{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:XOAFBOSHU4T5TR5I5SLUHYT4PR","short_pith_number":"pith:XOAFBOSH","canonical_record":{"source":{"id":"2111.08217","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T04:22:15Z","cross_cats_sorted":[],"title_canon_sha256":"67029db700b62d90adc1ebabae868a4e8fe815a856cd946e11ce90900437dff4","abstract_canon_sha256":"977bc1c04daaf3bcf571c67428d897258bfd7384b37cb9a25d47b305a5c9be57"},"schema_version":"1.0"},"canonical_sha256":"bb8050ba47a727d9c7a8ec9743e27c7c70a4db9c23479c3a9b667f1a8a741340","source":{"kind":"arxiv","id":"2111.08217","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.08217","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"arxiv_version","alias_value":"2111.08217v1","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.08217","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"pith_short_12","alias_value":"XOAFBOSHU4T5","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"pith_short_16","alias_value":"XOAFBOSHU4T5TR5I","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"pith_short_8","alias_value":"XOAFBOSH","created_at":"2026-07-05T03:32:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:XOAFBOSHU4T5TR5I5SLUHYT4PR","target":"record","payload":{"canonical_record":{"source":{"id":"2111.08217","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T04:22:15Z","cross_cats_sorted":[],"title_canon_sha256":"67029db700b62d90adc1ebabae868a4e8fe815a856cd946e11ce90900437dff4","abstract_canon_sha256":"977bc1c04daaf3bcf571c67428d897258bfd7384b37cb9a25d47b305a5c9be57"},"schema_version":"1.0"},"canonical_sha256":"bb8050ba47a727d9c7a8ec9743e27c7c70a4db9c23479c3a9b667f1a8a741340","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:32:31.256683Z","signature_b64":"OGDSOz8zLSQdRZMIf3KVTmyb7pT05TAroqk4vBOy5TV6y/IPgku2RCPLe5EF7HT6EEvDdM/geRrD5oRd3hKSAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb8050ba47a727d9c7a8ec9743e27c7c70a4db9c23479c3a9b667f1a8a741340","last_reissued_at":"2026-07-05T03:32:31.256182Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:32:31.256182Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.08217","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:32:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pvq/v7dBgC73lcJZcoxBiEVxYjJvbVTcLrXgz6z24qQKL98M++4EebXfOqMeuNhhQxuUbastuH2hUxvegEsoCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T04:54:02.257806Z"},"content_sha256":"77df15894e11b6f6ab9813239f8d95f6ca54d19541c4c923d040a9b3c9c90041","schema_version":"1.0","event_id":"sha256:77df15894e11b6f6ab9813239f8d95f6ca54d19541c4c923d040a9b3c9c90041"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:XOAFBOSHU4T5TR5I5SLUHYT4PR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"NatiDroid: Cross-Language Android Permission Specification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chaoran Li, Jason Xue, Muhammad Ejaz Ahmed, Ruoxi Sun, Seyit Camtepe, Sheng Wen, Xiao Chen, Yang Xiang","submitted_at":"2021-11-16T04:22:15Z","abstract_excerpt":"The Android system manages access to sensitive APIs by permission enforcement. An application (app) must declare proper permissions before invoking specific Android APIs. However, there is no official documentation providing the complete list of permission-protected APIs and the corresponding permissions to date. Researchers have spent significant efforts extracting such API protection mapping from the Android API framework, which leverages static code analysis to determine if specific permissions are required before accessing an API. Nevertheless, none of them has attempted to analyze the pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.08217","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.08217/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:32:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZTPzQ4Cp4E/ogJGMc8gKcKi2LlAEHXzsyE0yvpxi7l2F10THlEjMINCTf9Rog7cS7+t+MPQFOd04iJcFxdg6AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T04:54:02.258838Z"},"content_sha256":"6240cf9a37bf8d6eba95b17d31bde90f89d8844a94e8098cdd048917828c5964","schema_version":"1.0","event_id":"sha256:6240cf9a37bf8d6eba95b17d31bde90f89d8844a94e8098cdd048917828c5964"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XOAFBOSHU4T5TR5I5SLUHYT4PR/bundle.json","state_url":"https