# From Observations to Authorized Actions: Measuring Source Information in Android Agents

Measures source-attribution limits in Android accessibility and separately tests application-history and selected-WebView-object checks for authorizing AppFunctions actions.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2610-15502/
- Original source: https://arxiv.org/abs/2610.15502
- Kind: paper
- Review: curated
- Scope: core
- Environments: android, web
- Topics: safety-security, tool-integration, observability
- Evidence checked: 2026-10-20T13:12:58.069698Z
- ID: arxiv:2610.15502

## Limitations

The two prototypes use different workloads and trust assumptions on patched Android/WebView components. Approval is simulated; authenticated browser delivery and atomic capture remain unimplemented. Coarse source history can withhold benign work and persist across tasks. Direct-call checks and limited live-agent trials are separate, and writes are in-memory. No production vulnerability, general defense rate or released artifact is established.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2610-15502/record.json

## Authors

Hyobin Ahn, Dongjae Lee

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2610-15502/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2610-15502/citation.csl.json

## Recorded arXiv snapshot

- Version: 1
- Version source: https://arxiv.org/abs/2610.15502v1
- First submission: 2026-10-11T10:09:44Z
- Version updated: 2026-10-11T10:09:44Z
- Abstract SHA-256: ff5470e792d14ced2cdff648d97e2606eea4b3c822046b7c10272fd2a5f1695f
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?search_query=%28ti%3A%22graphical+user+interface%22+OR+ti%3A%22screen+grounding%22+OR+ti%3A%22UI+grounding%22+OR+ti%3A%22desktop+agents%22+OR+ti%3A%22Android+agent%22+OR+ti%3A%22phone+agent%22+OR+ti%3A%22mobile+GUI%22+OR+ti%3A%22web+navigation%22+OR+ti%3A%22GUI+automation%22+OR+ti%3A%22browser+automation%22%29+AND+submittedDate%3A%5B202608210000+TO+202610201255%5D&start=0&max_results=200&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-20T12:56:03.829575Z; SHA-256 a8636ac679d2110181d4417d4aef040ddb24464597a7fa6fe6d2c35a2401a3b1)
- https://arxiv.org/html/2610.15502v1 (retrieved 2026-10-20T13:12:58.069698Z; SHA-256 a38b3ddc9d5d6744eefc937f86e174917f9b5de149323632d5d1b20283d79c8e)