{"as_of":"2026-08-10T07:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:80ac57da03546d2ee2b8eb9c82819c54d6277da270944cea75412b01361886aa","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T17:52:54.005091Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.00760/citation-record","integrity":"/paper/2502.00760/integrity","json":"/paper/2502.00760/citation-record.json","paper":"/paper/2502.00760"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-10T01:12:16.468283Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-09T17:52:53.879412Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.879412Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:aaf5888367b8ff9b34546e4bc3e214272faee23cdc4311d7c95cdc53596b24a7","observation_id":"14bc3544-175c-4f3b-95d3-82eaf2e13ea8","resolution":{"observed_at":"2026-08-09T17:52:53.879412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.08458","last_updated":"2015-12-02T18:06:03Z","snapshot_observed_at":"2026-07-06T04:37:52.737823Z","submitted_at":"2015-11-26T17:45:01Z","title":"An Introduction to Convolutional Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.08458","snapshot_observed_at":"2026-08-09T17:52:53.885978Z","title":"An introduction to convolutional neural networks,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.885978Z"},"links":{"cited_paper":"/paper/1511.08458","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:28b8b4daecc01af33ce6568f5173ec501a8631942c636c749250d804b93a250c","observation_id":"26fc833f-9807-4403-a981-dda175126fb3","resolution":{"observed_at":"2026-08-09T17:52:53.885978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.912923Z","title":"Network inversion for training-like data reconstruction,","venue":null,"work_id":"3824b71f-fb3c-48ea-9380-b3f9e6458c8f","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.890970Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:b6c023e01fde395638976086955284b452853a136a9094079b8652f12323bba1","observation_id":"8ea7333d-0c9b-4472-ad48-a149971000b3","resolution":{"observed_at":"2026-08-09T17:52:54.917732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.897738Z","title":"Privacy-preserving machine learning: Threats and solutions,","venue":null,"work_id":"d8d3f8f5-21bd-4c17-b452-d8b93a4adc2e","year":2019},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.895827Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:289918a72beef84074528ef2d583cf414a68c65fb66128f2f9cc0ffec6f31d91","observation_id":"d9745209-310a-4cd4-ac50-c74bd8fc89c3","resolution":{"observed_at":"2026-08-09T17:52:54.902718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.04417","last_updated":"2021-09-22T05:05:56Z","snapshot_observed_at":"2026-08-09T02:16:51.504444Z","submitted_at":"2021-08-10T02:58:31Z","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.04417","snapshot_observed_at":"2026-08-09T17:52:53.900981Z","title":"Privacy-preserving machine learning: Methods, challenges and directions,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.900981Z"},"links":{"cited_paper":"/paper/2108.04417","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:03b0afd2939cad7d79d49f84c6b7dbb3cfab7d697e152fba1022bf60252b2def","observation_id":"b9dffebe-583d-454f-b775-aa5d642a5268","resolution":{"observed_at":"2026-08-09T17:52:53.900981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:53.906380Z","title":"Inversion of neural networks by gradient descent,","venue":null,"work_id":null,"year":1990},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.906380Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c4aa2080233026c9d4d9075761bf108e5f6a9f8ce6b7ec2789ab2c91a8b0670d","observation_id":"946e0866-cca6-45d7-9a0c-b3b0f7986e37","resolution":{"observed_at":"2026-08-09T17:52:53.906380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.882328Z","title":"Inversion of feedforward neural networks: algorithms and applications,","venue":null,"work_id":"b6c3a8cc-069c-401d-b355-87df118454dc","year":1999},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.911344Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c220a22d90eaf3008d3b72fdbbad0287508b08aa5064ecc90c2eb1772c25e192","observation_id":"2f9004bf-a8fa-4294-aeed-4873a539d918","resolution":{"observed_at":"2026-08-09T17:52:54.886945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.867646Z","title":"Neural