Minimization Principle in Android App Development"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.02960","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7797dbaba3c4b3b3fec61b96b4837e2f067ba2f458613810f065ba69c9c725f0","target":"record","created_at":"2026-06-03T01:05:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5b4a5a679255ad15bc9d0c009b49da80479bcf61ce9be151df038a9353a22c3b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-01T23:36:47Z","title_canon_sha256":"a397be5bfe546b4b7e750ceb8968a5a8737361c80daa6622d2ecd221b219ad87"},"schema_version":"1.0","source":{"id":"2606.02960","kind":"arxiv","version":1}},"canonical_sha256":"f1fed6b584e31282d84c30d8e397b6a8109e66726028ac2910392234b177656e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1fed6b584e31282d84c30d8e397b6a8109e66726028ac2910392234b177656e","first_computed_at":"2026-06-03T01:05:27.696464Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-03T01:05:27.696464Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NFjKzkbKcurKI1/huvFcbpGh4NRbwwb6Ehihw2vTvrzaFb44PSA147ptTxJS13bEHYimSYVuyjIfOwS7g1u0DA==","signature_status":"signed_v1","signed_at":"2026-06-03T01:05:27.696871Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.02960","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7797dbaba3c4b3b3fec61b96b4837e2f067ba2f458613810f065ba69c9c725f0","sha256:a9ce830690a03bda9d7cbc04d7ba8c9902490ca6989ee57302c5683e2f0a0990"],"state_sha256":"5e44fcbd2b6f53203484ba95dc87e4eb1ef50162222b4f4794916aebe83f808d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wc+CRoJ9s/8o7GT5QzDmSACH/oJ8XSUX8irbp1KFp6IQPOHsaBScgYuZajTttEvVSrfLg7AiuFvwDuD74GnfBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-04T21:49:03.932177Z","bundle_sha256":"77b87e22097fa527f79352293f999f9dfcdb7109d7b7b06e02bee50444844b93"}}