{"as_of":"2026-08-19T18:36:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5606af49c3069c28cf2bae59f722640a95b022013f66e432d76d8fa442891c87","coverage":[{"denominator":32,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":32,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T22:17:06.462391Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:16:45.154556Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T22:05:02.550126Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"cited_work":{"arxiv_id":"2501.02232","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.02232","snapshot_observed_at":"2026-08-06T22:05:02.550126Z","title":"Distillation-Enhanced Physical Adversarial Attacks","venue":"cs.CV","work_id":"d14fc9d6-58b3-4b2b-bdda-9a2a812ed2a9","year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T13:46:47.598111Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T22:05:01.182350Z"},"links":{"cited_paper":"/paper/2501.02232","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:3a0ecde7f7a21081bd703bcf8fcc4f978b05317dcd8d28ba1918cf52fc7f4b2c","observation_id":"600e0510-1e62-4928-a63e-0d250220ceac","resolution":{"observed_at":"2026-08-06T22:05:02.759034Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.02232","snapshot_observed_at":"2026-08-11T04:16:45.154556Z","title":"Distillation-enhanced physical adversarial attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T13:46:47.598111Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.154556Z"},"links":{"cited_paper":"/paper/2501.02232","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:094bfd376f77440d46d8c2c1d6794e60b511c3517c028120e41025ddeabf06aa","observation_id":"17bd6729-fdbd-4e57-affd-43439bec9869","resolution":{"observed_at":"2026-08-11T04:16:45.154556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2501.02232/citation-record","integrity":"/paper/2501.02232/integrity","json":"/paper/2501.02232/citation-record.json","paper":"/paper/2501.02232"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.870237Z","title":"Mysticmask: Adversarial mask for impersonation attack against face recognition systems,","venue":null,"work_id":"f4678975-13ed-481a-9fa4-446cadfc5036","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.340335Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:0e4c67d81c11467fa2399bdbb9c9795832db4f6e4ad9822d9370a23efd1cb41e","observation_id":"41502597-d2b7-4766-81c6-5a3fba321ab9","resolution":{"observed_at":"2026-08-10T22:17:06.874045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.858662Z","title":"An analysis of adversarial attacks and defenses on autonomous driving models,","venue":null,"work_id":"96d8653a-1972-45a3-8490-8130b65c7df6","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.345561Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:c56f59598353a4e0d6e9e1a35804ea949c820cba0835535dac55d96e0b3632fe","observation_id":"72fcc5ef-97ef-4907-b4e2-2b0cf7e4911b","resolution":{"observed_at":"2026-08-10T22:17:06.862646Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.846644Z","title":"Invisible pedestrians: Synthesizing adversarial clothing textures to evade industrial camera-based 3d detection,","venue":null,"work_id":"07de7714-08fa-4bfc-ac9e-1727434a3323","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.349452Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:966ad9967ddabbbaec1dde95b971fb5d55489e61b58335f8de0874abfdfb0207","observation_id":"e32c060f-7ca8-4ee8-8977-7cdd288883e6","resolution":{"observed_at":"2026-08-10T22:17:06.851001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.835660Z","title":"Universal physical camouflage attacks on object detectors,","venue":null,"work_id":"d2622d48-8e48-4de8-8bd7-cfa33504e321","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.353656Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:6105161b59fa6266055a2098e37ef2139c3da87aeed4044b4bf37f9b8d50ef96","observation_id":"7ec5dfa7-bae4-4f81-bf0c-1543261dd8a2","resolution":{"observed_at":"2026-08-10T22:17:06.839595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.824378Z","title":"Naturalistic physical adver- sarial patch for object detectors,","venue":null,"work_id":"1798a449-c67f-4157-8ff7-2b55b6b5f49c","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.357522Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:26d94c46e751931efa0863b7bdf2712ad12672713f6ed8e510a8f0e4d1e082b8","observation_id":"b332f043-1267-4b7e-9b40-bb4731ba7fba","resolution":{"observed_at":"2026-08-10T22:17:06.828988Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.812841Z","title":"Dap: A dynamic adversarial patch for evading person detectors,","venue":null,"work_id":"37922cd7-e0a6-4c99-a4ea-c65dfe3cea5d","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.361469Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:ed7b428cbc9cd0d7edd1a238db527456d0c58c7b8d9132d499e3ea1c508a0005","observation_id":"f36de3bf-69b5-437e-9c43-ca34ccc6face","resolution":{"observed_at":"2026-08-10T22:17:06.816997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.800938Z","title":"Physically