{"as_of":"2026-08-18T00:31:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5de9dfab9fcd10cbd79e653a12e1a3339ef41a1cac3c4f067fc714b9b7698ce8","coverage":[{"denominator":67,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":67,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T15:57:06.421719Z","state":"measured"},{"denominator":69,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":69,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T20:33:16.473547Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T03:32:28.013690Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"cited_work":{"arxiv_id":"2411.15222","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.15222","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Rethinking the intermediate features in adversarial attacks: Misleading robotic models via adver- sarial distillation","venue":null,"work_id":"6793fc94-cf6c-47a7-9358-fcb4eb08dc4b","year":2024},"citing_paper":{"arxiv_id":"2502.03698","last_updated":"2026-04-24T15:18:05Z","snapshot_observed_at":"2026-08-16T21:29:51.517590Z","submitted_at":"2025-02-06T01:17:39Z","title":"How Vulnerable Is My Learned Policy? Universal Adversarial Perturbation Attacks On Modern Behavior Cloning Policies","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-23T03:31:58.944729Z"},"links":{"cited_paper":"/paper/2411.15222","citing_paper":"/paper/2502.03698"},"observation_digest":"sha256:5ae7d83c026fb2418595800cfd142946a46cf2029be3a0fef28dec24f21a1066","observation_id":"d852392c-1a71-4f30-a9ee-d6b6f11802a5","resolution":{"observed_at":"2026-05-23T03:32:28.016139Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15222","snapshot_observed_at":"2026-08-15T20:33:16.473547Z","title":"Rethinking the intermediate features in adversarial attacks: Misleading robotic models via adversarial distillation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12583","last_updated":"2025-05-30T07:28:49Z","snapshot_observed_at":"2026-08-17T16:56:07.176501Z","submitted_at":"2025-05-19T00:11:42Z","title":"A Comprehensive Survey on Physical Risk Control in the Era of Foundation Model-enabled Robotics","version":2},"reference_index":104,"source":"arxiv_source","source_observed_at":"2026-08-15T20:33:16.473547Z"},"links":{"cited_paper":"/paper/2411.15222","citing_paper":"/paper/2505.12583"},"observation_digest":"sha256:e83c8812ce1818ffb1c7ba2f517b04e1b55ac8f9496dcec173bab32f909aa40b","observation_id":"b031f665-e269-4f64-ac28-4449f049fb3e","resolution":{"observed_at":"2026-08-15T20:33:16.473547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2411.15222/citation-record","integrity":"/paper/2411.15222/integrity","json":"/paper/2411.15222/citation-record.json","paper":"/paper/2411.15222"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.555787Z","title":"Engelmore and A","venue":null,"work_id":"911137cb-3fc6-4a68-81a9-c715241683f1","year":1986},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.795434Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:b70d54838244b5819a5aca971834c00428270119472df5976b77f377df84718e","observation_id":"efced63b-3513-48e6-bdc4-2a45c7ab29a1","resolution":{"observed_at":"2026-08-12T15:57:09.579599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.517816Z","title":"Communication, Simulation, and Intelligent Agents: Implications of Personal Intelligent Machines for Medical Education,","venue":null,"work_id":"5ca56e97-99ad-449c-92c4-9cda278da8a6","year":1983},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.804054Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:bd42dfab52b886067e9005cd33a56e995805357fad980d4747d2d252bf726d7f","observation_id":"7dce21de-c185-4656-853c-30e9b832d727","resolution":{"observed_at":"2026-08-12T15:57:09.530599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.467485Z","title":"Classification Problem Solving,","venue":null,"work_id":"0b9d02a0-8db3-4302-987f-17edb5f7f2fe","year":1984},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.813289Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:7bfff67f448e06c710f2687e9f691a08ec19e39c5d8656fde4dcf2b55532b22e","observation_id":"66043b8f-2a1d-4a40-b8e9-8c4f34e1f7fb","resolution":{"observed_at":"2026-08-12T15:57:09.480126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.434335Z","title":"New ways to make microcircuits smaller,","venue":null,"work_id":"c30240e4-ec6c-4ecb-a44c-9aedfd7f9321","year":1980},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.822100Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:f437766f7bbafe9e145dab85a293469fa9ad0068004f9cea7318ec7839d0a10c","observation_id":"96cd7a88-bb5e-4417-b0cb-349f4478e8ff","resolution":{"observed_at":"2026-08-12T15:57:09.442623Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.367457Z","title":"New