{"as_of":"2026-08-15T18:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:071849f0cb782590133bb8b4f464dc247fa11b33fc2bb9b856af956e0809cd1c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":2,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":2,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T22:48:42.984470Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-08T17:25:06.546508Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1901.04684","last_updated":"2019-01-15T07:21:44Z","snapshot_observed_at":"2026-08-14T17:30:55.014097Z","submitted_at":"2019-01-15T07:21:44Z","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1901.04684","snapshot_observed_at":"2026-08-10T22:48:42.984470Z","title":"The limitations of adversarial training and the blind-spot attack,","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2501.00824","last_updated":"2025-06-20T14:59:56Z","snapshot_observed_at":"2026-08-11T21:13:43.994902Z","submitted_at":"2025-01-01T13:00:01Z","title":"How Breakable Is Privacy: Probing and Resisting Model Inversion Attacks in Collaborative Inference","version":7},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T22:48:42.984470Z"},"links":{"cited_paper":"/paper/1901.04684","citing_paper":"/paper/2501.00824"},"observation_digest":"sha256:02405e2e0b3c5db4e2e7beff43c06cf4925a23d70a6e4a7d17553fd0b7385e80","observation_id":"ac096976-bfb2-44f7-ac3a-1ea2984975c5","resolution":{"observed_at":"2026-08-10T22:48:42.984470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1901.04684","last_updated":"2019-01-15T07:21:44Z","snapshot_observed_at":"2026-08-14T17:30:55.014097Z","submitted_at":"2019-01-15T07:21:44Z","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","version":1},"cited_work":{"arxiv_id":"1901.04684","doi":null,"metadata_source":"pith","pith_arxiv_id":"1901.04684","snapshot_observed_at":"2026-08-08T17:25:06.546508Z","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","venue":"stat.ML","work_id":"a0904112-109c-4616-aead-5489f122be24","year":2019},"citing_paper":{"arxiv_id":"2502.05925","last_updated":"2026-07-25T15:22:40Z","snapshot_observed_at":"2026-08-14T10:48:00.313960Z","submitted_at":"2025-02-09T14:59:57Z","title":"Sign-Symmetry Learning Rules are Robust Fine-Tuners","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-08T17:25:06.411860Z"},"links":{"cited_paper":"/paper/1901.04684","citing_paper":"/paper/2502.05925"},"observation_digest":"sha256:f24b305a25700e6863f3c4bc761f9e591da4f55b78d912c1ea4ff54520c5d617","observation_id":"179a5900-1c36-4d05-909f-b0ab51a8d16f","resolution":{"observed_at":"2026-08-08T17:25:06.554102Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/1901.04684/citation-record","integrity":"/paper/1901.04684/integrity","json":"/paper/1901.04684/citation-record.json","paper":"/paper/1901.04684"},"outbound":[],"paper":{"arxiv_id":"1901.04684","last_updated":"2019-01-15T07:21:44Z","latest_version":1,"primary_category":"stat.ML","snapshot_observed_at":"2026-08-14T17:30:55.014097Z","submitted_at":"2019-01-15T07:21:44Z","title":"The Limitations of Adversarial Training and the Blind-Spot Attack"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 2 inbound Pith citation observations for arXiv:1901.04684."}