I don't think either side disputes that Google implemented a portion of the Java API, which they copied from Apache Harmony. But they certainly seem to disagree on what qualifies as a meaningful definition of SSO, with Oracle arguing that both the entirety of Java and individual packages qualify as SSO.