Ways to Make Microcircuits Smaller—Duplicate Entry,","venue":null,"work_id":"cc4c8e8e-ce5c-43d6-9e96-30659e561761","year":1980},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.835042Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:e9b787177ed3df9c4015ba71faf3466138d0a86be6d1c5822887264fba5ed703","observation_id":"bca0ff56-dc40-40d8-8e75-44f0dfa49d54","resolution":{"observed_at":"2026-08-12T15:57:09.412807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.298547Z","title":"Strategic explanations for a diagnostic consultation system,","venue":null,"work_id":"301ea123-655e-46fe-958f-07986247d59d","year":1984},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.849932Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:236dcd77aa0aa2e6c9c27212aabc900ce61279d8266e02a9d6b9770e8839e096","observation_id":"3edc5f06-09e6-49b0-b901-acc0707ed522","resolution":{"observed_at":"2026-08-12T15:57:09.305769Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.254536Z","title":"Strategic Explanations in Consultation—Duplicate,","venue":null,"work_id":"f47408b6-67e2-4ced-8c92-7a61597aa48b","year":1983},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.865899Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:1d5a03a42938145ea9c04e8813b4a25f06d724da8f6072d8290f3cd4c10e469e","observation_id":"41dce7af-5736-400c-887f-d11f549da76c","resolution":{"observed_at":"2026-08-12T15:57:09.269201Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.214608Z","title":"Poligon: A System for Parallel Problem Solving,","venue":null,"work_id":"58c0b775-a99a-4edc-919d-d9df2c589580","year":1986},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.877324Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:588c3b57667b696512e0d24720d723cbf50595113ca63c3b6408d74a21a9b7ea","observation_id":"cfc70159-49a9-4419-a889-ef3b4776040b","resolution":{"observed_at":"2026-08-12T15:57:09.219731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.176701Z","title":"Transfer of Rule-Based Expertise through a Tutorial Dialogue,","venue":null,"work_id":"ca0afa69-2d26-4a43-b162-93eaefe7fcf1","year":1979},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.891321Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:ca80c94a01c6d9b46afc85489bbae50de4a24babff43fca79e4254f5988dcb99","observation_id":"634eb83f-f011-45e8-990a-c330206b18df","resolution":{"observed_at":"2026-08-12T15:57:09.192865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.147279Z","title":"The Engineering of Qualitative Models,","venue":null,"work_id":"8db6c5d5-3106-4428-8c6d-432cdf2a20c4","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.897614Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:8cf1666ae00c2b573b1f965ac1838bf596a967e92fbc0b1b2982509932f0886e","observation_id":"ab7904a7-aa33-4297-8cf3-641304e5d900","resolution":{"observed_at":"2026-08-12T15:57:09.156680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:05.908207Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.908207Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:2d01ad0a2a7087bdd4bbe0b583a10cb0451f28c6d4006db827ed505dc8e73b07","observation_id":"dbed94ce-5f12-4c6c-8abd-017ed3c4736b","resolution":{"observed_at":"2026-08-12T15:57:05.908207Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.070089Z","title":"Pluto: The ’other’ red planet,","venue":null,"work_id":"f49bb7fd-74f6-4aa7-ad92-e403f78b9f03","year":2015},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.914758Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:b14e7ad7cfe4291cb14c0721561322728690528d0f8d6bcc8d59cb5e8932f1b0","observation_id":"f311b8ee-5b7d-46cf-8bfa-e65e9537d6af","resolution":{"observed_at":"2026-08-12T15:57:09.087116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.035571Z","title":"Vima: General robot manipula- tion with multimodal prompts,","venue":null,"work_id":"33893c0b-5f3a-42de-a6ce-b771464abda0","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.918870Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:e08ffe5ebb43f1bf32ad5ca2d76c3cca505d4b87884ae3f18d8436baa4da34b3","observation_id":"d8254027-4756-4818-a143-77434af16993","resolution":{"observed_at":"2026-08-12T15:57:09.054153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19424","last_updated":"2024-05-29T18:06:25Z","snapshot_observed_at":"2026-08-17T14:58:43.978315Z","submitted_at":"2024-05-29T18:06:25Z","title":"Diffusion Policy Attacker: Crafting Adversarial Attacks for Diffusion-based Policies","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19424","snapshot_observed_at":"2026-08-12T15:57:05.927677Z","title":"Diffusion policy attacker: Craft- ing adversarial