network inversion beyond gradient descent,","venue":null,"work_id":"73d82a0e-48aa-4afc-aa05-ce7dec683d2d","year":2017},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.915553Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:9a30ee507e3fb2ec27ced056084f63f0a96040ff9cb1cfa115ffa9215df5f424","observation_id":"efd341b7-cef8-4392-bda6-a0749e77c334","resolution":{"observed_at":"2026-08-09T17:52:54.872280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.473644Z","title":"Neural network inversion in adversarial setting via background knowledge alignment,","venue":null,"work_id":"dc1e9860-95a0-4cbc-a120-790871404a6f","year":2019},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.919901Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:06fb4fc786d7d084c1198ff123ed385f2ee286ddd78ca5d28e4f2da5796ebf61","observation_id":"e77cb6f5-ef84-46e2-befb-3d4a7cf85313","resolution":{"observed_at":"2026-08-09T17:52:54.479031Z","resolver_source":"arxiv_id_nonexistent","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.852386Z","title":"Neural network explanation using inversion,","venue":null,"work_id":"f23798df-2f41-4021-887e-b235efe55463","year":2007},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.924172Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:326f51fc330ba09c522c884f46986543b251da04b1732fc49c66a8ebafe95b61","observation_id":"b0413546-0a69-4714-b2e3-267096fcf649","resolution":{"observed_at":"2026-08-09T17:52:54.857477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.838553Z","title":"Model inversion networks for model-based optimization,","venue":null,"work_id":"85c17bf4-88a6-495e-b336-bc237ba89c76","year":2019},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.928612Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:3bbdc4b0f41d6784ccfbea89125973b0ab7931867eed3cc36961b9751df03b34","observation_id":"13becc89-df8a-4a73-a38f-430d55d2ea94","resolution":{"observed_at":"2026-08-09T17:52:54.842786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.825071Z","title":"Reconstructing training data with informed adversaries,","venue":null,"work_id":"4e9b3951-0739-4bca-85e8-bdd88ff91840","year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.932753Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:a2459e5f7e6ae519ad3ab1b8af92f5600585ff26e8d4b22b5bca4c8e584fa988","observation_id":"418e6806-76b5-406a-bed7-49ea6bac91ca","resolution":{"observed_at":"2026-08-09T17:52:54.829316Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:53.936776Z","title":"Reconstructing training data from model gradient, provably,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.936776Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:f8c5150abd0632c96e34d0204c86f765c6dad8c6f22c51e19c7057cdfd7eb303","observation_id":"31d76ae5-9bd6-49db-af79-0a554c8ff02d","resolution":{"observed_at":"2026-08-09T17:52:53.936776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.09027","last_updated":"2022-06-17T22:05:29Z","snapshot_observed_at":"2026-08-06T03:40:28.105758Z","submitted_at":"2022-06-17T22:05:29Z","title":"Landscape Learning for Neural Network Inversion","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.09027","snapshot_observed_at":"2026-08-09T17:52:53.940729Z","title":"Landscape learning for neural network inversion,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.940729Z"},"links":{"cited_paper":"/paper/2206.09027","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:8b02ad92e5e1fe3f661f720fe5ebfa79240c9ed0aef77a353b1325607e634666","observation_id":"622d5ecb-f5b7-4c4f-893a-662a1a4b0750","resolution":{"observed_at":"2026-08-09T17:52:53.940729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.799339Z","title":"Network inversion of binarised neural nets,","venue":null,"work_id":"c24194ef-37f6-44fb-89c1-88580eb82756","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.944728Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:188a6242881559ac11a3b20f826d65c5cdca7cc0d815b651a3ead74a250a3b26","observation_id":"5b99eab8-bf06-408e-94fc-16a130daefa0","resolution":{"observed_at":"2026-08-09T17:52:54.803619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.03702","last_updated":"2021-11-05T18:59:01Z","snapshot_observed_at":"2026-07-06T12:05:55.928795Z","submitted_at":"2021-11-05T18:59:01Z","title":"Reconstructing