{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:BNTKH6OTENM7YXR7CFZ4VUE4HQ","short_pith_number":"pith:BNTKH6OT","canonical_record":{"source":{"id":"2607.23984","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T04:23:56Z","cross_cats_sorted":[],"title_canon_sha256":"16f1ec540ea97a25f86c9c0315050c9ee38390d56d5835cb08c239a3bd62eb50","abstract_canon_sha256":"b8679a73fe370475e0f010beb744c99926cc7f4de4c56f123e3c35f6b526339c"},"schema_version":"1.0"},"canonical_sha256":"0b66a3f9d32359fc5e3f1173cad09c3c1cfd6c03b4b9d69d946967d92f2d2ad1","source":{"kind":"arxiv","id":"2607.23984","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.23984","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"arxiv_version","alias_value":"2607.23984v1","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.23984","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"pith_short_12","alias_value":"BNTKH6OTENM7","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"pith_short_16","alias_value":"BNTKH6OTENM7YXR7","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"pith_short_8","alias_value":"BNTKH6OT","created_at":"2026-07-28T01:23:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:BNTKH6OTENM7YXR7CFZ4VUE4HQ","target":"record","payload":{"canonical_record":{"source":{"id":"2607.23984","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T04:23:56Z","cross_cats_sorted":[],"title_canon_sha256":"16f1ec540ea97a25f86c9c0315050c9ee38390d56d5835cb08c239a3bd62eb50","abstract_canon_sha256":"b8679a73fe370475e0f010beb744c99926cc7f4de4c56f123e3c35f6b526339c"},"schema_version":"1.0"},"canonical_sha256":"0b66a3f9d32359fc5e3f1173cad09c3c1cfd6c03b4b9d69d946967d92f2d2ad1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-28T01:23:39.901024Z","signature_b64":"YKjsThr90m2zOzehY0eJu5K1QdvX4NLHn2DJtPoCFBkCRg0e9Ltymr9x54Sj06QiUL3vJ/KS8N46VE6Bl9w/Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b66a3f9d32359fc5e3f1173cad09c3c1cfd6c03b4b9d69d946967d92f2d2ad1","last_reissued_at":"2026-07-28T01:23:39.900219Z","signature_status":"signed_v1","first_computed_at":"2026-07-28T01:23:39.900219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.23984","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:23:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TRYIv42IKOi+Lg+8s5igmEn9T1lTiiFX9cIQxaYMwA5SvqTp88XiNYPNdd9gPIIoTooS5yhXMjnn/qdzlSWNBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T02:47:21.286728Z"},"content_sha256":"3ab345751f9f56b82492df7bcf36ff23f8b1f9906cd32946b020423f988626c9","schema_version":"1.0","event_id":"sha256:3ab345751f9f56b82492df7bcf36ff23f8b1f9906cd32946b020423f988626c9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:BNTKH6OTENM7YXR7CFZ4VUE4HQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Beyond GDPR: Examining Disclosure Gaps in Mobile AR Privacy Policies under U.S. State Privacy Laws","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Duohe Ma, Feng Liu, Hong Chen, Hong-Ning Dai, Huashan Chen, Qin Yu, Tiange Xie, Xueling Zhang","submitted_at":"2026-07-27T04:23:56Z","abstract_excerpt":"Mobile Augmented Reality (MAR) apps can collect and process highly sensitive data such as spatial maps and biometrics, yet their privacy policies remain largely understudied. Prior audits of app privacy policies have typically focused on a single legal framework, such as the GDPR. Meanwhile, 20 U.S. states have comprehensive privacy laws in effect, creating a fragmented and rapidly evolving set of privacy policy obligations. To date, no study has systematically audited privacy policies against this emerging body of state-level legislation.\n  In this paper, we present the first large-scale audi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.23984","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.23984/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:23:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gwPAUT1XnsYaJ8j5KOcJQZn6eQNfvnmKH9LAi67OBb1js00vXF3JTGeEij2eMTsEZ9Vqp+LbumZed0hwO7eEBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T02:47:21.287262Z"},"content_sha256":"fbc5b6aa52a287ea1ca138bbcd584e1611a5da765663ee55e4c363f6150d5b99","schema_version":"1.0","event_id":"sha256:fbc5b6aa52a287ea1ca138bbcd584e1611a5da765663ee55e4c363f6150d5b99"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BNTKH6OTENM7YXR7CFZ4VUE4HQ/bundle.json","state_url