attacks for diffusion-based policies,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.927677Z"},"links":{"cited_paper":"/paper/2405.19424","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:3aec38c927d6199de2ebccb9ffb97986f49d19a6301e0ad2591d65925db151a1","observation_id":"a151e780-f3fe-40f3-9dc9-9f4dc04bc86a","resolution":{"observed_at":"2026-08-12T15:57:05.927677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.04137","last_updated":"2024-03-14T04:36:31Z","snapshot_observed_at":"2026-08-08T17:26:38.829859Z","submitted_at":"2023-03-07T18:50:03Z","title":"Diffusion Policy: Visuomotor Policy Learning via Action Diffusion","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.04137","snapshot_observed_at":"2026-08-12T15:57:05.951223Z","title":"Diffusion policy: Visuomotor policy learning via action diffusion,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.951223Z"},"links":{"cited_paper":"/paper/2303.04137","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:012cd9633d665df22764ab122a815e43d1bfc1c96413aa0abd1e3d9a02b87124","observation_id":"ac3051a3-2d55-41a0-aec2-411f076defd8","resolution":{"observed_at":"2026-08-12T15:57:05.951223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-12T15:57:05.956494Z","title":"Universal and trans- ferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.956494Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:2ef167853cef26e9d473fb42e74d7b376d1fe09a8c42fbafb8a1cd32f73b5da6","observation_id":"549430ec-b36f-4a8f-a4ca-90dc049a6932","resolution":{"observed_at":"2026-08-12T15:57:05.956494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T15:57:05.968821Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.968821Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:091e22077b55b0a7a5a250f830e693fc40a4ef08991793411bd3ff5ff038cc3c","observation_id":"ef2f0b32-4b69-4ef6-808f-72850371a16e","resolution":{"observed_at":"2026-08-12T15:57:05.968821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:05.984172Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.984172Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:1d50254350ef9302364f9e20a5c375f1b820ddbd5e937fce8dd8b35cb6cdbfbe","observation_id":"6f98d910-91ad-4d6f-8fe9-8bf39e9b3f4e","resolution":{"observed_at":"2026-08-12T15:57:05.984172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.928607Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods,","venue":null,"work_id":"7489b3db-0322-4e51-a8b1-6de387a2f3e8","year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.998888Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:cab5557b57c8d31ca0da7062b72d2898e7b51e8a32954ec7393e2adb3d799e92","observation_id":"238d49f6-7db5-4cfb-8c91-eacf6dbd9f7d","resolution":{"observed_at":"2026-08-12T15:57:08.942959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-12T15:57:06.018769Z","title":"Jailbreaking black box large language models in twenty queries,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.018769Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:92c14b8137de19d4114c68f1fb0464856440dc6a148cff2c059d6c41f93ff27b","observation_id":"7191bc25-e2e7-485d-9d2c-114d8e6ea6d8","resolution":{"observed_at":"2026-08-12T15:57:06.018769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-16T14:04:12.947538Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-12T15:57:06.029488Z","title":"Jailbreaking lead- ing safety-aligned llms with simple adaptive attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.029488Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:2b090d1bd6b1687db97af2a1b617f2c8fc3eeee80377943c65f913d5ef6c4576","observation_id":"d7db9b0d-b3fe-4c6a-b11f-5532882e3969","resolution":{"observed_at":"2026-08-12T15:57:06.029488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.877736Z","title":"Guiding multi-step rearrangement tasks with natural language instructions,","venue":null,"work_id":"47f19b40-1b5a-4997-a0e8-bf7c4f273788","year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.044135Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:40c06bd2dcb30b8f9b1154303ff9e7dfa4a9644bd0771463acbe81977801521c","observation_id":"b5d4b2bb-e785-460f-9aff-f0c9a9fc0c70","resolution":{"observed_at":"2026-08-12T15:57:08.886268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.836123Z","title":"Language conditioned imitation learning over unstructured