realizable natural-looking clothing textures evade person detectors via 3d modeling,","venue":null,"work_id":"cccecf74-79af-4378-83e1-04083a875f8d","year":2023},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.365600Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:78124b2763f6c265143b759c2c80fcfacbc038ecdbc6430be851054e0a322ca7","observation_id":"f338ac70-6261-449a-aef2-2a04d585324f","resolution":{"observed_at":"2026-08-10T22:17:06.804943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10498","last_updated":"2024-11-15T09:30:47Z","snapshot_observed_at":"2026-08-18T03:00:20.691032Z","submitted_at":"2024-11-15T09:30:47Z","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","version":1},"cited_work":{"arxiv_id":"2411.10498","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.10498","snapshot_observed_at":"2026-08-10T22:17:06.544098Z","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","venue":"cs.CV","work_id":"692113c4-6883-48c1-b874-62de31d35b75","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.369090Z"},"links":{"cited_paper":"/paper/2411.10498","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:0c458f7d138279aac8260668901eeb8cd1f5716cf2e2517e612f8ad7b90e4b63","observation_id":"5cb2911b-4cd7-4fbe-87de-c0f12d3eb285","resolution":{"observed_at":"2026-08-10T22:17:06.549840Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07253","last_updated":"2024-12-10T07:24:24Z","snapshot_observed_at":"2026-08-17T14:10:30.686063Z","submitted_at":"2024-12-10T07:24:24Z","title":"CapGen:An Environment-Adaptive Generator of Adversarial Patches","version":1},"cited_work":{"arxiv_id":"2412.07253","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.07253","snapshot_observed_at":"2026-08-10T22:17:06.520713Z","title":"CapGen:An Environment-Adaptive Generator of Adversarial Patches","venue":"cs.CV","work_id":"f9d6bd4d-87bb-4fdb-8409-8f2f0fcc47a7","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.373067Z"},"links":{"cited_paper":"/paper/2412.07253","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:6a56e4179a8c087fd056217f45aed2d807d9cddb05b69d1ee14b18c733bd9b33","observation_id":"94304e0c-b840-455e-8fe6-605ee069fc14","resolution":{"observed_at":"2026-08-10T22:17:06.529650Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.789884Z","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection,","venue":null,"work_id":"6d972fcf-b619-40bf-b0ab-3a4aa3f0fef7","year":2019},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.376784Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:0511338d9458b3de00d4070104c52d414993d491e1f5496af84e359f79d63a8d","observation_id":"726ff8e4-716d-4ae5-94c7-94a3ca1b7744","resolution":{"observed_at":"2026-08-10T22:17:06.793854Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.778432Z","title":"The v1 hypothesis-creating a bottom-up saliency map for preattentive selection and segregation,","venue":null,"work_id":"dbbbebf2-0a11-481d-bed5-12dd7766212f","year":2014},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.380221Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:612979dce3ca5479395904f5e7b11edc738e7636981b5aee0b613100e7ec24f7","observation_id":"bf8096d6-c9eb-49fc-9d84-cf9b9ebd9e94","resolution":{"observed_at":"2026-08-10T22:17:06.782612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.767616Z","title":"Attention capture by eye of origin singletons even without awareness—a hallmark of a bottom-up saliency map in the primary visual cortex,","venue":null,"work_id":"f29bb744-746b-4a14-9a2d-e0a60f62d17f","year":2008},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.384291Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:dce00967a16287118306db940ea3a86248dd2d6ec238012a70e9a5d213d162a9","observation_id":"d5e1d1a2-8a9c-4dc0-a63e-e5838cf11a91","resolution":{"observed_at":"2026-08-10T22:17:06.771563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.756527Z","title":"Physical adversarial examples for object detectors,","venue":null,"work_id":"15124acb-dfc4-4f90-b981-df9e8f8133b8","year":2018},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.388406Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:cba601e69e1acbdd28822d98a5c7946793113894a125a1bb21d09fc3b48da641","observation_id":"8c84fe93-16ac-435d-8695-8249ce450b15","resolution":{"observed_at":"2026-08-10T22:17:06.760306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.745233Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":"6340bbb6-6f46-433d-bcee-cce9b8412cfd","year":2016},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.391895Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:a34a6caff7fe02ebab41279586c88711ad8534939ffd351bd238fb2741c55fe9","observation_id":"c388ba16-94f6-483b-99b0-42c1278b51cc","resolution":{"observed_at":"2026-08-10T22:17:06.749914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.733033Z","title":"Seeing