{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:JMWRJAW72V6PKB6USF7NYCOZQB","short_pith_number":"pith:JMWRJAW7","canonical_record":{"source":{"id":"2112.10469","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T12:08:57Z","cross_cats_sorted":[],"title_canon_sha256":"be2bbddffa9b777a89e14ded6e793d81382ef8dc75ec7f999fb60c0beba81799","abstract_canon_sha256":"1ee2ca0c073b731480bfcdf0177c32bc21ac36b94747e4deb48ec42650aef22d"},"schema_version":"1.0"},"canonical_sha256":"4b2d1482dfd57cf507d4917edc09d980560d2f43b7e97f7a6111c675012bf49a","source":{"kind":"arxiv","id":"2112.10469","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.10469","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"arxiv_version","alias_value":"2112.10469v2","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.10469","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"pith_short_12","alias_value":"JMWRJAW72V6P","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"pith_short_16","alias_value":"JMWRJAW72V6PKB6U","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"pith_short_8","alias_value":"JMWRJAW7","created_at":"2026-07-05T03:50:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:JMWRJAW72V6PKB6USF7NYCOZQB","target":"record","payload":{"canonical_record":{"source":{"id":"2112.10469","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T12:08:57Z","cross_cats_sorted":[],"title_canon_sha256":"be2bbddffa9b777a89e14ded6e793d81382ef8dc75ec7f999fb60c0beba81799","abstract_canon_sha256":"1ee2ca0c073b731480bfcdf0177c32bc21ac36b94747e4deb48ec42650aef22d"},"schema_version":"1.0"},"canonical_sha256":"4b2d1482dfd57cf507d4917edc09d980560d2f43b7e97f7a6111c675012bf49a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:50:53.265483Z","signature_b64":"0xuLehH4ZiackmRF69IoEjxhNIphDkZZziCcs2zJSOLylg0AKcZmeIC/8XGfUuzQ0lnQfj3/YLYuZbdBq2OyBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4b2d1482dfd57cf507d4917edc09d980560d2f43b7e97f7a6111c675012bf49a","last_reissued_at":"2026-07-05T03:50:53.265014Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:50:53.265014Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.10469","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ub4WuomSaMo8w2vBSL9ic9XWsGynMD1espLpLv1gg1C6Vrf4Z8Hza1ngkg5hdvRViOHaQnFwRDrtVMjyzI5tDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:11:55.965668Z"},"content_sha256":"b350c68999e88d8d00e06c21cd867965b3f21adf254a8f2065f6adee2a49d8dc","schema_version":"1.0","event_id":"sha256:b350c68999e88d8d00e06c21cd867965b3f21adf254a8f2065f6adee2a49d8dc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:JMWRJAW72V6PKB6USF7NYCOZQB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"JuCify: A Step Towards Android Code Unification for Enhanced Static Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Henri Hoyez, Jacques Klein, Jordan Samhi, Jun Gao, Kevin Allix, Nadia Daoudi, Pierre Graux, Tegawend\\'e F. Bissyand\\'e, Xiaoyu Sun","submitted_at":"2021-12-20T12:08:57Z","abstract_excerpt":"Native code is now commonplace within Android app packages where it co-exists and interacts with Dex bytecode through the Java Native Interface to deliver rich app functionalities. Yet, state-of-the-art static analysis approaches have mostly overlooked the presence of such native code, which, however, may implement some key sensitive, or even malicious, parts of the app behavior. This limitation of the state of the art is a severe threat to validity in a large range of static analyses that do not have a complete view of the executable code in apps. To address this issue, we propose a new advan"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.10469","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.10469/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jfGspQPIXrOAjAQzL01R7O+onJ0iaY+B99d6wrfrvLcMj54JT4AwrrSVg9A3xDBC9gIUewvhml8v1mmhvDiADA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:11:55.966661Z"},"content_sha256":"ca5892fb9087e8251ad445282733054e87333cd26921beef31e60799b762aeaa","schema_version":"1.0","event_id":"sha256:ca5892fb9087e8251ad445282733054e87333cd26921beef31e60799b762aeaa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JMWRJAW72V6PKB6USF7NYCOZQB/bundle.json","state_url":"https://pith.science/pith/JMWRJAW72V6PKB6USF7NYCOZQB