data,","venue":null,"work_id":"c148cb4f-5012-4692-84c5-998b34619532","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.049171Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:51fd1298a246e30f63484b1a664b73ba5691c34fa65edbbd46e53c29ebfdb19b","observation_id":"b61b8549-83f8-4d66-a1f9-3f982ee19066","resolution":{"observed_at":"2026-08-12T15:57:08.847947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.057654Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.057654Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:6c8cb8d016b3beeed9ffaafb2650579ef771781f66c9f76abb03bd4670507961","observation_id":"1aef4a1b-5faa-4c44-8817-306a621950f8","resolution":{"observed_at":"2026-08-12T15:57:06.057654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.062078Z","title":"Safe learning in robotics: From learning-based control to safe reinforcement learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.062078Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:5249cb435bbf0b42511014bfad13824e8c13d34ab6d7b0686b7da344b755c53a","observation_id":"8697bacb-de30-473f-bbc6-3ce778e73e0d","resolution":{"observed_at":"2026-08-12T15:57:06.062078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.06817","last_updated":"2023-08-11T17:45:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-12-13T18:55:15Z","title":"RT-1: Robotics Transformer for Real-World Control at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.06817","snapshot_observed_at":"2026-08-12T15:57:06.066163Z","title":"Rt-1: Robotics transformer for real-world control at scale,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.066163Z"},"links":{"cited_paper":"/paper/2212.06817","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:fe49e69fa83d12f72bbcf41c3e6a12c033dc2a8ecad45afebb83304146426253","observation_id":"ba44fa51-53a2-402a-9525-cf1cd6123942","resolution":{"observed_at":"2026-08-12T15:57:06.066163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.732284Z","title":"Adaptive dis- cretization for model-based reinforcement learning,","venue":null,"work_id":"8fef05ad-6f62-43bd-bea2-4f63b01b27c0","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.070445Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:115f014c7d7f1697d9302711b786c92eb987efa893b6398a5574a4ba76534f3a","observation_id":"04dbe44d-36f5-43ad-b31e-f4e5df8e16ef","resolution":{"observed_at":"2026-08-12T15:57:08.750523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.662060Z","title":"Action- quantized offline reinforcement learning for robotic skill learning,","venue":null,"work_id":"448c28e2-6a65-4cfc-b1ba-3cef393d408f","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.075665Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:a3b197c3d37a1172c72f57713d3d0a331d8c3c3d7ba83db394040d133e27fc59","observation_id":"035f0fab-e55d-48e0-8452-3a52247f2b14","resolution":{"observed_at":"2026-08-12T15:57:08.690909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.06680","last_updated":"2019-12-13T19:56:40Z","snapshot_observed_at":"2026-08-13T14:13:07.807518Z","submitted_at":"2019-12-13T19:56:40Z","title":"Dota 2 with Large Scale Deep Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.06680","snapshot_observed_at":"2026-08-12T15:57:06.080399Z","title":"Dota 2 with large scale deep reinforcement learning,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.080399Z"},"links":{"cited_paper":"/paper/1912.06680","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:0c83dc92c55660301f8ae42fe5a832086d294e7dcdba511bf2cace5f6ea7363f","observation_id":"f0038d4a-70f5-4e28-85ef-7f4dc7bf8ff7","resolution":{"observed_at":"2026-08-12T15:57:06.080399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.086487Z","title":"Bc-z: Zero-shot task generalization with robotic imitation learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.086487Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:96c9e998dec7a6070564956137e8891c07a2fc828b1deecc1385674b549a1316","observation_id":"3a5b17d6-8f26-431d-a0c8-6a0c3ae082b8","resolution":{"observed_at":"2026-08-12T15:57:06.086487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.093021Z","title":"Language-conditioned imitation learning for robot ma- nipulation tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.093021Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:590b01991164229a86001a25b84355993c88abc94684daea803bf9694ec5cdfb","observation_id":"c91c8e3a-c3ba-48f9-9836-a09dca9b2aca","resolution":{"observed_at":"2026-08-12T15:57:06.093021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.528435Z","title":"Deep imitation learning for complex manipulation tasks from virtual reality teleoperation,","venue":null,"work_id":"6f2b171d-87eb-4b6f-bbad-a20d38f05df1","year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.104747Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:de8ba91f1d3891d42383447534bfb0585f1ffa9838f3dcde5fc12ebe70341fff","observation_id":"405cf469-2975-43e1-9965-f231dbbfc205","resolution":{"observed_at":"2026-08-12T15:57:08.542488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.09395","last_updated":"2021-04-15T04:30:35Z","snapshot_observed_at":"2026-08-03T16:16:13.326473Z","submitted_at":"2020-04-20T15:49:35Z","title":"Energy-Based