Training Data from Diverse ML Models by Ensemble Inversion","version":1},"cited_work":{"arxiv_id":"2111.03702","doi":null,"metadata_source":"pith","pith_arxiv_id":"2111.03702","snapshot_observed_at":"2026-08-09T17:52:54.111483Z","title":"Reconstructing Training Data from Diverse ML Models by Ensemble Inversion","venue":"cs.LG","work_id":"4be134e6-5bb3-4763-858a-553fad131ad2","year":2021},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.948750Z"},"links":{"cited_paper":"/paper/2111.03702","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:7a7255affb76cd0c0ec4a3d5a4fff10b2b1ba8d23b0d04899b6dcabca245c874","observation_id":"88711419-c2f9-48b7-9e21-a5352323416b","resolution":{"observed_at":"2026-08-09T17:52:54.116365Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2206.07758","last_updated":"2022-12-05T14:49:34Z","snapshot_observed_at":"2026-08-03T07:41:48.597777Z","submitted_at":"2022-06-15T18:35:16Z","title":"Reconstructing Training Data from Trained Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.07758","snapshot_observed_at":"2026-08-09T17:52:53.953441Z","title":"Reconstructing training data from trained neural networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.953441Z"},"links":{"cited_paper":"/paper/2206.07758","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c2a4d11d7280d1228cc016ce6d46f650b9049253ac0f88975ad0f9e6dde70c48","observation_id":"786db1a0-00f4-41a1-ab85-cb2cc4b72f8d","resolution":{"observed_at":"2026-08-09T17:52:53.953441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03350","last_updated":"2023-05-05T08:11:00Z","snapshot_observed_at":"2026-08-08T01:47:52.928549Z","submitted_at":"2023-05-05T08:11:00Z","title":"Reconstructing Training Data from Multiclass Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03350","snapshot_observed_at":"2026-08-09T17:52:53.958008Z","title":"Reconstructing training data from multiclass neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.958008Z"},"links":{"cited_paper":"/paper/2305.03350","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:e0ba74a3614a104677244a6b968e0697743117c4ad301048a198bb9f6c1a04f0","observation_id":"97b822f6-1a0e-45d4-b7c0-4fd6697926bc","resolution":{"observed_at":"2026-08-09T17:52:53.958008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.03714","last_updated":"2023-06-10T14:14:10Z","snapshot_observed_at":"2026-07-06T14:27:53.824389Z","submitted_at":"2022-12-07T15:32:22Z","title":"Reconstructing Training Data from Model Gradient, Provably","version":3},"cited_work":{"arxiv_id":"2212.03714","doi":null,"metadata_source":"pith","pith_arxiv_id":"2212.03714","snapshot_observed_at":"2026-08-09T17:52:54.057195Z","title":"Reconstructing Training Data from Model Gradient, Provably","venue":"cs.LG","work_id":"bdcd28ff-ed48-4eb2-b987-72d906734c5c","year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.962513Z"},"links":{"cited_paper":"/paper/2212.03714","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:fa6ee18a87c676675aacabd9837ac0ae11a3c529c441f4daa5eda56c206549b7","observation_id":"351adacd-cb91-4a8e-906f-7170a89db970","resolution":{"observed_at":"2026-08-09T17:52:54.063890Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.783322Z","title":"Reconstructing training data from real world models trained with transfer learning,","venue":null,"work_id":"d4b94c84-aa52-40b6-a092-6c770ffb9f31","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.967214Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:0422c1406e918651ff6f90c562f419cab251a502b4c5bbc862e8cb46f0379ca9","observation_id":"7f52870d-ab52-4891-8c61-e0ca8837300f","resolution":{"observed_at":"2026-08-09T17:52:54.787955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.768660Z","title":"Bounding training data reconstruction in private (deep) learning,","venue":null,"work_id":"254e306f-0a30-4ecb-b32d-2b35f2628a0e","year":null},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.972092Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c8c739c306c9e4c20641e6b0c3d2decd3931a60bd39d82ee20e7c67494d84434","observation_id":"6e2a0469-5f79-4813-bd68-06fc447131f1","resolution":{"observed_at":"2026-08-09T17:52:54.773055Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.740555Z","title":"Network