{"as_of":"2026-08-19T13:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1f040df26b2063e2e2f886920c883f7c3b5807d8529d8fedd162fd2cc17c3494","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":39,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T10:37:25.805944Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":116,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2109.13916","last_updated":"2022-06-16T21:12:42Z","snapshot_observed_at":"2026-07-06T11:52:19.105210Z","submitted_at":"2021-09-28T17:59:36Z","title":"Unsolved Problems in ML Safety","version":5},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-16T20:45:27.421909Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2109.13916"},"observation_digest":"sha256:29709f0551dd38a20b506d24dfabbb42bf80e9f4eca89d044c87b2ae0749ad31","observation_id":"41fe5854-3659-4944-9632-a7a5a8c0fb75","resolution":{"observed_at":"2026-05-16T20:45:27.578375Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2309.10348","last_updated":"2023-09-19T06:17:18Z","snapshot_observed_at":"2026-07-31T06:52:42.653031Z","submitted_at":"2023-09-19T06:17:18Z","title":"Language Guided Adversarial Purification","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-24T06:48:54.222879Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2309.10348"},"observation_digest":"sha256:06047439913f594d50fdd23236675aeda4ca04c2a311f747888c100c3f2d4a50","observation_id":"3eeffd4e-6a49-4f00-bfc4-678661658901","resolution":{"observed_at":"2026-05-24T06:49:02.031154Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-08-17T15:25:03.596568Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-14T17:11:00.639293Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2310.03684"},"observation_digest":"sha256:2e8857d879c081bdccdea87c0b930196f1bbec00497df7a616ab482574f7b44f","observation_id":"06abe48c-bd9b-4ad9-8e05-be2212aad3c2","resolution":{"observed_at":"2026-05-14T17:11:00.836163Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-12T13:32:43.534316Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-16T19:45:47.371973Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.534316Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:afbf4c17791afdc8d46e726c9a9eabc4b4a6f333c6271e5f6879fdabea0055fa","observation_id":"74a94fbc-cd4e-4400-b2e5-5f70f7b654db","resolution":{"observed_at":"2026-08-12T13:32:43.534316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-12T05:47:21.011738Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2411.19853","last_updated":"2025-03-13T13:19:33Z","snapshot_observed_at":"2026-08-12T05:43:10.558596Z","submitted_at":"2024-11-29T17:09:59Z","title":"Towards Class-wise Robustness Analysis","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T05:47:21.011738Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2411.19853"},"observation_digest":"sha256:3aa23a52a08a4a32753387b1f812ce8e79da0a3e291b7d3ff6cef33a10f44dc6","observation_id":"b582f5f0-8d4b-4c50-8011-dda6da7e4fcf","resolution":{"observed_at":"2026-08-12T05:47:21.011738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-10T22:45:39.312130Z","title":"Robustbench: a standardized adversarial robustness benchmark,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.00818","last_updated":"2025-01-01T12:19:17Z","snapshot_observed_at":"2026-08-17T10:09:02.632580Z","submitted_at":"2025-01-01T12:19:17Z","title":"SPARNet: Continual Test-Time Adaptation via Sample Partitioning Strategy and Anti-Forgetting Regularization","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T22:45:39.312130Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2501.00818"},"observation_digest":"sha256:7df55c56335c4f01daf5df35cf3e960390cf6721b8fa0aa97a03bf998108f1ef","observation_id":"04ebe2d0-1d8f-49e5-84ce-c5dcd82fc9e0","resolution":{"observed_at":"2026-08-10T22:45:39.312130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-10T04:36:43.819611Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.17755","last_updated":"2025-03-05T16:20:03Z","snapshot_observed_at":"2026-08-16T22:27:37.712481Z","submitted_at":"2025-01-29T16:48:13Z","title":"AI Governance through