{"as_of":"2026-08-13T05:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:32cea46bb1ddb1d25a8f24f04671a63c53fa798ba48b3ac2d2af452bfc62c6e3","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T04:43:02.242563Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.01154/citation-record","integrity":"/paper/2412.01154/integrity","json":"/paper/2412.01154/citation-record.json","paper":"/paper/2412.01154"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.103304Z","title":"Adversarial example detection for DNN models: a review and experimental comparison","venue":null,"work_id":"ba215a7d-4ee5-44a7-bf3a-c842fe207546","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:01.990951Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:cacaf9cc08d290f11227c50cf96d1d80dba13651b6c0718ee50240b68787eea4","observation_id":"040d2938-aebc-4ec7-9cda-497e3044c7a0","resolution":{"observed_at":"2026-08-12T04:43:03.108241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.088771Z","title":null,"venue":null,"work_id":"88d929f9-973a-4b08-a85c-4fed82c3d119","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:01.996356Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:b42f98e442f2f3945b8c962d0ff72f8e27ed2a9729536dcceb536af0969b18a1","observation_id":"1318ce22-3cb0-419b-81a3-08acf58c2ff2","resolution":{"observed_at":"2026-08-12T04:43:03.093499Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.073488Z","title":"Robust- bench: a standardized adversarial robustness benchmark","venue":null,"work_id":"c67d5040-79b3-4a51-8ffd-6d4ee9ca1123","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.001186Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:768847ca9639d265fadd1fe1b8cb04511b0c940288a8efe10e021dc264ad5d13","observation_id":"22dab27c-adab-40e1-aa6c-8588561b102b","resolution":{"observed_at":"2026-08-12T04:43:03.078166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.058813Z","title":"Evaluat- ing the adversarial robustness of adaptive test-time defenses","venue":null,"work_id":"0c0cb21d-b2f4-4fbc-84d1-d0a309c889cd","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.006007Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:52a39031e91e55067f0bba8736e65252684ddb7a5476d553c72339c734c4f0f8","observation_id":"46d660f6-1e6d-4427-afbe-611f704830d9","resolution":{"observed_at":"2026-08-12T04:43:03.063184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.044253Z","title":"ImageNet: A large-scale hierarchical im- age database","venue":null,"work_id":"552703f5-3b6c-4392-96c2-3b8d1a5f5a2a","year":2009},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.011041Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:5b8162d397f239b6a8d9f1e35552ebffadb708a1cb3a0809d3f5dff0f256e220","observation_id":"15efa351-fa2a-4a76-b6a1-3cf8a5d56c00","resolution":{"observed_at":"2026-08-12T04:43:03.048906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.029061Z","title":"Marsden, and Bin Yang","venue":null,"work_id":"753c4702-28f7-40ed-a12c-ad5ffd3c55ef","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.016107Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:51d3446e42c5edfa1596e8d49dd2f99e86a601f3b2c5e90559cc7485116bb899","observation_id":"1568b3f8-b9a0-435d-b22f-3ed3c827a6c8","resolution":{"observed_at":"2026-08-12T04:43:03.033830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.012804Z","title":"Unsupervised do- main adaptation by backpropagation","venue":null,"work_id":"d3e542ea-dabd-40a4-8ab0-6f14c3d499be","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.021155Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:5fbd4159e05a9416df9da9fc76d8b5e2a9652935e361366fe8193e28bff924c9","observation_id":"8fec830b-814e-4c75-8bd2-e08e355e4d4f","resolution":{"observed_at":"2026-08-12T04:43:03.018164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.997528Z","title":"NOTE: Robust continual test-time adaptation against temporal correlation","venue":null,"work_id":"9f15fef2-1ba9-48ed-a837-186e9fc00564","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.026390Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:60a30af160fe40cdd37e9f107e433bfd44d385b812dea3944b3f1353252e5e16","observation_id":"0a193986-55aa-4f0f-af02-36538d7f54c7","resolution":{"observed_at":"2026-08-12T04:43:03.002825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.982641Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"ebc4be27-f21c-47ab-b65e-e54a4c4fcc71","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.030989Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:179ed50adb9feb93f30011f9bf305bfa2eca8862f4eaa2ae04b6f3b0822e6354","observation_id":"e22bf1bd-976a-4f7e-9702-a40fc2cfbd81","resolution":{"observed_at":"2026-08-12T04:43:02.987672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.968350Z","title":"Improving