":"https://pith.science/pith/BNTKH6OTENM7YXR7CFZ4VUE4HQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BNTKH6OTENM7YXR7CFZ4VUE4HQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T02:47:21Z","links":{"resolver":"https://pith.science/pith/BNTKH6OTENM7YXR7CFZ4VUE4HQ","bundle":"https://pith.science/pith/BNTKH6OTENM7YXR7CFZ4VUE4HQ/bundle.json","state":"https://pith.science/pith/BNTKH6OTENM7YXR7CFZ4VUE4HQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BNTKH6OTENM7YXR7CFZ4VUE4HQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:BNTKH6OTENM7YXR7CFZ4VUE4HQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b8679a73fe370475e0f010beb744c99926cc7f4de4c56f123e3c35f6b526339c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T04:23:56Z","title_canon_sha256":"16f1ec540ea97a25f86c9c0315050c9ee38390d56d5835cb08c239a3bd62eb50"},"schema_version":"1.0","source":{"id":"2607.23984","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.23984","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"arxiv_version","alias_value":"2607.23984v1","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.23984","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"pith_short_12","alias_value":"BNTKH6OTENM7","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"pith_short_16","alias_value":"BNTKH6OTENM7YXR7","created_at":"2026-07-28T01:23:39Z"},{"alias_kind":"pith_short_8","alias_value":"BNTKH6OT","created_at":"2026-07-28T01:23:39Z"}],"graph_snapshots":[{"event_id":"sha256:fbc5b6aa52a287ea1ca138bbcd584e1611a5da765663ee55e4c363f6150d5b99","target":"graph","created_at":"2026-07-28T01:23:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.23984/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Mobile Augmented Reality (MAR) apps can collect and process highly sensitive data such as spatial maps and biometrics, yet their privacy policies remain largely understudied. Prior audits of app privacy policies have typically focused on a single legal framework, such as the GDPR. Meanwhile, 20 U.S. states have comprehensive privacy laws in effect, creating a fragmented and rapidly evolving set of privacy policy obligations. To date, no study has systematically audited privacy policies against this emerging body of state-level legislation.\n  In this paper, we present the first large-scale audi","authors_text":"Duohe Ma, Feng Liu, Hong Chen, Hong-Ning Dai, Huashan Chen, Qin Yu, Tiange Xie, Xueling Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T04:23:56Z","title":"Beyond GDPR: Examining Disclosure Gaps in Mobile AR Privacy Policies under U.S. State Privacy Laws"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.23984","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3ab345751f9f56b82492df7bcf36ff23f8b1f9906cd32946b020423f988626c9","target":"record","created_at":"2026-07-28T01:23:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b8679a73fe370475e0f010beb744c99926cc7f4de4c56f123e3c35f6b526339c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T04:23:56Z","title_canon_sha256":"16f1ec540ea97a25f86c9c0315050c9ee38390d56d5835cb08c239a3bd62eb50"},"schema_version":"1.0","source":{"id":"2607.23984","kind":"arxiv","version":1}},"canonical_sha256":"0b66a3f9d32359fc5e3f1173cad09c3c1cfd6c03b4b9d69d946967d92f2d2ad1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0b66a3f9d32359fc5e3f1173cad09c3c1cfd6c03b4b9d69d946967d92f2d2ad1","first_computed_at":"2026-07-28T01:23:39.900219Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-28T01:23:39.900219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YKjsThr90m2zOzehY0eJu5K1QdvX4NLHn2DJtPoCFBkCRg0e9Ltymr9x54Sj06QiUL3vJ/KS8N46VE6Bl9w/Ag==","signature_status":"signed_v1","signed_at":"2026-07-28T01:23:39.901024Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.23984","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3ab345751f9f56b82492df7bcf36ff23f8b1f9906cd32946b020423f988626c9","sha256:fbc5b6aa52a287ea1ca138bbcd584e1611a5da765663ee55e4c363f6150d5b99"],"state_sha256":"80ce70f9b8c26ed5def0c6b2a440286a52aa47eda9e9669a08211adb748cb052"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EACZ4d5SWYti3c6/IEJkPAg9yd7teD8xMFhF1WvSYIjiryJ2j7otIFiwGK16rl0YG/2tOIYYc/m8bYJ45z49DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T02:47:21.292851Z","bundle_sha256":"d0671e886ece35ad52926c8189ce561c0b837f101359a1ab696363e49dadf4cb"}}