{
  "aliases": [],
  "authors": [
    "Hyobin Ahn",
    "Dongjae Lee"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "ff5470e792d14ced2cdff648d97e2606eea4b3c822046b7c10272fd2a5f1695f",
      "submitted_at": "2026-10-11T10:09:44Z",
      "updated_at": "2026-10-11T10:09:44Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2610.15502v1"
    }
  },
  "environments": [
    "android",
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-20T12:56:03.829575Z",
      "role": "primary",
      "sha256": "a8636ac679d2110181d4417d4aef040ddb24464597a7fa6fe6d2c35a2401a3b1",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22graphical+user+interface%22+OR+ti%3A%22screen+grounding%22+OR+ti%3A%22UI+grounding%22+OR+ti%3A%22desktop+agents%22+OR+ti%3A%22Android+agent%22+OR+ti%3A%22phone+agent%22+OR+ti%3A%22mobile+GUI%22+OR+ti%3A%22web+navigation%22+OR+ti%3A%22GUI+automation%22+OR+ti%3A%22browser+automation%22%29+AND+submittedDate%3A%5B202608210000+TO+202610201255%5D&start=0&max_results=200&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-20T13:12:58.069698Z",
      "role": "primary",
      "sha256": "a38b3ddc9d5d6744eefc937f86e174917f9b5de149323632d5d1b20283d79c8e",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "notes"
      ],
      "url": "https://arxiv.org/html/2610.15502v1"
    }
  ],
  "id": "arxiv:2610.15502",
  "identifiers": {
    "arxiv": "2610.15502"
  },
  "kind": "paper",
  "last_verified_at": "2026-10-20T13:12:58.069698Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2610.15502"
    }
  ],
  "name": "From Observations to Authorized Actions: Measuring Source Information in Android Agents",
  "notes": "The two prototypes use different workloads and trust assumptions on patched Android/WebView components. Approval is simulated; authenticated browser delivery and atomic capture remain unimplemented. Coarse source history can withhold benign work and persist across tasks. Direct-call checks and limited live-agent trials are separate, and writes are in-memory. No production vulnerability, general defense rate or released artifact is established.",
  "published_at": "2026-10-11",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Measures source-attribution limits in Android accessibility and separately tests application-history and selected-WebView-object checks for authorizing AppFunctions actions.",
  "topics": [
    "safety-security",
    "tool-integration",
    "observability"
  ],
  "updated_at": "2026-10-11",
  "url": "https://arxiv.org/abs/2610.15502"
}