ro- bustness using generated data","venue":null,"work_id":"ddc7b7cf-c9e8-41cf-83e7-99a16fec53f1","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.035699Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:51f97c28e06571c44245e046c42eb58abe141a075a84dcc520a240ab9ce98111","observation_id":"6b82ce89-d750-4253-81bd-aed55cbf006d","resolution":{"observed_at":"2026-08-12T04:43:02.972965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.954078Z","title":"Semi-supervised learning by entropy minimization","venue":null,"work_id":"2797b2ba-777d-44fb-ba6f-e4be1d34459e","year":2004},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.040496Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:defe8124174d0c8fa17a29c2d894dff4f11e61b7d5b7283097ef5e8dc157cdc6","observation_id":"f60fef33-c3b1-4d7e-bbb1-b826aa76cb36","resolution":{"observed_at":"2026-08-12T04:43:02.958672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.938922Z","title":"Simple black-box adver- sarial attacks","venue":null,"work_id":"73d6889c-8a94-4261-b1e2-3d65e6fb9399","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.045246Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:34c3c8300ad64dc666ae29a05b7741560d60f8862a4f012b5b9ccff00eafba49","observation_id":"a60024cd-d703-4efb-a20c-a4a6af58d5e8","resolution":{"observed_at":"2026-08-12T04:43:02.943522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1512.03385","last_updated":"2015-12-10T19:51:55Z","snapshot_observed_at":"2026-07-06T04:39:28.429064Z","submitted_at":"2015-12-10T19:51:55Z","title":"Deep Residual Learning for Image Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1512.03385","snapshot_observed_at":"2026-08-12T04:43:02.049844Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.049844Z"},"links":{"cited_paper":"/paper/1512.03385","citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:13e512dc5dcbe4b24b35e9cdd37a5c0c2ab2c84f45a3b79a2bc028a68738b0b7","observation_id":"fbd930e9-cf6d-40dd-870b-0b6e585b781a","resolution":{"observed_at":"2026-08-12T04:43:02.049844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.923816Z","title":"Benchmarking neu- ral network robustness to common corruptions and perturba- tions","venue":null,"work_id":"7189dd8e-6fbb-4950-bf2f-967173929214","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.054747Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:e3a2f026c66870f444e04e24f4c498b892f3e54b884235fc290aed28daa526db","observation_id":"ffe0fecd-611e-4d18-aed3-6d2936d0c60b","resolution":{"observed_at":"2026-08-12T04:43:02.929225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.908740Z","title":"Cubuk, Barret Zoph, Justin Gilmer, and Balaji Lakshminarayanan","venue":null,"work_id":"c1566bc8-cb54-4ba6-be40-50b89afc6278","year":2020},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.059413Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:0f8bf01ccd2d840951dd91fbdbbf7eaef65aaae1fa2aff7e7742f8fb718fa80c","observation_id":"ad1522b7-55e0-4560-827e-f765552d2d0f","resolution":{"observed_at":"2026-08-12T04:43:02.913285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.894032Z","title":"The many faces of robustness: A critical analysis of out-of-distribution generalization","venue":null,"work_id":"98f04974-8059-4c9c-ad78-71955308813e","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.064009Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:301d2b8bea6eba65e118888c894746bb4b9eea581f343021f0e865b87eb09151","observation_id":"27c2b910-a986-432c-a0db-47dad99e6146","resolution":{"observed_at":"2026-08-12T04:43:02.898693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.880624Z","title":null,"venue":null,"work_id":"0d2c16a6-cab9-4866-b812-da8bb9c37f74","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.068532Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:b1131126127df64f0ed92d87cd9127ac0718eb2a7d896dd69d9add701571c50f","observation_id":"2612c76d-29ac-4c6a-bad5-cd41b4f763dc","resolution":{"observed_at":"2026-08-12T04:43:02.884610Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.866850Z","title":null,"venue":null,"work_id":"953f59f2-12ca-41f2-b0a3-ace9c8b4d4f5","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.072459Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:29cdd9e810c9f90b9f60922abcbd4aaf1cb286751d90eb7bdd54fcb1e8271274","observation_id":"7f1cce28-18d0-463f-aad7-278b56c75b5f","resolution":{"observed_at":"2026-08-12T04:43:02.871249Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.852417Z","title":"Batch Normalization: Accelerating deep network training by reducing internal co- variate