{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:UDKVEJDCGATOJSLIT54LILHNOB","short_pith_number":"pith:UDKVEJDC","canonical_record":{"source":{"id":"1702.04872","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-02-16T06:46:07Z","cross_cats_sorted":[],"title_canon_sha256":"4f2386cdf9bcd4c93a406fdc3ea32869e77552a0bd841c5781e53cd693cb88cb","abstract_canon_sha256":"39fdadb908ea631731eb8761aa893ec39fb6dd154057e6183a7f42f97b85df18"},"schema_version":"1.0"},"canonical_sha256":"a0d55224623026e4c9689f78b42ced707179ea1266ddf1f0ecad7cdde2d95807","source":{"kind":"arxiv","id":"1702.04872","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1702.04872","created_at":"2026-05-18T00:48:32Z"},{"alias_kind":"arxiv_version","alias_value":"1702.04872v2","created_at":"2026-05-18T00:48:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1702.04872","created_at":"2026-05-18T00:48:32Z"},{"alias_kind":"pith_short_12","alias_value":"UDKVEJDCGATO","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_16","alias_value":"UDKVEJDCGATOJSLI","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_8","alias_value":"UDKVEJDC","created_at":"2026-05-18T12:31:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:UDKVEJDCGATOJSLIT54LILHNOB","target":"record","payload":{"canonical_record":{"source":{"id":"1702.04872","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-02-16T06:46:07Z","cross_cats_sorted":[],"title_canon_sha256":"4f2386cdf9bcd4c93a406fdc3ea32869e77552a0bd841c5781e53cd693cb88cb","abstract_canon_sha256":"39fdadb908ea631731eb8761aa893ec39fb6dd154057e6183a7f42f97b85df18"},"schema_version":"1.0"},"canonical_sha256":"a0d55224623026e4c9689f78b42ced707179ea1266ddf1f0ecad7cdde2d95807","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:48:32.354069Z","signature_b64":"YtANZo6/Tz7YHb1TNQ9S4gC8yBc+0l7DWLjo/wFMSIGzF0A2Dmna5m4DiJfP+WB1NibrpKGIXz+mHioi+gwyAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a0d55224623026e4c9689f78b42ced707179ea1266ddf1f0ecad7cdde2d95807","last_reissued_at":"2026-05-18T00:48:32.353597Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:48:32.353597Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1702.04872","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:48:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kraLHfVhCAVFU6dqhtZSmkl5EVwG10Svj22BFZ17OUR8+lZLp/MKS2ED/tGQ8PqfU2+4QPFuxlLWbc7TA+i7DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T22:15:34.326508Z"},"content_sha256":"320f7a747903c24ce2c0bd912d32425a6aea0df5fd17d238442e3f6cd20a0f40","schema_version":"1.0","event_id":"sha256:320f7a747903c24ce2c0bd912d32425a6aea0df5fd17d238442e3f6cd20a0f40"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:UDKVEJDCGATOJSLIT54LILHNOB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Measuring the Declared SDK Versions and Their Consistency with API Calls in Android Apps","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Daoyuan Wu, David Lo, Debin Gao, Jiayun Xu, Ximing Liu","submitted_at":"2017-02-16T06:46:07Z","abstract_excerpt":"Android has been the most popular smartphone system, with multiple platform versions (e.g., KITKAT and Lollipop) active in the market. To manage the application's compatibility with one or more platform versions, Android allows apps to declare the supported platform SDK versions in their manifest files. In this paper, we make a first effort to study this modern software mechanism. Our objective is to measure the current practice of the declared SDK versions (which we term as DSDK versions afterwards) in real apps, and the consistency between the DSDK versions and their app API calls. To this e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1702.04872","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:48:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yB52k2FAg4cBATeuEZ7OxY/tXlm4pv1M5xLS0rxv2IY5RuKxTm87xzlITZ3HScku1L25Mss9fmMBa/JpZweOBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T22:15:34.326852Z"},"content_sha256":"fdd4bf2d2199b2878990c68fa143ab55e94b50364c27918f51b1e76f8dabe77d","schema_version":"1.0","event_id":"sha256:fdd4bf2d2199b2878990c68fa143ab55e94b50364c27918f51b1e76f8dabe77d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UDKVEJDCGATOJSLIT54LILHNOB/bundle.json","state_url":"https://pith.science