{"as_of":"2026-08-21T11:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4e3f9f594d49f16d96ea705fa11377c25a7ccaabc9519a0aec121b8f568cf9d1","coverage":[{"denominator":20,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T12:40:28.920086Z","state":"measured"},{"denominator":20,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":20,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.17026/citation-record","integrity":"/paper/2411.17026/integrity","json":"/paper/2411.17026/citation-record.json","paper":"/paper/2411.17026"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.106551Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"0b3931a8-eeb4-4557-88ec-f0cb4c860c7e","year":2014},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.857047Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:edd4b6aab78b574df51726256d3c6b6e7a53de62cb8a467051c63cd9a47c01bf","observation_id":"a2cdeb92-c383-4171-9252-49e52da11c62","resolution":{"observed_at":"2026-08-12T12:40:29.109520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-12T12:40:28.860668Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.860668Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:8b6289ef26c9168c0b9f2b23a8d533bb27ef8e17d7d5e41101d8878986beaeac","observation_id":"a41a7387-e6c4-473d-9256-845c606e12b3","resolution":{"observed_at":"2026-08-12T12:40:28.860668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.098577Z","title":"Adversarial examples in the physical world","venue":null,"work_id":"e63127c4-5397-49d1-9365-6a109668a7aa","year":2016},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.864622Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:a21cf9ebd615c123060917cdd3ca51871ded4a410c685ee6c53228a2afceafbf","observation_id":"0531eb9d-87a9-41da-a279-1f48f3199a31","resolution":{"observed_at":"2026-08-12T12:40:29.101401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.090565Z","title":"Unadversarial examples: Designing objects for robust vision","venue":null,"work_id":"8e7239c3-c383-48c4-981b-84a2d17b6b7d","year":2021},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.868104Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:e49a188350620a04a008b7fc8eb8ee3e1ca36e0adcf1e3be20bad788255a76ff","observation_id":"939136ba-8f8a-42c4-85d4-632bf2bc4100","resolution":{"observed_at":"2026-08-12T12:40:29.093472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.081875Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"8030d795-609e-47f8-a9c0-acdc293c41c6","year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.872145Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:e6f3a6681860cab88c360ea711ac6f69522e6d651e38e378318ba09e0a171337","observation_id":"87a14b90-f789-44aa-9c50-6c9be3b26f92","resolution":{"observed_at":"2026-08-12T12:40:29.085648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.073756Z","title":"Patchattack: A black-box texture-based attack with reinforcement learning","venue":null,"work_id":"d0f12ae5-e239-4906-beec-bebc6a40cef1","year":2020},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.875339Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:1bc23ea43a602128b855e22936b96ae6ccb52258f9c7d7fd2a57b5a29fc54c6b","observation_id":"cb4d6dc1-1e52-421c-856a-c8d761232d17","resolution":{"observed_at":"2026-08-12T12:40:29.076781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.064646Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":"8bb6bcc4-7669-4563-8d97-e190716b530e","year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.878648Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:8b383c2f0b1750f859071e8265cc36dc4b03051beb90c3bd6750c7a3edeed54e","observation_id":"6aa1df58-d0d0-4f7e-81a7-c3ade5a92aea","resolution":{"observed_at":"2026-08-12T12:40:29.068619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-16T02:01:26.676409Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-12T12:40:28.882015Z","title":"Adversarial patch","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.882015Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:6748e80756a0823e322cfb64fedba48b1acfe9b183c3061a4a943d8f353566d0","observation_id":"41263fdb-c070-4159-8b45-ce224da5ce97","resolution":{"observed_at":"2026-08-12T12:40:28.882015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-08-18T17:48:45.518915Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-12T12:40:28.885695Z","title":"Delving into transferable adversarial examples and black-box attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.885695Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:e2aac9cfc751f2a3c48c0ac3e6621a7aca088af00db62dab60191a816a0ada68","observation_id":"7196feb2-25f5-425f-991c-e4eca01eb498","resolution":{"observed_at":"2026-08-12T12:40:28.885695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02608","last_updated":"2018-03-01T12:49:11Z","snapshot_observed_at":"2026-08-14T19:56:59.616029Z","submitted_at":"2018-01-08T18:44:23Z","title":"LaVAN: Localized and Visible Adversarial Noise","version":2},"cited_work":{"arxiv_id":"1801.02608","doi":null,"metadata_source":"pith","pith_arxiv_id":"1801.02608","snapshot_observed_at":"2026-08-12T12:40:28.960032Z","title":"LaVAN: Localized and Visible Adversarial Noise","venue":"cs.CV","work_id":"536e0823-8d86-41d4-aba7-7dce3df34f30","year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.888872Z"},"links":{"cited_paper":"/paper/1801.02608","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:4f8e03de5bfca1514673297d24ff885af4d1bb07365698989a073af8ccadac20","observation_id":"23e19861-4cae-4c14-a795-18fb50a6fc8c","resolution":{"observed_at":"2026-08-12T12:40:28.965144Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.13053","last_updated":"2019-10-13T01:25:56Z","snapshot_observed_at":"2026-08-17T15:13:38.741209Z","submitted_at":"2019-04-30T05:28:22Z","title":"Search for muon-philic