Markets","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T04:36:43.819611Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2501.17755"},"observation_digest":"sha256:3b22486921a811bddd613e2cd0df5275a1e91125551d9774f5e0f2c9c68b9959","observation_id":"cf925b89-2afb-4ce0-aea3-bff275c56171","resolution":{"observed_at":"2026-08-10T04:36:43.819611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-10T13:39:29.281974Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-15T23:33:12.790137Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.281974Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:4b924750b58ef3d1c28ee7a12ab19ff41add7d9925e6f1357a9112628651b500","observation_id":"78baaa0b-f1c3-41d6-b9e5-daff0bc48d52","resolution":{"observed_at":"2026-08-10T13:39:29.281974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-09T17:40:54.997774Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2502.00834","last_updated":"2025-02-02T16:15:10Z","snapshot_observed_at":"2026-08-14T00:06:12.714886Z","submitted_at":"2025-02-02T16:15:10Z","title":"Boosting Adversarial Robustness and Generalization with Structural Prior","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-09T17:40:54.997774Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2502.00834"},"observation_digest":"sha256:ce57f1cccd65534ece70e74c996025b26e3c75e10790681d41c9ddbc2833a655","observation_id":"7ff5a9c0-2136-411a-acb4-4ffc1782b08c","resolution":{"observed_at":"2026-08-09T17:40:54.997774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-08T23:07:31.211913Z","title":"Croce, F","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.04248","last_updated":"2025-02-06T17:38:41Z","snapshot_observed_at":"2026-08-18T00:49:29.435092Z","submitted_at":"2025-02-06T17:38:41Z","title":"Adapting to Evolving Adversaries with Regularized Continual Robust Training","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-08T23:07:31.211913Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2502.04248"},"observation_digest":"sha256:b61a3ce9ed67b088278827d19ae7e0ffcacc564f488c9e13ee30bdc0e0df78a5","observation_id":"475c79f6-5f24-4a9a-9b33-9d4f5b94e030","resolution":{"observed_at":"2026-08-08T23:07:31.211913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-07T23:35:42.658408Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.09670","last_updated":"2025-02-12T22:55:43Z","snapshot_observed_at":"2026-08-14T13:00:35.954303Z","submitted_at":"2025-02-12T22:55:43Z","title":"The Science of Evaluating Foundation Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T23:35:42.658408Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2502.09670"},"observation_digest":"sha256:6fd322a9fe92c0e253df07e724b267af2d9e1c9a7699c96dcd6ae97f757e0ec0","observation_id":"1596f007-4aa1-4066-9a88-8c96bc8e9316","resolution":{"observed_at":"2026-08-07T23:35:42.658408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2503.02574","last_updated":"2026-05-18T17:54:05Z","snapshot_observed_at":"2026-08-18T01:04:38.795907Z","submitted_at":"2025-03-04T12:55:07Z","title":"LLM-Safety Evaluations Lack Robustness","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-23T01:26:45.402983Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2503.02574"},"observation_digest":"sha256:bd284b0b097c190eaefe0a6efbe867e51c1dc9ce21516dae164c0e364d72850a","observation_id":"e36b9acd-94d9-4ba4-b31b-9215b7c91db8","resolution":{"observed_at":"2026-05-23T01:27:21.369647Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-16T10:37:25.805944Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2504.17684","last_updated":"2025-04-24T15:54:56Z","snapshot_observed_at":"2026-08-18T06:50:33.683296Z","submitted_at":"2025-04-24T15:54:56Z","title":"Evaluating the Vulnerability of ML-Based Ethereum Phishing Detectors to Single-Feature Adversarial Perturbations","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T10:37:25.805944Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2504.17684"},"observation_digest":"sha256:8a0c6810063cf3ddd4db574d1cff87fad5cf54c1473f8082640906952da7a316","observation_id":"17cc5e5c-7981-4612-ab13-76f4e549761f","resolution":{"observed_at":"2026-08-16T10:37:25.805944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2505.19607","last_updated":"2026-05-02T04:35:15Z","snapshot_observed_at":"2026-08-12T18:15:29.249614Z","submitted_at":"2025-05-26T07:21:32Z","title":"Contrastive Residual Energy Test-time