shift","venue":null,"work_id":"ba1bad3e-fe41-4df6-b1ac-bd6e66d733f0","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.076467Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:b8bbb27f5fbcb4fecc15a883c0297588166e5c668b84f65f86bbc22462e228d7","observation_id":"fe124f83-c4de-45a6-98a4-41fe1f1e664c","resolution":{"observed_at":"2026-08-12T04:43:02.857058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.837908Z","title":"Contrastive adaptation network for unsupervised do- main adaptation","venue":null,"work_id":"2d7a388c-d996-4e88-964c-1f3f9ef4ec69","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.080767Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:af7f597c3751ae05567400aa853bb317c7a9666db836e504b2549e63a914c13c","observation_id":"dbebd13e-e1f5-4494-aab9-136f9a955879","resolution":{"observed_at":"2026-08-12T04:43:02.842659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.822977Z","title":"Kingma and Jimmy Ba","venue":null,"work_id":"a77f385a-737c-41cd-9dab-ca24431fe6af","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.084899Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:f6ea638f8cb43d09d9dc00db175577d66a97d96cb9ea94dc11ab364833e9ac3a","observation_id":"94020d3f-1d39-4c8f-8ac5-eb09fc7bd230","resolution":{"observed_at":"2026-08-12T04:43:02.827792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.808573Z","title":"Pseudo-label : The simple and efficient semi-supervised learning method for deep neural networks","venue":null,"work_id":"db4da796-3e9a-4d94-9611-679e850655c4","year":2013},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.089187Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:dfeaf46306be91b5629d6c746efa60e2e03662bb49c577607539e974a3d6ec47","observation_id":"78875cc5-7b52-4027-bbd7-27d427164e01","resolution":{"observed_at":"2026-08-12T04:43:02.813260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.794359Z","title":"Detecting adversarial image examples in deep neural networks with adaptive noise reduc- tion","venue":null,"work_id":"848f60fc-81fe-41e6-8871-2af221d3eabe","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.093148Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:4d3f8d65f1b9cb91028a1a93796d48baf811b69fb9b9f23d5f20871752e4d08c","observation_id":"d85c21c2-f65e-4e24-86e6-0df52c413280","resolution":{"observed_at":"2026-08-12T04:43:02.799022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.778655Z","title":"Do we really need to access the source data? Source hypothesis transfer for un- supervised domain adaptation","venue":null,"work_id":"e41742a3-431a-4026-9ca4-14821b8208ab","year":2020},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.097081Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:72d19bf1d67144b5274db6cdc17fd9b2e4fdc3947293a3f59ce08d66b212f2e7","observation_id":"3f9c2b0f-e424-45e3-b89d-e9ca9ddcc0df","resolution":{"observed_at":"2026-08-12T04:43:02.783263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.764108Z","title":"Self-improving reactive agents based on rein- forcement learning, planning and teaching","venue":null,"work_id":"ef918ea0-9331-4aa0-806e-3155391a390b","year":1992},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.101038Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:ba1cf61b2b6d971b70a8401808f6b9e942a922c5f7499b013a24f03d009c5b68","observation_id":"a5410266-c8fb-4a99-b2aa-7ee0f30c7423","resolution":{"observed_at":"2026-08-12T04:43:02.768872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.749084Z","title":"TTT++: When does self-supervised test-time training fail or thrive? In Advances in Neural Information Processing Systems (NeurIPS), pages 21808–21820, 2021","venue":null,"work_id":"c30c4cf8-576a-4db6-9875-c6d07b0a780b","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.105584Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:a199569d22611e32c5fbd80130e9ddceeb9b41103c69955845965da2fc46f743","observation_id":"0b1e6fb2-2ef4-47dd-a4e2-532a211eff17","resolution":{"observed_at":"2026-08-12T04:43:02.754290Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.733863Z","title":"Greedy policy search: A simple baseline for learnable test-time augmenta- tion","venue":null,"work_id":"18e787b4-78e1-4f95-a572-8d52cad8bdf6","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.109903Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:ce1b7e2ba529aa414c49cf98ba6a1515f7abff4713754b81a78628a8ed5a6570","observation_id":"e79b642f-70e6-44c8-8b55-053d998b0b10","resolution":{"observed_at":"2026-08-12T04:43:02.738851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.718701Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"a2826bb5-f36a-4f9c-a344-17c886d17834","year":2018},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.114600Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:6676cb76a5cc386419bcd9a9a403afc289f119216aa4488936b365d857335661","observation_id":"a7120f20-1ce0-44e3-b796-ad247273ebee","resolution":{"observed_at":"2026-08-12T04:43:02.723501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.703981Z","title":"Torchvision: Py- torch’s computer vision library.https://github.com/ pytorch/vision, 2016","venue":null,"work_id":"8041ba5e-09d1-42e0-a3f5-2dff3e9564ff","year":2016},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.119090Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:700836f517b21f35bf25d1016e098506b0a08b757ced74eab0a54d0eef1c272d","observation_id":"764bcb8f-bf56-410f-a197-7f4e8b3e046c","resolution":{"observed_at":"2026-08-12T04:43:02.708425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.690221Z","title":"Univer- sal test-time adaptation through weight ensembling, diver- sity weighting, and prior correction","venue":null,"work_id":"f1e84b9f-5545-45ff-8ed9-16f90d5fbef3","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.123521Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:4a913614932c298ba2edf904999514c3894c1ee79fe66cd82abc64e772df9121","observation_id":"a58516a2-2519-4907-bd42-52155b2d3941","resolution":{"observed_at":"2026-08-12T04:43:02.694640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.14999","last_updated":"2021-06-28T22:06:10Z","snapshot_observed_at":"2026-08-03T19:08:42.645000Z","submitted_at":"2021-06-28T22:06:10Z","title":"Test-Time Adaptation to Distribution Shift by Confidence Maximization and Input Transformation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.14999","snapshot_observed_at":"2026-08-12T04:43:02.128191Z","title":"Test-time adaptation to distribution shift by confidence maximization and input transformation","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.128191Z"},"links":{"cited_paper":"/paper/2106.14999","citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:4843121337008a54bb183a0664b49d4afe997b6bd2108660ba33222533114ed4","observation_id":"2470987f-6125-4241-8a66-fd30423b3f72","resolution":{"observed_at":"2026-08-12T04:43:02.128191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.676477Z","title":"Deep neural networks are easily fooled: High confidence predictions for unrecognizable images","venue":null,"work_id":"6c21e144-846e-479a-bb82-4f462ac44fdd","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.133030Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:12ffc4d0f680bbf1e5ecff40660e4eceef600dc1098178e9948b1eae38eaf9df","observation_id":"2099d03f-620c-425c-a752-dcf1099f595b","resolution":{"observed_at":"2026-08-12T04:43:02.680831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.661848Z","title":"Tuan Nguyen, Thanh Nguyen-Tang, Ser-Nam Lim, and Philip Torr","venue":null,"work_id":"065e655b-d4b7-4a87-b6f4-b17b34eef64d","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.137693Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:427146d01b124546df7af4dfbe770116c7c9c34174d855089d443c11a1d30cf7","observation_id":"7fe0a2cb-84c4-4c30-b1f8-32a0cf3fe960","resolution":{"observed_at":"2026-08-12T04:43:02.666834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.647292Z","title":"Efficient test- time model adaptation without forgetting","venue":null,"work_id":"1992e9b3-0643-4fe9-a605-a2c2bc0532bb","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.142212Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:7643824a1576bf4e047afbc277d88908d65a2fa658a72877a72b16f2413e187a","observation_id":"093cdf72-3c1c-4b95-bec2-8d28d55515a8","resolution":{"observed_at":"2026-08-12T04:43:02.651991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.632066Z","title":"Towards stable test-time adaptation in dynamic wild world","venue":null,"work_id":"9e396b6c-38e9-4686-8217-463311ff4442","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.146936Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:fc1a448f5616fb2724a35db7033f636ada0585c7ee0d94a9f381cffc6d2ed28e","observation_id":"2e40f024-637f-4702-8a23-1fc22bd5cef4","resolution":{"observed_at":"2026-08-12T04:43:02.637209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.617139Z","title":"To- wards robust detection of adversarial examples","venue":null,"work_id":"166c8070-c1d3-4cc0-bda1-19c37e6084b6","year":2018},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.151721Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:102d00eb1983b50ce949863e77d23364ac4a2a5a468e148623bdc2398e383253","observation_id":"9e989a0d-0941-44e0-80db-b452051d2a28","resolution":{"observed_at":"2026-08-12T04:43:02.621968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.601308Z","title":"Distillation as a Defense to Ad- versarial Perturbations Against Deep Neural