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JMWRJAW72V6PKB6USF7NYCOZQB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:11:55Z","links":{"resolver":"https://pith.science/pith/JMWRJAW72V6PKB6USF7NYCOZQB","bundle":"https://pith.science/pith/JMWRJAW72V6PKB6USF7NYCOZQB/bundle.json","state":"https://pith.science/pith/JMWRJAW72V6PKB6USF7NYCOZQB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JMWRJAW72V6PKB6USF7NYCOZQB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:JMWRJAW72V6PKB6USF7NYCOZQB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1ee2ca0c073b731480bfcdf0177c32bc21ac36b94747e4deb48ec42650aef22d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T12:08:57Z","title_canon_sha256":"be2bbddffa9b777a89e14ded6e793d81382ef8dc75ec7f999fb60c0beba81799"},"schema_version":"1.0","source":{"id":"2112.10469","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.10469","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"arxiv_version","alias_value":"2112.10469v2","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.10469","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"pith_short_12","alias_value":"JMWRJAW72V6P","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"pith_short_16","alias_value":"JMWRJAW72V6PKB6U","created_at":"2026-07-05T03:50:53Z"},{"alias_kind":"pith_short_8","alias_value":"JMWRJAW7","created_at":"2026-07-05T03:50:53Z"}],"graph_snapshots":[{"event_id":"sha256:ca5892fb9087e8251ad445282733054e87333cd26921beef31e60799b762aeaa","target":"graph","created_at":"2026-07-05T03:50:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.10469/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Native code is now commonplace within Android app packages where it co-exists and interacts with Dex bytecode through the Java Native Interface to deliver rich app functionalities. Yet, state-of-the-art static analysis approaches have mostly overlooked the presence of such native code, which, however, may implement some key sensitive, or even malicious, parts of the app behavior. This limitation of the state of the art is a severe threat to validity in a large range of static analyses that do not have a complete view of the executable code in apps. To address this issue, we propose a new advan","authors_text":"Henri Hoyez, Jacques Klein, Jordan Samhi, Jun Gao, Kevin Allix, Nadia Daoudi, Pierre Graux, Tegawend\\'e F. Bissyand\\'e, Xiaoyu Sun","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T12:08:57Z","title":"JuCify: A Step Towards Android Code Unification for Enhanced Static Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.10469","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b350c68999e88d8d00e06c21cd867965b3f21adf254a8f2065f6adee2a49d8dc","target":"record","created_at":"2026-07-05T03:50:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1ee2ca0c073b731480bfcdf0177c32bc21ac36b94747e4deb48ec42650aef22d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-12-20T12:08:57Z","title_canon_sha256":"be2bbddffa9b777a89e14ded6e793d81382ef8dc75ec7f999fb60c0beba81799"},"schema_version":"1.0","source":{"id":"2112.10469","kind":"arxiv","version":2}},"canonical_sha256":"4b2d1482dfd57cf507d4917edc09d980560d2f43b7e97f7a6111c675012bf49a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4b2d1482dfd57cf507d4917edc09d980560d2f43b7e97f7a6111c675012bf49a","first_computed_at":"2026-07-05T03:50:53.265014Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:50:53.265014Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0xuLehH4ZiackmRF69IoEjxhNIphDkZZziCcs2zJSOLylg0AKcZmeIC/8XGfUuzQ0lnQfj3/YLYuZbdBq2OyBw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:50:53.265483Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.10469","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b350c68999e88d8d00e06c21cd867965b3f21adf254a8f2065f6adee2a49d8dc","sha256:ca5892fb9087e8251ad445282733054e87333cd26921beef31e60799b762aeaa"],"state_sha256":"2a45c72f7bc4328f0d3e1030060e15bb1f1fa37bd5c3f27f9f0633bd460136a7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"45gi25PHD2DBseiB2Pd+tNyJIHzFoOg57nmLv6psoGCrRg4kE7uQxi6NC/5nQqX+m21sHgEyDtalNNMnECtpDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:11:55.973638Z","bundle_sha256":"dabaca4955e00ed69178469c1c1d328aa62b75522c59d0e7d7a0b5c8946fc6b6"}}