Adaptation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-19T12:44:47.083086Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2505.19607"},"observation_digest":"sha256:d78fec20116e07c3a015143be9f24c50ff789df0c95ce7bf182b2a2c52c71e12","observation_id":"d2accc3c-5ebb-447c-8d4e-1e1c4d0280c3","resolution":{"observed_at":"2026-05-19T12:47:17.886500Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-07T13:05:47.796644Z","title":"Robustbench: a standardized adversarial robustness benchmark.arXiv preprint arXiv:2010.09670,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2026-08-11T07:13:12Z","snapshot_observed_at":"2026-08-14T23:09:02.474907Z","submitted_at":"2025-05-28T20:19:21Z","title":"Demystifying Adversarial Robustness in Diffusion Models: Compression, Randomness, and Geometry","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:47.796644Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:7ef76ddee091d65156e7f9fb914cc21b1d14123f1158f7d467e80ce6fd6615ab","observation_id":"696eda56-d550-4301-8ca4-50cfc21805d7","resolution":{"observed_at":"2026-08-07T13:05:47.796644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-07T12:10:50.786167Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.00496","last_updated":"2025-05-31T10:27:54Z","snapshot_observed_at":"2026-08-14T01:38:47.676502Z","submitted_at":"2025-05-31T10:27:54Z","title":"Monitoring Robustness and Individual Fairness","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:10:50.786167Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2506.00496"},"observation_digest":"sha256:1f052e02ca1d4520044aba8f229280b4fba9ba7ce3652a3206d8f312ea71831d","observation_id":"0f2c42a2-a461-4fce-b93b-311dcca73630","resolution":{"observed_at":"2026-08-07T12:10:50.786167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-07T12:11:19.149474Z","title":"Croce, M","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-16T08:19:36.098867Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:19.149474Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:7feacbe44729e9bbf5b2d829e2a8590d23c4f8f5eac301a113aaf8790768f31c","observation_id":"7de184a8-e368-47da-b86b-4a2b1d77f38c","resolution":{"observed_at":"2026-08-07T12:11:19.149474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-06T21:41:35.770339Z","title":"arXiv preprint arXiv:2010.09670 (2020)","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23663","last_updated":"2025-06-30T09:39:33Z","snapshot_observed_at":"2026-08-18T19:46:52.000632Z","submitted_at":"2025-06-30T09:39:33Z","title":"On the Domain Robustness of Contrastive Vision-Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:41:35.770339Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2506.23663"},"observation_digest":"sha256:e473966b0223ed239809a992a8bc95da0e5b72560ab6c8ca442fd93f8decc8b9","observation_id":"9f089809-40f0-4e8d-a037-6d1656a8b0f7","resolution":{"observed_at":"2026-08-06T21:41:35.770339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2507.01955","last_updated":"2026-05-01T00:57:16Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-02T17:59:07Z","title":"How Well Does GPT-4o Understand Vision? Evaluating Multimodal Foundation Models on Standard Computer Vision Tasks","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-19T05:55:09.188048Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2507.01955"},"observation_digest":"sha256:ffb82f36b5eafe1f319dc570cac2c8f3e7d1916ef1d4a58071649644226b3616","observation_id":"0d4ad231-3973-4dce-ad72-6f8e6e600c80","resolution":{"observed_at":"2026-05-19T05:57:08.095871Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-06T16:16:29.450726Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2507.14492","last_updated":"2025-07-19T05:33:57Z","snapshot_observed_at":"2026-08-08T14:51:04.371014Z","submitted_at":"2025-07-19T05:33:57Z","title":"Glitches in Decision Tree Ensemble Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-06T16:16:29.450726Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2507.14492"},"observation_digest":"sha256:f59cfd3d761691d099fd635491b42398d34f35ec2fa83a3d85c92b9764868345","observation_id":"63dab7ad-e1f3-4f4e-8db9-2d2d45c0fab5","resolution":{"observed_at":"2026-08-06T16:16:29.450726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-06T11:49:51.264520Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2507.22428","last_updated":"2025-07-30T07:14:59Z","snapshot_observed_at":"2026-08-18T01:23:34.813009Z","submitted_at":"2025-07-30T07:14:59Z","title":"Theoretical