Networks","venue":null,"work_id":"db7df48a-0868-4db2-ace1-4e77cd36a961","year":2016},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.156132Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:f47d1543c8edd6d2315886083be48bf8d5d3fed2cf89db1aa40914fb957ad225","observation_id":"cb76b16c-a0d4-48bb-b7be-9b3f36f4b052","resolution":{"observed_at":"2026-08-12T04:43:02.606251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.584116Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":"ce1317aa-af45-45eb-af9c-79825c09b66f","year":2017},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.160642Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:12674da82be6a9987096549926b0c000afd39a6a6187223cd8a2ec99deec944e","observation_id":"50678730-253b-40a3-9fcc-57d0ffab5cab","resolution":{"observed_at":"2026-08-12T04:43:02.588940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.569103Z","title":"MedBN: Robust test-time adap- tation against malicious test samples","venue":null,"work_id":"839b3a2f-492d-40a9-aaad-ef0f017f2c2b","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.165264Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:6b1670ef0f1964cd3a171527c332dbaea41ed0dcdfddac6b07a384e0268cfe89","observation_id":"bd10519a-3ddb-4dfa-82c1-9a22a3fb2bac","resolution":{"observed_at":"2026-08-12T04:43:02.574009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.554004Z","title":"RDumb: A simple approach that questions our progress in continual test-time adaptation","venue":null,"work_id":"73ba69f0-cee8-4684-9805-2c852cb9e776","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.169967Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:d41a3312c6216de63730e76c6c7986a4ce73f04500de76938fc722938a4ae701","observation_id":"a42dc7ab-6d7d-4c33-8c2c-b4e92d1d7340","resolution":{"observed_at":"2026-08-12T04:43:02.559094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.538994Z","title":"Lawrence","venue":null,"work_id":"01d64281-0c31-4b45-b867-47a4917bc1af","year":2009},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.174524Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:ae8b179d3396dce948950cffc71cca398e9d2a7a96503302b2f969cd7b511808","observation_id":"1c20b4ea-4e70-478a-a8fe-5fd5b9c04d61","resolution":{"observed_at":"2026-08-12T04:43:02.543468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.523924Z","title":"A survey on image data augmentation for deep learning","venue":null,"work_id":"ce27f5d0-9e56-4c25-a07d-136442e72e3b","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.178982Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:55dcf0c4db65c9343d7fd4acb50becce6d3950123e8f0fc34d1676f46e84ef20","observation_id":"8a27da3c-5a2a-44bd-bcf2-9bd888273969","resolution":{"observed_at":"2026-08-12T04:43:02.528792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.508590Z","title":"Towards real-world test- time adaptation: Tri-Net self-training with balanced normal- ization","venue":null,"work_id":"7e71ef99-9be1-45f2-bca3-fc0151df4738","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.183495Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:07c2ca56f7166ad103ef7d1e9acb4d6f24eefae1623b00973c822aaafd9e1a60","observation_id":"ace08f22-589b-4b9e-bec7-8bba606c0141","resolution":{"observed_at":"2026-08-12T04:43:02.513001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.494698Z","title":"Test-time training with self- supervision for generalization under distribution shifts","venue":null,"work_id":"f53ecfb9-f660-4531-a646-1d1a0f863d32","year":2020},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.188239Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:9e3502cc5641a2e4fad0a5ea9d3523ddb1184822bb60cc36defdc33136785f79","observation_id":"3b3e8b45-2ccb-49fb-8917-bb2679989e62","resolution":{"observed_at":"2026-08-12T04:43:02.499173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.480942Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"9a04ecf0-97c7-4405-a9ba-902a04b1de89","year":2014},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.192943Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:c605fc64c02b88b223dfb30d2b683672db1d08692e74a9e2e408f303d4bae1a5","observation_id":"5db7203d-09ea-4dee-a97f-3527c454334c","resolution":{"observed_at":"2026-08-12T04:43:02.485209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.466335Z","title":"Mean teachers are bet- ter role models: Weight-averaged consistency targets im- prove semi-supervised deep learning results","venue":null,"work_id":"d607baad-b264-4e92-b29a-d2e91a752cc4","year":2017},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.197415Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:48967c6a62d81c960f9dbc6c59cde33961353dcb3b33e6743a361eab598a5ae3","observation_id":"a733f7bc-af77-4987-a92d-889ac8f4cb95","resolution":{"observed_at":"2026-08-12T04:43:02.471207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.450959Z","title":"Visualizing data using