new light gauge boson at Belle II","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.13053","snapshot_observed_at":"2026-08-12T12:40:28.894277Z","title":"Robust patch attacks","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.894277Z"},"links":{"cited_paper":"/paper/1904.13053","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:75c8bdb8158a4d49d2c01e5b6f9c689f03aa89f20011bdd3835ef50f2afad4ae","observation_id":"cc32b585-e1b3-4b10-a778-79f2b6f95794","resolution":{"observed_at":"2026-08-12T12:40:28.894277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.055611Z","title":"Adversarial training for free! Advances in Neural Information Processing Systems (NeurIPS), 32, 2019","venue":null,"work_id":"c9f3d084-149d-414d-9bcb-f6cbad3603ed","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.897717Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:e5f9028c01073811a8f2058e4e9dd212b44d4921621e6648e3d4c0ab5eabff8f","observation_id":"b9641ad2-8e9e-4503-85ce-ff3340137537","resolution":{"observed_at":"2026-08-12T12:40:29.058977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.047497Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"773f0b41-a3b6-4fbe-af56-cfc91b94b16c","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.900520Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:aaffffb7c5c47c666fab4bd46e8fcb3a8e2f212a7e620ec6947a1729a7f6bbea","observation_id":"0ed5278d-4e73-4a9b-b23e-5e567bd052ef","resolution":{"observed_at":"2026-08-12T12:40:29.050370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.038825Z","title":"Certified robustness to adversarial examples with differential privacy","venue":null,"work_id":"8e178140-da04-4dd4-98b2-046e7bfa229e","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.903254Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:4370c2dba04e1aee3ccec7576b8e0be4f56503386a093f53b8f2dbfd51205e70","observation_id":"bb080c78-5689-41ea-9623-5329c2e3d8f2","resolution":{"observed_at":"2026-08-12T12:40:29.042030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.029851Z","title":"Provably robust deep learning via adversarially trained smoothed classifiers","venue":null,"work_id":"1349d24b-c3b4-4a8a-8f0e-bcd4a680ff79","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.905907Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:5775b79147b347f19fa236d55deebab6961d9000b2b28d829a87fdd7f49b25f5","observation_id":"c32e05a4-54aa-4d0b-b53d-d0fdb983d1ff","resolution":{"observed_at":"2026-08-12T12:40:29.033030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.021420Z","title":"Patchguard: A provably robust defense against adversarial patches via small receptive fields and masking","venue":null,"work_id":"16dc3a29-4602-46ba-8c4b-427550efd38b","year":2020},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.908618Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:1c8e3b0c143f65b9743240ee9a7d2f2f1c0def36fefed3d1caf93df943c9e7a6","observation_id":"8a6e7512-6134-4774-a59b-907c68b4ff1b","resolution":{"observed_at":"2026-08-12T12:40:29.024494Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08488","last_updated":"2022-03-29T01:34:50Z","snapshot_observed_at":"2026-08-19T18:38:54.937211Z","submitted_at":"2022-03-16T09:28:03Z","title":"Pushing the limits of raw waveform speaker recognition","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.08488","snapshot_observed_at":"2026-08-12T12:40:28.911288Z","title":"Patchcleanser: Certifiably robust defense against adversarial patches for any image classifier","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.911288Z"},"links":{"cited_paper":"/paper/2203.08488","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:977eaf4a40eb66f8c89cc32e6b707d449c03b09c613803a786d7ebf65417d0fe","observation_id":"58fd64f4-8b57-4a3d-b57a-666ccea3e1c1","resolution":{"observed_at":"2026-08-12T12:40:28.911288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.013057Z","title":"Patchzero: Defending against adversarial patch attacks by detecting and zeroing the patch","venue":null,"work_id":"2026fad2-beb2-45e1-a432-8ca2e86a03d1","year":2023},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.914273Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:4a41aad163eea2fafb47e2c9c872883799b7131c43c5b71b9f994b66d816592f","observation_id":"6371f224-1d78-412e-b4f5-6c4dda6225d0","resolution":{"observed_at":"2026-08-12T12:40:29.016156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.004727Z","title":"Benson, Aleksander Mądry, Elan Rosenfeld, and Zico Kolter","venue":null,"work_id":"979cd4c2-2544-4be2-ae86-6a9752baafd7","year":2021},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.917489Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:8d87264f2d57df0da2902c45a3a5555fe5d2c595109da26b497d9ad1c9f04bb2","observation_id":"5b40cbb9-48df-4137-ba19-0fbe1483f3e2","resolution":{"observed_at":"2026-08-12T12:40:29.007716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:28.995846Z","title":"(de) randomized smoothing for certifiable defense against patch attacks","venue":null,"work_id":"cd5e3887-5254-4f07-a5bb-c4d38723632d","year":2020},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.920086Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:b0e336091d940e2044e1f6319e051b2d3eb7922caa045c9f5f0c50d80726aced","observation_id":"b8797ae6-f805-4c99-895b-0a1d8836af60","resolution":{"observed_at":"2026-08-12T12:40:28.999089Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-18T05:25:14.419905Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design"},"reference_resolution":{"displayed":20,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":1,"verified_fuzzy":14},"total_outbound_references":20},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 20 of 20 outbound references and 0 inbound Pith citation observations for arXiv:2411.17026."}