{
  "ok": true,
  "app_id": "com.cardiast.business_card",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": true,
  "grade_delta": "D ← A",
  "score_delta": -47,
  "from": {
    "scan_id": "a066e45e-4c2f-4cf7-ade6-61c5fffc93a3",
    "version": "2.0.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 7912.494,
        "harvest": 3294.9750000000013,
        "detectors": 4035.9009999999876
      },
      "bytes_total": 67244445,
      "bytes_scanned": 67244445,
      "bytes_skipped": 0,
      "files_processed": 1191,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "1b6a2cfce2a7c13caf77d213aaba3cffce02409200e67bee186618fdb4f2e70f"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "ee81f47dd10c21f4ee4c7d70cca336e84a56140814aa18ec0f146ab3a8301606"
        },
        {
          "name": "config.en.apk",
          "sha256": "62c8af7b979f85bdf50e9c4bff7a6ef6c353ae2d04ab95874b72eb4776df0a2e"
        },
        {
          "name": "config.es.apk",
          "sha256": "925bf8b2701b9aa3fd7b9f489ef82719272fa039b7550c8246786903b81606e2"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "947fab9eabe601f5b8b731851f61a9a7b229c0cccf82bb859d624309896bf00c"
        }
      ],
      "ruleset_sha256": "6627311253eb54bc361d5dd9a0abc2a0fe556e390d6b2031bca75e1800928ccd"
    },
    "grade": "A",
    "score": 91,
    "scanned_at": "2026-09-25T01:06:06.049Z"
  },
  "to": {
    "scan_id": "3d0d5038-6a35-4f2b-86dd-405f5795a68c",
    "version": "2.0.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 8333.398,
        "harvest": 3344.2709999999984,
        "detectors": 4243.240999999998
      },
      "bytes_total": 67178512,
      "bytes_scanned": 67178512,
      "bytes_skipped": 0,
      "files_processed": 1174,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "7cd2d55231d1a8841bfdda9b2dddf76d9e50d3b86d14dbd213ffe4e599099eca"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "00b8ad7eaa442787223dff7d5c1f998cc8831c3bcd1cc451b4479554946f542f"
        },
        {
          "name": "config.en.apk",
          "sha256": "10a87f924fcb4da6c2151194fcb5a9f816f59c017b8b6d06519206fd8d391ad7"
        },
        {
          "name": "config.es.apk",
          "sha256": "bf2b03b9af4bbbafd3c4667ea3f34090eec0efa2e2543e1e6d820bfa930d0636"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "f56703dc83f6059fe46eb4d0ee4c31a6169803e368235d74e28911da9d9f3ec9"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "D",
    "score": 44,
    "scanned_at": "2026-10-07T11:43:50.544Z"
  },
  "findings": {
    "added": [],
    "removed": [
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      },
      {
        "finding_type": 78,
        "severity": "medium",
        "title": "Ships third-party ad/analytics SDKs but Data Safety declares no data shared",
        "fingerprint": "2b54e044aaab4c3f757c82024e4d291eb1074bc851c642350ce6faee6f887e08",
        "verified": false
      }
    ],
    "persisting_count": 2,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 1
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}