Imitation Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.09395","snapshot_observed_at":"2026-08-12T15:57:06.114320Z","title":"Energy-based imitation learning,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.114320Z"},"links":{"cited_paper":"/paper/2004.09395","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:0311ee69647807101a75622a7b255ac47d5bcca9993c3ea7362f666991bd45a8","observation_id":"7ffc604d-f751-4f09-b42f-8c2250648341","resolution":{"observed_at":"2026-08-12T15:57:06.114320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.469253Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":"5cb749a7-195c-4c4b-9322-3a125c57ecd4","year":2014},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.119657Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:8dd5add2e95a9c0e66f98f20bc2333e61036848b0e9ad4056d3b8ef3d6022b9a","observation_id":"6838c05f-2438-4282-8343-47cbf92bde3a","resolution":{"observed_at":"2026-08-12T15:57:08.487217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09154","last_updated":"2025-03-03T09:37:27Z","snapshot_observed_at":"2026-08-16T14:18:39.959590Z","submitted_at":"2024-02-14T13:13:26Z","title":"Attacking Large Language Models with Projected Gradient Descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09154","snapshot_observed_at":"2026-08-12T15:57:06.132379Z","title":"Attacking large language models with projected gradient descent,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.132379Z"},"links":{"cited_paper":"/paper/2402.09154","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:1b6c2cc3bb687ded492d9c9b917c1e38d4fb251e57a348ca18d766a2829e96fc","observation_id":"6448b82d-8a67-444c-98d4-f9be429bdc3f","resolution":{"observed_at":"2026-08-12T15:57:06.132379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-17T21:47:51.183917Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-12T15:57:06.138066Z","title":"Amplegcg: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.138066Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:b2c64de960b2ff030728adda6d2aacf63ca37a49504ac951732a3c667736435a","observation_id":"89dcb5ff-bec8-4f77-a6fc-2ed15e8d42d6","resolution":{"observed_at":"2026-08-12T15:57:06.138066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.409181Z","title":"Adversarial example does good: Preventing painting imi- tation from diffusion models via adversarial examples,","venue":null,"work_id":"82404645-f5ff-4645-8577-dbc770c280a7","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.147735Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:02a04c4ca30bc427f6b1e6a3ed85ccd3a82839fdc11fee5a10c0a6326fff913f","observation_id":"14f1593e-1b8a-4950-9616-fc3d90786d80","resolution":{"observed_at":"2026-08-12T15:57:08.425745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.342411Z","title":"On the adversarial robustness of multi- modal foundation models,","venue":null,"work_id":"e777fdc7-398b-42e0-acd7-47f2095e6035","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.154648Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:70a8c6646d7bbafb2fb826f9fb29e22783d46830e22799d72be5c8fe1503743d","observation_id":"1af02b95-0b3a-4150-8df4-95f5e2dfe909","resolution":{"observed_at":"2026-08-12T15:57:08.367312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.284769Z","title":"Attacking deep reinforcement learning with decoupled adversarial policy,","venue":null,"work_id":"30f136c0-385f-48d7-aa04-63a2d63f5f95","year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.161923Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:5cbab6362ba299daeae2e3fee5a322ea3574c2985fc71701c9820c544acd8b5a","observation_id":"d0aba1c8-607d-40ed-891f-77fc1238b44a","resolution":{"observed_at":"2026-08-12T15:57:08.300337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.235677Z","title":"Revisiting the adversarial robustness-accuracy tradeoff in robot learning,","venue":null,"work_id":"c99679bc-0e4a-41f8-a2a6-0e76e980bf04","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.169372Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:81a8569b1fffffc9b6b9f4d098fb901b99ab28a062d2528e02acd85dcc49dd59","observation_id":"e682be39-23da-4cda-9508-3f95264977e6","resolution":{"observed_at":"2026-08-12T15:57:08.248867Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.201065Z","title":"Studying adversarial attacks on behavioral cloning