Analysis of Relative Errors in Gradient Computations for Adversarial Attacks with CE Loss","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T11:49:51.264520Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2507.22428"},"observation_digest":"sha256:576f7b2afbe1b5de63ce9f75480300a72d038ce0f69b7c308322cdffb6a9a843","observation_id":"9eb22942-b5af-43d3-b5a6-0ebc5a82022b","resolution":{"observed_at":"2026-08-06T11:49:51.264520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-15T17:22:09.122624Z","title":"Croce, M","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.12643","last_updated":"2025-08-18T06:08:56Z","snapshot_observed_at":"2026-08-19T09:02:17.893686Z","submitted_at":"2025-08-18T06:08:56Z","title":"Learn Faster and Remember More: Balancing Exploration and Exploitation for Continual Test-time Adaptation","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-15T17:22:09.122624Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2508.12643"},"observation_digest":"sha256:436693217d0a4b4902b880c597d8225f6e134f6289257fd63b0e7130cd8aac9e","observation_id":"66bb95d7-fc32-4717-a5b0-97bcd3739a6e","resolution":{"observed_at":"2026-08-15T17:22:09.122624Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-15T16:48:59.853590Z","title":"arXiv preprint arXiv:2010.09670 (2020)","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.20516","last_updated":"2025-08-28T07:57:54Z","snapshot_observed_at":"2026-08-16T09:36:47.641352Z","submitted_at":"2025-08-28T07:57:54Z","title":"DCFS: Continual Test-Time Adaptation via Dual Consistency of Feature and Sample","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T16:48:59.853590Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2508.20516"},"observation_digest":"sha256:585be2cc2597615831fd333c4fff8e868c220ef1b89cc006f9b3b9b258c10e61","observation_id":"661f94b1-f2bd-4963-bb0a-3f6b00907f58","resolution":{"observed_at":"2026-08-15T16:48:59.853590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-02T23:52:40.329981Z","title":"emnlp-main.844/","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-09T09:16:47.762774Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":844,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.329981Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:61c3d16a62b9a2bc71540e8aa134bdd51e33b401150dfd603c8abf50af8fc9b9","observation_id":"8c76d597-7b76-4d26-ae18-5bad78f5d46c","resolution":{"observed_at":"2026-08-02T23:52:40.329981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.06954","last_updated":"2026-04-08T11:15:45Z","snapshot_observed_at":"2026-08-12T23:28:39.939306Z","submitted_at":"2026-04-08T11:15:45Z","title":"Compression as an Adversarial Amplifier Through Decision Space Reduction","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T18:12:45.350958Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.06954"},"observation_digest":"sha256:cfc410dd18caedcee771869bd4ef933eb7f60d05c60da7f54efede3e2404eab3","observation_id":"9a42c8e5-74e7-4dac-979f-0efc016d0f15","resolution":{"observed_at":"2026-05-11T05:20:57.730572Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.08404","last_updated":"2026-04-20T18:01:41Z","snapshot_observed_at":"2026-08-15T00:35:58.068836Z","submitted_at":"2026-04-09T16:02:07Z","title":"Adversarial Label Invariant Graph Data Augmentations for Out-of-Distribution Generalization","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T17:00:51.046061Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.08404"},"observation_digest":"sha256:ab1bde1172a7bfa129223fc947f0bc59312542ed0072de9d9f98d9d1b05cb478","observation_id":"6d1d6b2e-1a12-4eee-adba-82ce6c24af38","resolution":{"observed_at":"2026-05-11T07:41:01.640268Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.11590","last_updated":"2026-04-13T15:05:21Z","snapshot_observed_at":"2026-08-14T09:07:57.772729Z","submitted_at":"2026-04-13T15:05:21Z","title":"Learning Robustness at Test-Time from a Non-Robust