{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:RKNKQW3ZY7IN6VHZLVMEX7JE7B","short_pith_number":"pith:RKNKQW3Z","canonical_record":{"source":{"id":"2304.00944","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-03T13:02:49Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"7e04a8161e3676f0d8addf6ab0e8b82e5909c2b2152fb3ddf3c91ab768a9dc97","abstract_canon_sha256":"c2dce83bec04649c6a02c6cd2c4b80917b415c19876d514c9b797fcd7766e414"},"schema_version":"1.0"},"canonical_sha256":"8a9aa85b79c7d0df54f95d584bfd24f865e6e45e310830b5aed41c5b6d76ec35","source":{"kind":"arxiv","id":"2304.00944","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.00944","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"arxiv_version","alias_value":"2304.00944v1","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.00944","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"pith_short_12","alias_value":"RKNKQW3ZY7IN","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"pith_short_16","alias_value":"RKNKQW3ZY7IN6VHZ","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"pith_short_8","alias_value":"RKNKQW3Z","created_at":"2026-07-05T05:57:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:RKNKQW3ZY7IN6VHZLVMEX7JE7B","target":"record","payload":{"canonical_record":{"source":{"id":"2304.00944","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-03T13:02:49Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"7e04a8161e3676f0d8addf6ab0e8b82e5909c2b2152fb3ddf3c91ab768a9dc97","abstract_canon_sha256":"c2dce83bec04649c6a02c6cd2c4b80917b415c19876d514c9b797fcd7766e414"},"schema_version":"1.0"},"canonical_sha256":"8a9aa85b79c7d0df54f95d584bfd24f865e6e45e310830b5aed41c5b6d76ec35","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:57:24.628233Z","signature_b64":"TcmOoGQoftXAsXqodcJ69PpwnGVzr1LnM7lgAW9+hTsrvbK8k5w6GdabMm+lIo15aM/0n00pHvJNkX+4pDeMBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a9aa85b79c7d0df54f95d584bfd24f865e6e45e310830b5aed41c5b6d76ec35","last_reissued_at":"2026-07-05T05:57:24.627739Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:57:24.627739Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.00944","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:57:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HLWnCxebRBNykgtqWo6urxoJJWogGmyKfE06QkXJ+8TWWYK5z4uITYpeVD5lcNgcfjC2Hh7iGZDKg/aEHPfNDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T04:12:56.543651Z"},"content_sha256":"af6b6bc7de03d4181d27bab54787a063e244617bb17eb3caffa2a8769d4e93f9","schema_version":"1.0","event_id":"sha256:af6b6bc7de03d4181d27bab54787a063e244617bb17eb3caffa2a8769d4e93f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:RKNKQW3ZY7IN6VHZLVMEX7JE7B","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Lessons in VCR Repair: Compliance of Android App Developers with the California Consumer Privacy Act (CCPA)","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Chris Hoofnagle, Jordan Fischer, Nikita Samarin, Noura Alomar, Oscar Bjorkman, Primal Wijesekera, Reena Yuan, Serge Egelman, Shayna Kothari, Zaina Siyed","submitted_at":"2023-04-03T13:02:49Z","abstract_excerpt":"The California Consumer Privacy Act (CCPA) provides California residents with a range of enhanced privacy protections and rights. Our research investigated the extent to which Android app developers comply with the provisions of the CCPA that require them to provide consumers with accurate privacy notices and respond to \"verifiable consumer requests\" (VCRs) by disclosing personal information that they have collected, used, or shared about consumers for a business or commercial purpose. We compared the actual network traffic of 109 apps that we believe must comply with the CCPA to the data that"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.00944","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.00944/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:57:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hSb/MjJ75RMUBICuuOjYhhdjDIh/LDQmViVat2xIQ+wxACUnRHEHsv+x0YkkuCerOm+G4Bfvrpn2SF6kRshlCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T04:12:56.544480Z"},"content_sha256":"31e0b02fcf4c7910bcb1fb22e6e4a19173f9ddd88d79f905b22bfaad963431e9","schema_version":"1.0","event_id":"sha256:31e0b02fcf4c7910bcb1fb22e6e4a19173f9ddd88d79f905b22bfaad963431e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RKNKQW3ZY7IN6VHZLVMEX7JE7B/bundle.json","state_url":"https://pith