From Observations to Authorized Actions: Measuring Source Information in Android Agents

Measures source-attribution limits in Android accessibility and separately tests application-history and selected-WebView-object checks for authorizing AppFunctions actions.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

android, web

Topics

safety-security, tool-integration, observability

Record publication date

2026-10-11

Evidence retrieved

2026-10-20T13:12:58.069698Z

Resource ID

arxiv:2610.15502

Recorded paper version

arXiv v1

Version updated: 2026-10-11T10:09:44Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Hyobin Ahn, Dongjae Lee

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The two prototypes use different workloads and trust assumptions on patched Android/WebView components. Approval is simulated; authenticated browser delivery and atomic capture remain unimplemented. Coarse source history can withhold benign work and persist across tasks. Direct-call checks and limited live-agent trials are separate, and writes are in-memory. No production vulnerability, general defense rate or released artifact is established.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-20T12:56:03.829575Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   a8636ac679d2110181d4417d4aef040ddb24464597a7fa6fe6d2c35a2401a3b1
2. editorial primary review

   Retrieved 2026-10-20T13:12:58.069698Z. Supports: name, kind, summary, environments, topics, scope, notes.

   Content fingerprint

   a38b3ddc9d5d6744eefc937f86e174917f9b5de149323632d5d1b20283d79c8e

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.