isn’t believing: Towards more robust adversarial attack against real world object detectors,","venue":null,"work_id":"bc7fa344-e4c8-42ee-9f1f-8eef4073774e","year":2019},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.395685Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:5622831a0687362f4203171ad63bb705d70d4f3eed69703d5b2be41cf04191a8","observation_id":"69dc3a2e-38a5-427c-9e35-8438f9d4287a","resolution":{"observed_at":"2026-08-10T22:17:06.737638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.721627Z","title":"Adversarial t- shirt! evading person detectors in a physical world,","venue":null,"work_id":"526510cf-feab-45a0-98d3-ff3fb4816475","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.399907Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:c114bd3448949ffafa0a1e0d209c9b825b10d0e311f9a51b85af035db3ddb75b","observation_id":"1762d385-5d20-4577-ad75-c417ab24a6b5","resolution":{"observed_at":"2026-08-10T22:17:06.725880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.710071Z","title":"Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices,","venue":null,"work_id":"81499791-144e-481b-a4c9-5517e512f934","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.403574Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:55bdb32decdd0750277821435363b34e5846a3144e8df9483053566471762b29","observation_id":"e615fe86-f060-42be-8261-a930d07c5bf1","resolution":{"observed_at":"2026-08-10T22:17:06.714057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.699662Z","title":"Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phenomenon,","venue":null,"work_id":"6942f17b-53dc-40d0-bfad-31c80496db4e","year":2022},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.407044Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:184b04c2650bfdd48214191bff6f8ed1834f6800a8d9f2d796bf615486c47676","observation_id":"945c49f4-a67d-409d-b88d-e303cec2b181","resolution":{"observed_at":"2026-08-10T22:17:06.703623Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.688902Z","title":"{SLAP}: Improving physical adversarial examples with {Short-Lived} adversarial perturbations,","venue":null,"work_id":"e2a5cc22-ff26-4303-8121-6c1d0f658eac","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.411102Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:f02858fd0609f68cecb652c83098d4a553db46dcfc5e9dfcc83989fefc5c297f","observation_id":"9e2f5383-7362-4bc5-bb23-633228c58203","resolution":{"observed_at":"2026-08-10T22:17:06.692862Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1503.02531","last_updated":"2015-03-09T15:44:49Z","snapshot_observed_at":"2026-08-16T18:00:58.008096Z","submitted_at":"2015-03-09T15:44:49Z","title":"Distilling the Knowledge in a Neural Network","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1503.02531","snapshot_observed_at":"2026-08-10T22:17:06.414785Z","title":"Distilling the knowledge in a neural network,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.414785Z"},"links":{"cited_paper":"/paper/1503.02531","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:b06ae8252ab1450c53ab8061d83ceeb9fa0451a2187ad289601df867fd73fd1c","observation_id":"2decfe1c-dd18-49af-87ab-1784c3c68327","resolution":{"observed_at":"2026-08-10T22:17:06.414785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.677342Z","title":"Learning without forgetting,","venue":null,"work_id":"1d04569f-ad8b-41dc-9f2b-fce6ae7c129f","year":2017},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.418824Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:274107c38fa548ae1d320ccbf41dd825fc9b329a52090671c7bf2523692ec728","observation_id":"1ee2f4da-6038-4a6a-9058-3de6e3461d64","resolution":{"observed_at":"2026-08-10T22:17:06.681385Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.666102Z","title":"Mimicking very efficient network for object detection,","venue":null,"work_id":"0f1eda31-814f-46c0-87f3-e4e38b5a1794","year":2017},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.422873Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:0c1e11ef4d85a6065d4ebc6d06c913fbcad31386638bc99fb1d9265c7cca65c4","observation_id":"98099dd2-2a46-4954-930c-30242660b00c","resolution":{"observed_at":"2026-08-10T22:17:06.670260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.654772Z","title":"Online model distillation for efficient video inference,","venue":null,"work_id":"3160964c-0d4a-404c-b177-3c7d7145165a","year":2019},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.426793Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:1e4a9dbf5a51fb6675e5e1dedb13b9bcb3a72727e1ecb2182c3d32f06191922d","observation_id":"6616342b-2152-4d14-99ff-38428497e703","resolution":{"observed_at":"2026-08-10T22:17:06.658716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.644146Z","title":"Distillation as