{
  "ok": true,
  "app_id": "app.phantom",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": true,
  "grade_delta": "F ← D",
  "score_delta": -42,
  "from": {
    "scan_id": "b96f41d2-5b9a-430d-88ed-2e91674aeb1e",
    "version": "26.31.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 36635.026,
        "harvest": 9950.187000000002,
        "detectors": 25175.632999999892
      },
      "bytes_total": 224318028,
      "bytes_scanned": 224318028,
      "bytes_skipped": 0,
      "files_processed": 2336,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "223fd31b44bd0049f9483f0f4fb1b06738470711931c85747d24e5659ae4bd1b"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "3252ed0d5adc0690c5907d9e6fd9d4fb41793f2fc8849cb957a4b1278b1dd9fe"
        },
        {
          "name": "config.en.apk",
          "sha256": "ac301da2ecb4d514a1677b3d548485aba7f74003bf9503eaf565fd439e6d277a"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "adc3e522a8db8e49dc0f4323c161e1a65e5c59dc5d5bb8aae8c00df4468ca679"
        }
      ],
      "ruleset_sha256": "a4c4120389ccc4b44afa23b5786f6b8d2bf3dc47ca546355bb3ef6da4a54b513"
    },
    "grade": "D",
    "score": 42,
    "scanned_at": "2026-10-01T14:03:07.377Z"
  },
  "to": {
    "scan_id": "70f54f30-988c-492f-87ce-c43a1abb07d2",
    "version": "26.32.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 44086.342,
        "harvest": 12678.657999999983,
        "detectors": 29597.744999999937
      },
      "bytes_total": 235443360,
      "bytes_scanned": 235443360,
      "bytes_skipped": 0,
      "files_processed": 2336,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "3af75d7716c99bf62cfda0aa80eb47c5c94adc6b471401dfdde33a20ffae47b2"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "e4e8da652384e918b667d7176349a62dd879bfcd281c51972c65de11bd34bce0"
        },
        {
          "name": "config.en.apk",
          "sha256": "5c04f81587d1e27f6078aa916e363a2ea3ed8bd6f13211d5e860ca652d0ef22c"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "37ef1693e7059ffad573109ff2ee29e43cd29cd734473c263997ba3617393550"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 0,
    "scanned_at": "2026-10-08T14:05:43.166Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "8c116c02e50794da7682af38a84829772c8f12756ececa409987fe1bed3ec91d",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "3b42efe1a3acf17de286cb85d46e90add1eba62862f11444c244a4e69c85964f",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "744fe658fd063cae038d6ca284a871ac857b4f4c877d402327af38601002d3f5",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "8f4e87ad3ab9bb0ca755530e6b1218f83e7f5a227ae81eb6796f295c816c564f",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "e21d2f9fca5d4ea581beced930165cac191f6ec679e12b26535da38e327be3fc",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "80c4673e871774a50b54264ffff252744e24ee76c7937632cce7f052ddc84fae",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "2eff996ce5dacc318ffe9c4997de8c0126874b778c4e8e0728380b43a6931c0b",
        "verified": false
      }
    ],
    "persisting_count": 2,
    "added_by_sev": {
      "critical": 2,
      "high": 0,
      "medium": 0,
      "low": 2
    },
    "removed_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 0,
      "low": 2
    }
  },
  "trackers": {
    "added": [],
    "removed": []
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}