Teacher","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T15:37:47.605547Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.11590"},"observation_digest":"sha256:e882ccb2c3c6df4a81e2cc557f355c4e876559718411bf36eacd7b5ef22e7242","observation_id":"29d9badd-04f7-4783-96cd-7303ad32f154","resolution":{"observed_at":"2026-05-11T10:11:01.138711Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.16532","last_updated":"2026-04-16T18:34:57Z","snapshot_observed_at":"2026-08-17T10:55:37.789931Z","submitted_at":"2026-04-16T18:34:57Z","title":"Beyond Attack Success Rate: A Multi-Metric Evaluation of Adversarial Transferability in Medical Imaging Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-10T11:02:39.587803Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.16532"},"observation_digest":"sha256:c317b028a654f8507938a5436b9b4a25a8b2cb23fa66844685f7aac0868eefb9","observation_id":"17b27464-2b81-456d-aaeb-8b87d73c75bf","resolution":{"observed_at":"2026-05-10T11:05:08.741111Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.24661","last_updated":"2026-05-08T02:03:01Z","snapshot_observed_at":"2026-08-13T04:16:14.997473Z","submitted_at":"2026-04-27T16:24:40Z","title":"Agent-Centric Observation Adaptation for Robust Visual Control under Dynamic Perturbations","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T02:53:39.060764Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.24661"},"observation_digest":"sha256:193e1ce25ba38b79f76059f15a2a390d1a4854a1a17b6bae9454cf0decdfc4cd","observation_id":"36246950-974b-4a9c-b44b-eb8dcddef312","resolution":{"observed_at":"2026-05-11T22:21:49.775695Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.24661","last_updated":"2026-05-08T02:03:01Z","snapshot_observed_at":"2026-08-13T04:16:14.997473Z","submitted_at":"2026-04-27T16:24:40Z","title":"Agent-Centric Observation Adaptation for Robust Visual Control under Dynamic Perturbations","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-11T00:48:43.992238Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.24661"},"observation_digest":"sha256:8057d49693bc1de825e9060e393f7b1bc2a67a66f974166da86409e9fe331d4c","observation_id":"5bf49dc7-9ce0-4e08-9cc4-03dca570b9f2","resolution":{"observed_at":"2026-05-11T00:50:49.859450Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2605.02109","last_updated":"2026-05-04T00:08:05Z","snapshot_observed_at":"2026-08-12T14:56:08.816925Z","submitted_at":"2026-05-04T00:08:05Z","title":"Detecting Adversarial Data via Provable Adversarial Noise Amplification","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-09T17:08:02.038221Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2605.02109"},"observation_digest":"sha256:8f516c2e68c0bb561280d7b666b3c51b273838c05c926fe3a06db412047a99fb","observation_id":"51c0e61f-8208-4b7d-b001-9ee71946dd63","resolution":{"observed_at":"2026-05-11T16:26:06.039115Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2605.09075","last_updated":"2026-07-29T05:15:07Z","snapshot_observed_at":"2026-08-08T14:26:57.936033Z","submitted_at":"2026-05-09T17:37:06Z","title":"Optimality of Sub-network Laplace Approximations: New Results and Methods","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-05-12T02:25:28.186490Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2605.09075"},"observation_digest":"sha256:66726ebe993a2a9fd54726def715c526efae31de0f3e5396b54dc936590f5e1f","observation_id":"f42ba1c9-f7cf-41cf-8efa-1e4467afbd22","resolution":{"observed_at":"2026-05-12T07:37:16.357130Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.01746","last_updated":"2026-06-01T06:09:19Z","snapshot_observed_at":"2026-08-09T11:39:42.650659Z","submitted_at":"2026-06-01T06:09:19Z","title":"Sensitivity as a Double-Edged Sword: A Trade-off Between Discriminability and Adversarial Robustness","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T15:47:32.681589Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.01746"},"observation_digest":"sha256:3b69339440786dfd7ebb59d602a31c0d88eeae09548c2d7a26301effd3148952","observation_id":"b4ff976b-192c-40c3-a385-a13ac790f130","resolution":{"observed_at":"2026-07-01T22:06:16.368482Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.02267","last_updated":"2026-06-01T13:53:39Z","snapshot_observed_at":"2026-08-12T23:29:24.900597Z","submitted_at":"2026-06-01T13:53:39Z","title":"A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T15:23:26.461740Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.02267"},"observation_digest":"sha256:76544ebfb91402b3c0457ee700ed85d4354b03880cdbdf56b95cd19f4d5630b2","observation_id":"8aec5943-683b-4844-a2a6-8034b9a48061","resolution":{"observed_at":"2026-07-01T22:26:17.777832Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.09881","last_updated":"2026-06-03T05:44:29Z","snapshot_observed_at":"2026-08-12T12:37:31.669797Z","submitted_at":"2026-06-03T05:44:29Z","title":"Toward