.science/pith/RKNKQW3ZY7IN6VHZLVMEX7JE7B/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RKNKQW3ZY7IN6VHZLVMEX7JE7B/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T04:12:56Z","links":{"resolver":"https://pith.science/pith/RKNKQW3ZY7IN6VHZLVMEX7JE7B","bundle":"https://pith.science/pith/RKNKQW3ZY7IN6VHZLVMEX7JE7B/bundle.json","state":"https://pith.science/pith/RKNKQW3ZY7IN6VHZLVMEX7JE7B/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RKNKQW3ZY7IN6VHZLVMEX7JE7B/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RKNKQW3ZY7IN6VHZLVMEX7JE7B","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c2dce83bec04649c6a02c6cd2c4b80917b415c19876d514c9b797fcd7766e414","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-03T13:02:49Z","title_canon_sha256":"7e04a8161e3676f0d8addf6ab0e8b82e5909c2b2152fb3ddf3c91ab768a9dc97"},"schema_version":"1.0","source":{"id":"2304.00944","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.00944","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"arxiv_version","alias_value":"2304.00944v1","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.00944","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"pith_short_12","alias_value":"RKNKQW3ZY7IN","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"pith_short_16","alias_value":"RKNKQW3ZY7IN6VHZ","created_at":"2026-07-05T05:57:24Z"},{"alias_kind":"pith_short_8","alias_value":"RKNKQW3Z","created_at":"2026-07-05T05:57:24Z"}],"graph_snapshots":[{"event_id":"sha256:31e0b02fcf4c7910bcb1fb22e6e4a19173f9ddd88d79f905b22bfaad963431e9","target":"graph","created_at":"2026-07-05T05:57:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.00944/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The California Consumer Privacy Act (CCPA) provides California residents with a range of enhanced privacy protections and rights. Our research investigated the extent to which Android app developers comply with the provisions of the CCPA that require them to provide consumers with accurate privacy notices and respond to \"verifiable consumer requests\" (VCRs) by disclosing personal information that they have collected, used, or shared about consumers for a business or commercial purpose. We compared the actual network traffic of 109 apps that we believe must comply with the CCPA to the data that","authors_text":"Chris Hoofnagle, Jordan Fischer, Nikita Samarin, Noura Alomar, Oscar Bjorkman, Primal Wijesekera, Reena Yuan, Serge Egelman, Shayna Kothari, Zaina Siyed","cross_cats":["cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-03T13:02:49Z","title":"Lessons in VCR Repair: Compliance of Android App Developers with the California Consumer Privacy Act (CCPA)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.00944","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:af6b6bc7de03d4181d27bab54787a063e244617bb17eb3caffa2a8769d4e93f9","target":"record","created_at":"2026-07-05T05:57:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c2dce83bec04649c6a02c6cd2c4b80917b415c19876d514c9b797fcd7766e414","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-03T13:02:49Z","title_canon_sha256":"7e04a8161e3676f0d8addf6ab0e8b82e5909c2b2152fb3ddf3c91ab768a9dc97"},"schema_version":"1.0","source":{"id":"2304.00944","kind":"arxiv","version":1}},"canonical_sha256":"8a9aa85b79c7d0df54f95d584bfd24f865e6e45e310830b5aed41c5b6d76ec35","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a9aa85b79c7d0df54f95d584bfd24f865e6e45e310830b5aed41c5b6d76ec35","first_computed_at":"2026-07-05T05:57:24.627739Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:57:24.627739Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TcmOoGQoftXAsXqodcJ69PpwnGVzr1LnM7lgAW9+hTsrvbK8k5w6GdabMm+lIo15aM/0n00pHvJNkX+4pDeMBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:57:24.628233Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.00944","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:af6b6bc7de03d4181d27bab54787a063e244617bb17eb3caffa2a8769d4e93f9","sha256:31e0b02fcf4c7910bcb1fb22e6e4a19173f9ddd88d79f905b22bfaad963431e9"],"state_sha256":"df72104e3f0051dded2f17148372f19f2e3df0f5f1eb936f991ef20ef46385f9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5fHwQG0VVAxw3UwJv8ma3DlzBva9X916wH4TLNSaac+J7A2TfYItIEokDRtUfDENF0RU0dlfbcPx2DyqFXf1Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T04:12:56.551316Z","bundle_sha256":"83dd3efb80041759699e291f1550524503d545885706ccb1c79f1df83fd302ca"}}