a defense to adversarial perturbations against deep neural networks,","venue":null,"work_id":"8c5d0058-97fd-4e1e-8057-cdb1a8687686","year":2016},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.430705Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:e906ca9019ffc2b20ee8b763389669ab61a75af63bd2afde35379b8d7bc6dfee","observation_id":"6a3a2870-1c08-4693-a560-8b6a8e4f4b61","resolution":{"observed_at":"2026-08-10T22:17:06.648047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.05264","last_updated":"2017-05-15T14:25:15Z","snapshot_observed_at":"2026-08-19T12:46:20.332118Z","submitted_at":"2017-05-15T14:25:15Z","title":"Extending Defensive Distillation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.05264","snapshot_observed_at":"2026-08-10T22:17:06.434675Z","title":"Extending defensive distilla- tion,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.434675Z"},"links":{"cited_paper":"/paper/1705.05264","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:994b715eb3b10fafb75c1fae101e79dc12e3b27862f1c9da333487bf88705a7f","observation_id":"b0d1bdfa-168d-41cd-9a8a-926404c6febe","resolution":{"observed_at":"2026-08-10T22:17:06.434675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.632150Z","title":"Ad- versarially robust distillation,","venue":null,"work_id":"8dc2ec6e-20e9-4f35-9e77-64fa6e724d56","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.438910Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:bdee606a4bfb12ab1ecf8baa113e6f2fc83899a3357b8372a95c0ecdac7d9941","observation_id":"fd22598f-be19-4a6f-ab61-e458e635796a","resolution":{"observed_at":"2026-08-10T22:17:06.636166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.620969Z","title":"Revisiting adversarial robustness distillation: Robust soft labels make student better,","venue":null,"work_id":"5013e9e5-0358-4b15-b969-2c8b2c201794","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.442799Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:dd1a01d5d8d75befdfecb9beb9e67c2a72ecef01ac2bed4ea693b3d6feaa663b","observation_id":"2a6048fc-8850-42e2-806e-48bf2b2431d8","resolution":{"observed_at":"2026-08-10T22:17:06.624908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.610214Z","title":"A* sampling,","venue":null,"work_id":"431cab05-cc5a-4345-8d6a-3d493b4f3cf8","year":2014},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.447045Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:e50634737f0476a7dd21aefd96f76a25ca71f11822c75b3e940102fa4c1c855c","observation_id":"caa1ae7e-0440-4499-ad7a-199e89242597","resolution":{"observed_at":"2026-08-10T22:17:06.613813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.597667Z","title":"I-divergence geometry of probability distributions and minimization problems,","venue":null,"work_id":"c146163e-42a0-4b84-947c-9a0779d80b09","year":1975},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.450772Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:e926a503e8d311c23db9ad66289a6bc518f500213382c37891c320acf83c695a","observation_id":"4b095fa6-755b-4b42-a12d-61a009f04a60","resolution":{"observed_at":"2026-08-10T22:17:06.601980Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.583131Z","title":"Histograms of oriented gradients for human detection,","venue":null,"work_id":"66a5dc15-cd9c-4be6-ba1a-253f22367707","year":2005},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.454754Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:35fc6ef434f91ed33213c89d426e932895c60189161aa059351352bd52babed3","observation_id":"69438373-d44e-4b37-a495-e773f60a5008","resolution":{"observed_at":"2026-08-10T22:17:06.588224Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.571509Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":"18574a30-a272-4478-86f7-9af1ea59932b","year":2018},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.458564Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:655f2d2d6c027396662764fdc37c92a828f66be47a597a11568c8dfeb2ad65c1","observation_id":"e5341b0d-f19a-403d-a122-b21518624a57","resolution":{"observed_at":"2026-08-10T22:17:06.575483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.558769Z","title":"T-sea: Transfer-based self-ensemble attack on object detection,","venue":null,"work_id":"42c23dca-0e49-48ee-99be-9851d68cfdd6","year":2023},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.462391Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:79aa383821e50fb9be4507b332a9ea10d7cd06c7d10f85abd83ba0ef8a38eff1","observation_id":"4e6b3ba7-5cd7-4abe-b99d-ed5d3052945e","resolution":{"observed_at":"2026-08-10T22:17:06.563358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks"},"reference_resolution":{"displayed":32,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":2,"verified_exact":2,"verified_fuzzy":28},"total_outbound_references":32},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 2 inbound Pith citation observations for arXiv:2501.02232."}