Calibrated, Fair, and accurate Deepfake Detection","version":1},"reference_index":277,"source":"arxiv_source","source_observed_at":"2026-06-28T07:05:18.026601Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.09881"},"observation_digest":"sha256:bb938d9341ca03eaf7b26ec2c7c8bf88c50a63e62da600d48180c5c90244511d","observation_id":"8889156c-edfe-43ca-b355-3d4c593012ab","resolution":{"observed_at":"2026-06-28T07:11:45.356052Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-12T14:06:47.857777Z","title":"Robustbench: a standardized adversarial robustness benchmark,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2606.14427","last_updated":"2026-06-12T13:05:34Z","snapshot_observed_at":"2026-08-15T23:46:25.330815Z","submitted_at":"2026-06-12T13:05:34Z","title":"Breaking TinyML: Why Quantized Neural Networks Need Domain-Specific Security Analysis","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-12T14:06:47.857777Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.14427"},"observation_digest":"sha256:402db418265c573e4c964c19cbaf72888574443b72fda433d3707cdf9fbd66cd","observation_id":"b6f084ff-dac2-4ac7-8c52-5cc71819e445","resolution":{"observed_at":"2026-07-12T14:06:47.857777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":"arXiv (Cornell University)","work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.29867","last_updated":"2026-06-29T07:03:45Z","snapshot_observed_at":"2026-07-07T00:03:45.783349Z","submitted_at":"2026-06-29T07:03:45Z","title":"RoAd-RL: A Unified Library and Benchmark for Robust Adversarial Reinforcement Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-30T07:01:04.860047Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.29867"},"observation_digest":"sha256:cbb22e0d8bffb1dbc3a2efc881dc04c8447c878d55544da82acb0ab6b955f901","observation_id":"30d7d64a-3568-430d-a612-fa09d189d1b0","resolution":{"observed_at":"2026-06-30T07:04:21.098034Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-01T12:50:14.253730Z","title":"Robustbench: a standardized adversarial robustness benchmark,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.19318","last_updated":"2026-07-21T17:38:52Z","snapshot_observed_at":"2026-08-14T05:23:29.469930Z","submitted_at":"2026-07-21T17:38:52Z","title":"SoK: Adversarial Robustness of the Variational Quantum Eigensolver via Red-Teaming","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T12:50:14.253730Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2607.19318"},"observation_digest":"sha256:efcb9552daab5d52d51d7611de23f134dadf221d4aa3501c0c53ff608f6f1e7b","observation_id":"bd659a74-5ea1-4918-9be2-ce6a6da2b041","resolution":{"observed_at":"2026-08-01T12:50:14.253730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-14T04:18:10.819267Z","title":"URL:https://arxiv.org/abs/2010.09670, arXiv:2010.09670","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2608.10203","last_updated":"2026-08-10T20:18:47Z","snapshot_observed_at":"2026-08-18T07:50:19.464360Z","submitted_at":"2026-08-10T20:18:47Z","title":"A Convolutional Layer Activation Dimensionality Reduction for Out-of-Distribution and Adversarial Attack Detection Methods","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-14T04:18:10.819267Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2608.10203"},"observation_digest":"sha256:6cf588d019785c93dd2c4239f589d3a8111689679ce78f328250513a228e8366","observation_id":"3d76b5ce-9238-463f-9fbd-b518eda613d7","resolution":{"observed_at":"2026-08-14T04:18:10.819267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2010.09670/citation-record","integrity":"/paper/2010.09670/integrity","json":"/paper/2010.09670/citation-record.json","paper":"/paper/2010.09670"},"outbound":[],"paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T19:12:22.612814Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 39 inbound Pith citation observations for arXiv:2010.09670."}