t-SNE","venue":null,"work_id":"2ef23782-7078-4cf7-bb04-2ad7c70dfe05","year":2008},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.201980Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:b63a1fb9b66c41458d826c27dfc74d213b0692c2a353234b5fba72cd633ee50e","observation_id":"8d8a6c47-5a34-4381-af39-cbf1c059f2a0","resolution":{"observed_at":"2026-08-12T04:43:02.455798Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.435459Z","title":"Tent: Fully test-time adaptation by entropy minimization","venue":null,"work_id":"f3c04d1e-29c2-4058-9ad8-79e240d7e360","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.206444Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:3ea57c987961d7a9e5f0cae5b0f2fd6dc78489230ce1bb4f699bcd6567b398b8","observation_id":"16488855-9fd9-4052-b0be-0bbe75f22c39","resolution":{"observed_at":"2026-08-12T04:43:02.440495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.419965Z","title":"Continual test-time domain adaptation","venue":null,"work_id":"4c8c8daf-0aa7-41bf-a6ab-8a44e5f60f81","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.211585Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:47501cc5cc6ea8ed3139e347142e40bed8f90d5db991bd8dea534fa2951a7ead","observation_id":"37ecab8c-178c-481b-a153-2da3a9f0dae9","resolution":{"observed_at":"2026-08-12T04:43:02.424847Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.404215Z","title":"Vincent Poor","venue":null,"work_id":"d4ea2040-e7db-4ca9-abf3-b189c6279708","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.216231Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:61ceced441f3b5848a5b6a1019cccc1e71506cca810bb017ef52483290a0cb64","observation_id":"2427e3e4-24f5-48b6-b055-9a3aecaa0f96","resolution":{"observed_at":"2026-08-12T04:43:02.409521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.387202Z","title":"Wang, Vikash Sehwag, Saeed Mahloujifar, and Prateek Mittal","venue":null,"work_id":"7f40b136-ed5a-4374-8758-408db0815833","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.221030Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:ddcc8942e0e5c9eb0eff44c2bc9e2cd304351892f3170ff7310bf2896436dee1","observation_id":"2de87f44-23e3-4ca2-8527-b90d333ba5d5","resolution":{"observed_at":"2026-08-12T04:43:02.392838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.370412Z","title":"Grey-box adversarial attack and defence for sentiment classification","venue":null,"work_id":"d0fec9df-fe2e-4b0d-a8ce-4f4806b45b2c","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.225873Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:856e9a346b7a1b3c24546acb7c61df7223f92ff6325b203655c3eeb10276c0da","observation_id":"22e896e5-19a2-413f-8418-668d0a2ade2f","resolution":{"observed_at":"2026-08-12T04:43:02.375353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.354788Z","title":"Robust test- time adaptation in dynamic scenarios","venue":null,"work_id":"d445658b-a837-4375-b5ff-9773864d12b3","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.230319Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:fda3f1fff20ac21f5d3600d8eae9d556c62873c277e5e6f9d329a733b192a026","observation_id":"980e59e8-cc74-4966-84eb-2a3724f9eecb","resolution":{"observed_at":"2026-08-12T04:43:02.359805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.338803Z","title":"Dauphin, and David Lopez-Paz","venue":null,"work_id":"5294b8e6-4f18-4e6d-ac61-382c212ac05e","year":2018},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.234492Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:9696c1952bffd433fae408800b82872c8ba7ebfe9f62ce2b560b290c13baa07a","observation_id":"cd356da2-74f5-4b4f-bb79-8ec2ca0097c9","resolution":{"observed_at":"2026-08-12T04:43:02.343828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.322852Z","title":"MEMO: Test time robustness via adaptation and augmentation","venue":null,"work_id":"9e0e01ca-e44f-41f0-86fa-141be234a8d7","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.238585Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:b616f0fd1d49da9a6d46404cf39f7f80e8d1f0df38955e54c4594aa17fd7314e","observation_id":"1294b932-f646-4c18-8daa-bbab7882273f","resolution":{"observed_at":"2026-08-12T04:43:02.328319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.306835Z","title":"shifting boundary effect","venue":null,"work_id":"a8f3daa9-da59-4d62-bbfb-922bb39002a1","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.242563Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:ca5a4faa2602df42b6cb3e775b079b76170620a2160b5d384cf72f8a98e9ec21","observation_id":"b3cb40d6-df79-43b9-bdd5-04dfc217deb5","resolution":{"observed_at":"2026-08-12T04:43:02.312282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":0,"verified_fuzzy":51},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2412.01154."}