dynamics,","venue":null,"work_id":"58c7fffe-e61a-4a27-8aca-5aaf45b623cf","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.180096Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:95692528e16fffc21a6eb8ba479aaafb0189b58abe197618f6a7c425eb2e8c3f","observation_id":"2482316e-fd20-4e69-af67-b322652a39b4","resolution":{"observed_at":"2026-08-12T15:57:08.214634Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.125271Z","title":"Is deep learning safe for robot vision? adversarial examples against the icub humanoid,","venue":null,"work_id":"69472f38-94ad-49a6-90d2-2cf3910186bf","year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.184669Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:d4f5957a1605a99613441e24e5dc2f875b97bb053c55c5447ac478ce024f0196","observation_id":"77ab3fcf-f96e-4420-aa9c-e62556bcaef2","resolution":{"observed_at":"2026-08-12T15:57:08.169971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.043821Z","title":"Analyzing adversarial attacks against deep learning for robot navigation","venue":null,"work_id":"cbcb7c7b-9e85-4584-b3bf-3e043abad3a3","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.189707Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:c887956fd996970c9f58325efb5b809750c8c68a94dfc9796d689d23f7b064da","observation_id":"3f9b4169-1c48-4da8-806c-77959a20d28e","resolution":{"observed_at":"2026-08-12T15:57:08.054802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.196172Z","title":"Video pretraining (vpt): Learning to act by watching unlabeled online videos,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.196172Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:62966e8d266479e8c437790c6b8bf4567337f1cbf8f5328cba2c32a9bf7d2cf1","observation_id":"3b64ff93-c49b-40d0-a040-309b10d5d994","resolution":{"observed_at":"2026-08-12T15:57:06.196172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.994017Z","title":"Is bert really robust? a strong baseline for natural language attack on text classification and entailment,","venue":null,"work_id":"ae99b65f-e111-4709-98ed-ab33ef8ca7ff","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.203109Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:8a16249ba6975164e2255ee05630eab5bef0ca535813352daef0d9a5c5f524ac","observation_id":"c6310bf0-ef8e-41ac-88e7-e4fedaaf842c","resolution":{"observed_at":"2026-08-12T15:57:08.001026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.917938Z","title":"Hard prompts made easy: Gradient-based discrete optimization for prompt tuning and discovery,","venue":null,"work_id":"69c77015-961d-471c-b0c2-f1f841030760","year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.214787Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:4659d614a1f0781db75327bf553b345e033120957c76224d0db1c8b891ff9f72","observation_id":"dfc20bae-f501-43bc-a936-d39e8d24d1b4","resolution":{"observed_at":"2026-08-12T15:57:07.939626Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.888144Z","title":"Automatically auditing large language models via discrete optimization,","venue":null,"work_id":"eec3a150-6161-4c06-bae0-46b21b21dee4","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.222037Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:d38af37ad7c0c8459230d170d679e56bc8dda0cc73f0750dbbb45831718fd746","observation_id":"f22141c9-edf0-465c-9ad9-74d9d5c6c0fc","resolution":{"observed_at":"2026-08-12T15:57:07.897804Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.833272Z","title":"Character-level white-box adversarial attacks against transformers via attachable subwords substitution,","venue":null,"work_id":"bdf9223f-e938-4623-a551-b3199efde62d","year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.228450Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:f0f9d9701ad6a27cafde48ccef0eefa1bfa3ba1faa2cf22a51866b499b8dd33a","observation_id":"c5be924d-da2f-4b6a-9c97-35914711a6b5","resolution":{"observed_at":"2026-08-12T15:57:07.848410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.786034Z","title":"Generating natural language adversarial examples,","venue":null,"work_id":"139f6c4e-e91b-4b8f-9fa5-09453619ccde","year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.236780Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:8314bb7f144edcc9306e0443ad0e34faf342730ab476100586f850bdbff66426","observation_id":"432feeb3-3d1a-4baa-a45a-6f8dba8c0ef6","resolution":{"observed_at":"2026-08-12T15:57:07.803757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6550","last_updated":"2015-03-27T11:52:28Z","snapshot_observed_at":"2026-08-17T23:25:45.947983Z","submitted_at":"2014-12-19T22:40:51Z","title":"FitNets: Hints for Thin Deep Nets","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6550","snapshot_observed_at":"2026-08-12T15:57:06.246216Z","title":"Fitnets: Hints for thin deep nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.246216Z"},"links":{"cited_paper":"/paper/1412.6550","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:1fcf1c56131126d5e42313c5a2d753dc6c8d9e3bce7287163d4b370795501bab","observation_id":"f1b9edac-9088-42cb-8bfe-d10f544f0174","resolution":{"observed_at":"2026-08-12T15:57:06.246216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.739830Z","title":"Knowledge transfer via distilla- tion of activation boundaries formed by hidden neurons,","venue":null,"work_id":"2cbac1bf-2572-4b68-92d0-05db0bdc9b73","year":2019},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.257983Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:535508f56806877e54feb3ec781bc0436dfadc7dccaecd0d3e7e64a610af1434","observation_id":"ee814a0e-a034-4d2a-9fdc-e294c1d014c8","resolution":{"observed_at":"2026-08-12T15:57:07.747035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.714090Z","title":"Au- toprompt: Eliciting knowledge from language models with automatically generated prompts,","venue":null,"work_id":"ea14e475-54f1-4f8e-b103-7742c39eac83","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.269911Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:efc6d242aa6b72e12d96e4937f96ff2fe5497a33965c8d5e06a3485001380301","observation_id":"e79bf631-224b-4e54-8aa2-37b43455948c","resolution":{"observed_at":"2026-08-12T15:57:07.728255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.280054Z","title":"Hotflip: White-box adversarial examples for text classification,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.280054Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:63da3b80f640f5b2a9d263433a75239ef08051cf59c46cbb4810841f50523bbd","observation_id":"865786c5-00ef-4d30-bb8a-d74d2cc1a14d","resolution":{"observed_at":"2026-08-12T15:57:06.280054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.288699Z","title":"Calvin: A benchmark for language-conditioned policy learning for long-horizon robot manipulation tasks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.288699Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:97bb043973357ef3f207484210568d42ed8c84e475c2f94ee85ca9698ba99e06","observation_id":"d233d880-9dbf-4220-9a54-e89da518bb31","resolution":{"observed_at":"2026-08-12T15:57:06.288699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.615981Z","title":"Modularity through attention: Efficient training and transfer of language- conditioned policies for robot manipulation,","venue":null,"work_id":"6e8fca4d-14d2-4b08-b2ca-fe44bb4541b6","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.301290Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:d641d52234d3273edeb41a06b5a80c97c5d56a0c593bc183e35c1594009d17f9","observation_id":"9a71ad0e-9624-4cfe-b7a7-9263f589e585","resolution":{"observed_at":"2026-08-12T15:57:07.624152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.01975","last_updated":"2020-11-03T19:42:32Z","snapshot_observed_at":"2026-08-16T19:08:20.224319Z","submitted_at":"2020-11-03T19:42:32Z","title":"Rearrangement: A Challenge for Embodied AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.01975","snapshot_observed_at":"2026-08-12T15:57:06.314686Z","title":"Rearrangement: A challenge for embodied ai,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.314686Z"},"links":{"cited_paper":"/paper/2011.01975","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:adc70f792c8c92741233f2eda75c5b09c95180ead12934b6cd61ee414ec87e75","observation_id":"fa7f95a2-bcf4-4621-a9bd-9f38e57cf472","resolution":{"observed_at":"2026-08-12T15:57:06.314686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.594506Z","title":"Ocrtoc: A cloud-based competition and benchmark for robotic grasping and manipulation,","venue":null,"work_id":"80da92fa-00f5-4639-ac39-eaa6cd6d3241","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.324044Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:d481021833f11cda08691b4c74a118c39f8222d2b3b49c9ea631245d0d5a45d1","observation_id":"7f6b13b0-5e1d-4179-b843-9092a14e9aad","resolution":{"observed_at":"2026-08-12T15:57:07.603192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.337535Z","title":"Transporter networks: Rearranging the visual world for robotic manipulation,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.337535Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:6ebbc48418e09498f08e83e3f03db38e907bc41eb0258688e7feb154fea74ede","observation_id":"1565fc1c-bd0a-42ed-85c6-866bbaa68bbb","resolution":{"observed_at":"2026-08-12T15:57:06.337535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.347159Z","title":"Cliport: What and where pathways for robotic