/pith/UDKVEJDCGATOJSLIT54LILHNOB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UDKVEJDCGATOJSLIT54LILHNOB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-02T22:15:34Z","links":{"resolver":"https://pith.science/pith/UDKVEJDCGATOJSLIT54LILHNOB","bundle":"https://pith.science/pith/UDKVEJDCGATOJSLIT54LILHNOB/bundle.json","state":"https://pith.science/pith/UDKVEJDCGATOJSLIT54LILHNOB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UDKVEJDCGATOJSLIT54LILHNOB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:UDKVEJDCGATOJSLIT54LILHNOB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"39fdadb908ea631731eb8761aa893ec39fb6dd154057e6183a7f42f97b85df18","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-02-16T06:46:07Z","title_canon_sha256":"4f2386cdf9bcd4c93a406fdc3ea32869e77552a0bd841c5781e53cd693cb88cb"},"schema_version":"1.0","source":{"id":"1702.04872","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1702.04872","created_at":"2026-05-18T00:48:32Z"},{"alias_kind":"arxiv_version","alias_value":"1702.04872v2","created_at":"2026-05-18T00:48:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1702.04872","created_at":"2026-05-18T00:48:32Z"},{"alias_kind":"pith_short_12","alias_value":"UDKVEJDCGATO","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_16","alias_value":"UDKVEJDCGATOJSLI","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_8","alias_value":"UDKVEJDC","created_at":"2026-05-18T12:31:46Z"}],"graph_snapshots":[{"event_id":"sha256:fdd4bf2d2199b2878990c68fa143ab55e94b50364c27918f51b1e76f8dabe77d","target":"graph","created_at":"2026-05-18T00:48:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Android has been the most popular smartphone system, with multiple platform versions (e.g., KITKAT and Lollipop) active in the market. To manage the application's compatibility with one or more platform versions, Android allows apps to declare the supported platform SDK versions in their manifest files. In this paper, we make a first effort to study this modern software mechanism. Our objective is to measure the current practice of the declared SDK versions (which we term as DSDK versions afterwards) in real apps, and the consistency between the DSDK versions and their app API calls. To this e","authors_text":"Daoyuan Wu, David Lo, Debin Gao, Jiayun Xu, Ximing Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-02-16T06:46:07Z","title":"Measuring the Declared SDK Versions and Their Consistency with API Calls in Android Apps"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1702.04872","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:320f7a747903c24ce2c0bd912d32425a6aea0df5fd17d238442e3f6cd20a0f40","target":"record","created_at":"2026-05-18T00:48:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"39fdadb908ea631731eb8761aa893ec39fb6dd154057e6183a7f42f97b85df18","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-02-16T06:46:07Z","title_canon_sha256":"4f2386cdf9bcd4c93a406fdc3ea32869e77552a0bd841c5781e53cd693cb88cb"},"schema_version":"1.0","source":{"id":"1702.04872","kind":"arxiv","version":2}},"canonical_sha256":"a0d55224623026e4c9689f78b42ced707179ea1266ddf1f0ecad7cdde2d95807","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a0d55224623026e4c9689f78b42ced707179ea1266ddf1f0ecad7cdde2d95807","first_computed_at":"2026-05-18T00:48:32.353597Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:48:32.353597Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YtANZo6/Tz7YHb1TNQ9S4gC8yBc+0l7DWLjo/wFMSIGzF0A2Dmna5m4DiJfP+WB1NibrpKGIXz+mHioi+gwyAg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:48:32.354069Z","signed_message":"canonical_sha256_bytes"},"source_id":"1702.04872","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:320f7a747903c24ce2c0bd912d32425a6aea0df5fd17d238442e3f6cd20a0f40","sha256:fdd4bf2d2199b2878990c68fa143ab55e94b50364c27918f51b1e76f8dabe77d"],"state_sha256":"c4dbb07bf1fae993c82d7faeab1fb82b76bca891e0021e69d736359f0c3ea745"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T/pPcRMPZ+scv2a+Qv9UAfWCBofeldJYaKvPLdMYtKM4Cm/TN1Y8KEID1fKyyTv3pdy4ffuPnkPqAlKyCZcaCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-02T22:15:34.328773Z","bundle_sha256":"2c7dc963289f4ec22d023118f1fb8f66a8211b966a99c476de261f4a7424de61"}}