inversion of convolutional neural nets,","venue":null,"work_id":"e4dbc3af-8765-4649-8f33-110f08133af7","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.979933Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:0768e4d2fcf26a972e0a0e9e88edc08ffe0de87f8142c7764cf0e9699a5eb2ac","observation_id":"8db56948-6480-4ef2-bc6b-b4e2e23ae47e","resolution":{"observed_at":"2026-08-09T17:52:54.744800Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.725894Z","title":"Network inversion and its applications,","venue":null,"work_id":"c70ee12c-14d8-4502-9a13-7762e5d9cebd","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.983826Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:5f787ebb1cede50d3f21a635ac530e5346ee05b0a742df3a2440c43e0759ed5f","observation_id":"352716d1-4547-4b4d-919d-d74af2dc1f44","resolution":{"observed_at":"2026-08-09T17:52:54.730231Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:53.987558Z","title":"The mnist database of handwritten digit images for machine learning research,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.987558Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:37e8eb9bbe23d67503b13ff9e7a53df87766919980e4ea83188b71b6a061627e","observation_id":"0e03b73c-dc5b-4c7d-88c9-458e87fdd4f8","resolution":{"observed_at":"2026-08-09T17:52:53.987558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.07747","last_updated":"2017-09-15T21:29:49Z","snapshot_observed_at":"2026-07-06T05:56:41.814255Z","submitted_at":"2017-08-25T14:01:29Z","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.07747","snapshot_observed_at":"2026-08-09T17:52:53.991272Z","title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.991272Z"},"links":{"cited_paper":"/paper/1708.07747","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:198efd9085765febe53e2a7a0dab55ef72f48c864d8798005ff0d1f7f01068b3","observation_id":"4f8588de-23b3-4758-b641-c16dc7434070","resolution":{"observed_at":"2026-08-09T17:52:53.991272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.700619Z","title":"Cifar-10 (canadian institute for advanced research)","venue":null,"work_id":"e4504b34-15d3-4994-800a-b8b26dc4f660","year":null},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.995764Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:b7b1ed304791efb0f86970cd655db78f1f1b7d42411724a07ec989a099776a14","observation_id":"368b3323-02bf-4de0-8128-754eadc328f2","resolution":{"observed_at":"2026-08-09T17:52:54.705795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.684801Z","title":"Dropout: A simple way to prevent neural networks from overfitting,","venue":null,"work_id":"0ed1bcbc-ee9d-4eeb-8d3d-53a9beb40c34","year":1929},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:54.000475Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:f8b2c19f3a9df7a40357ba22736ded2155f43cc4bbe57ec21b93583fd8e432a4","observation_id":"4c762b59-dfbc-4037-a856-bf4dcd3a9361","resolution":{"observed_at":"2026-08-09T17:52:54.689780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.669380Z","title":"Batch normalization: Accelerating deep network training by reducing internal covariate shift,","venue":null,"work_id":"aeaf86a7-87cb-489f-975b-42ae0403e93a","year":2015},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:54.005091Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:aafa6725372b154ed4fc80de352bf3305e89be8796ac0157bc38ec9ea1514544","observation_id":"232bc763-4930-447c-ab85-36b145272ac5","resolution":{"observed_at":"2026-08-09T17:52:54.674405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.754606Z","title":"8056–8071","venue":null,"work_id":"5fcda61e-4be6-4279-bb2c-bf80fbb597cb","year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":162,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.976139Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c608fe940d21cbffbd5d78f5be56c11ddcec008d927f97e5da56e963ddb633a1","observation_id":"780adcc4-b06f-401f-b185-fd6423792fb3","resolution":{"observed_at":"2026-08-09T17:52:54.758744Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":3,"verified_fuzzy":16},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2502.00760."}