manipulation,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.347159Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:272b68b156f0402a1e8200b90322b1969e851f66468d227bb0be02ac5e887460","observation_id":"0ebcce89-b22c-4de4-8967-94f38414090a","resolution":{"observed_at":"2026-08-12T15:57:06.347159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.492047Z","title":"Decision transformer: Reinforcement learn- ing via sequence modeling,","venue":null,"work_id":"91a49b08-3784-4889-8669-a70aacb6d8c6","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.356170Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:efb6325f7cee04505c2352151c53548abb8f0b2a1271755f2892131678dbad2b","observation_id":"c4d3cfad-a8ef-43d0-a892-83b8f28a8f35","resolution":{"observed_at":"2026-08-12T15:57:07.497215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.365398Z","title":"Relay pol- icy learning: Solving long horizon tasks via imitation and reinforcement learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.365398Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:710245fe0844dfb4522998e1458e9171d1de1b47ad1598f6274f1de9583132b9","observation_id":"dcf52139-1e11-418a-91a8-37dfdd41b590","resolution":{"observed_at":"2026-08-12T15:57:06.365398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.418442Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":"f7372f47-cf1c-4d36-a6da-b649c7c63c30","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.374587Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:f76418754341243f3499f2c23dfd8377bbc73edc3f9a2d59437ced0ca1074f6d","observation_id":"a9b7839f-ce39-47c2-b99b-1f2b574bb678","resolution":{"observed_at":"2026-08-12T15:57:07.434788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.379530Z","title":"Mask r-cnn,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.379530Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:983db269c19b52f646ef1039bce107da7f2f73f059ef2d07ba04bd987b8ae4b1","observation_id":"f1779177-a9df-4e5e-bdd9-78e9718357b5","resolution":{"observed_at":"2026-08-12T15:57:06.379530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.390979Z","title":"Exploring the limits of transfer learning with a unified text-to-text transformer,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.390979Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:69f1c707ffe04c5b81f28ad92eafe04dec8218b9beabd6bea9ef7e876f0d20ae","observation_id":"95507752-1cef-4e9c-8427-cc2154deb603","resolution":{"observed_at":"2026-08-12T15:57:06.390979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01369","last_updated":"2025-01-03T04:36:11Z","snapshot_observed_at":"2026-08-16T14:22:09.634338Z","submitted_at":"2024-02-02T12:39:49Z","title":"On the Multi-modal Vulnerability of Diffusion Models","version":2},"cited_work":{"arxiv_id":"2402.01369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.01369","snapshot_observed_at":"2026-08-12T15:57:06.613034Z","title":"On the Multi-modal Vulnerability of Diffusion Models","venue":"cs.LG","work_id":"6b690928-62ef-4497-96ac-fc075018bfeb","year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.396776Z"},"links":{"cited_paper":"/paper/2402.01369","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:ce58cecd188eafbc308857b528498bf7aef4b432c4cc0b44f7b643c7262ca677","observation_id":"99273b85-92cf-42f8-9e8c-c58de0fc5c7a","resolution":{"observed_at":"2026-08-12T15:57:06.626743Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-16T14:11:47.181003Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-12T15:57:06.405214Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.405214Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:599a37693b79bbfaecdc9bae20ef73532106a1ba1233105001389e8df25d31a5","observation_id":"aab7c635-b76f-4c7f-b9e0-c16a0745a34b","resolution":{"observed_at":"2026-08-12T15:57:06.405214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.322443Z","title":"Enhancing adversarial example transferability with an intermediate level attack,","venue":null,"work_id":"54be3468-3402-4883-9a21-a68658db7c9b","year":2019},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.421719Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:65cbd58c1e93fe5c24bf646527f4ab94a1bd344ce90aaede55ccaf901ac4a9dc","observation_id":"079d90c1-9c6b-4048-8bc3-d48f9ca0e4fc","resolution":{"observed_at":"2026-08-12T15:57:07.330861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-14T11:31:32.382799Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation"},"reference_resolution":{"displayed":67,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":28,"verified_exact":0,"verified_fuzzy":38},"total_outbound_references":67},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 67 of 67 outbound references and 2 inbound Pith citation observations for arXiv:2411.15222."}