://pith.science/pith/XOAFBOSHU4T5TR5I5SLUHYT4PR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XOAFBOSHU4T5TR5I5SLUHYT4PR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T04:54:02Z","links":{"resolver":"https://pith.science/pith/XOAFBOSHU4T5TR5I5SLUHYT4PR","bundle":"https://pith.science/pith/XOAFBOSHU4T5TR5I5SLUHYT4PR/bundle.json","state":"https://pith.science/pith/XOAFBOSHU4T5TR5I5SLUHYT4PR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XOAFBOSHU4T5TR5I5SLUHYT4PR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:XOAFBOSHU4T5TR5I5SLUHYT4PR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"977bc1c04daaf3bcf571c67428d897258bfd7384b37cb9a25d47b305a5c9be57","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T04:22:15Z","title_canon_sha256":"67029db700b62d90adc1ebabae868a4e8fe815a856cd946e11ce90900437dff4"},"schema_version":"1.0","source":{"id":"2111.08217","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.08217","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"arxiv_version","alias_value":"2111.08217v1","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.08217","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"pith_short_12","alias_value":"XOAFBOSHU4T5","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"pith_short_16","alias_value":"XOAFBOSHU4T5TR5I","created_at":"2026-07-05T03:32:31Z"},{"alias_kind":"pith_short_8","alias_value":"XOAFBOSH","created_at":"2026-07-05T03:32:31Z"}],"graph_snapshots":[{"event_id":"sha256:6240cf9a37bf8d6eba95b17d31bde90f89d8844a94e8098cdd048917828c5964","target":"graph","created_at":"2026-07-05T03:32:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.08217/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Android system manages access to sensitive APIs by permission enforcement. An application (app) must declare proper permissions before invoking specific Android APIs. However, there is no official documentation providing the complete list of permission-protected APIs and the corresponding permissions to date. Researchers have spent significant efforts extracting such API protection mapping from the Android API framework, which leverages static code analysis to determine if specific permissions are required before accessing an API. Nevertheless, none of them has attempted to analyze the pro","authors_text":"Chaoran Li, Jason Xue, Muhammad Ejaz Ahmed, Ruoxi Sun, Seyit Camtepe, Sheng Wen, Xiao Chen, Yang Xiang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T04:22:15Z","title":"NatiDroid: Cross-Language Android Permission Specification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.08217","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:77df15894e11b6f6ab9813239f8d95f6ca54d19541c4c923d040a9b3c9c90041","target":"record","created_at":"2026-07-05T03:32:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"977bc1c04daaf3bcf571c67428d897258bfd7384b37cb9a25d47b305a5c9be57","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T04:22:15Z","title_canon_sha256":"67029db700b62d90adc1ebabae868a4e8fe815a856cd946e11ce90900437dff4"},"schema_version":"1.0","source":{"id":"2111.08217","kind":"arxiv","version":1}},"canonical_sha256":"bb8050ba47a727d9c7a8ec9743e27c7c70a4db9c23479c3a9b667f1a8a741340","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bb8050ba47a727d9c7a8ec9743e27c7c70a4db9c23479c3a9b667f1a8a741340","first_computed_at":"2026-07-05T03:32:31.256182Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:32:31.256182Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OGDSOz8zLSQdRZMIf3KVTmyb7pT05TAroqk4vBOy5TV6y/IPgku2RCPLe5EF7HT6EEvDdM/geRrD5oRd3hKSAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:32:31.256683Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.08217","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:77df15894e11b6f6ab9813239f8d95f6ca54d19541c4c923d040a9b3c9c90041","sha256:6240cf9a37bf8d6eba95b17d31bde90f89d8844a94e8098cdd048917828c5964"],"state_sha256":"bf9e76bd55748e076897f436327634b9d134ed96bb095dfadb22341039eb3f8b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ceE9BTAlbIvK3OW+5sdKNEAWHFk+cSNegCHjbHD8O7JLWe7JpS6AT8ly+HerKxsi2ieqSR8JWI7D69wwa7ddAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T04:54:02.263656Z","bundle_sha256":"a3ec537ac8f6a1b8e427a24cf30c583e99234d31bbae7eee489f499abc8cdd85"}}