{"as_of":"2026-08-17T20:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:37d2ad0cc1e75fc0322e92c1d07ae624a522c0f14f3c0c9ba19032073e978ef9","coverage":[{"denominator":16,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T10:44:58.551571Z","state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.02913/citation-record","integrity":"/paper/2502.02913/integrity","json":"/paper/2502.02913/citation-record.json","paper":"/paper/2502.02913"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.759376Z","title":"B., Mironov, I., Talwar, K., and Zhang, L","venue":null,"work_id":"0c565a87-b24f-469d-b962-37b534b1036d","year":2016},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.490449Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:c01c486cc397e3acb9a1c9e127632d60e0dadc9dd5e1c284e8095d704db6000b","observation_id":"b4e62d67-426f-42ad-b843-e0039352dfbf","resolution":{"observed_at":"2026-08-09T10:44:58.762941Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.724164Z","title":"Comprehen- sive privacy analysis of deep learning","venue":null,"work_id":"bfc247dc-e904-43ef-ab9f-47ff08553f3b","year":2019},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.525310Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:8a9b09f39c5c7fbf241ba27290e6a8028fe1f75847b60f4fb1d334f5cc9f18f9","observation_id":"a444f083-9a12-4104-bbde-7fdf03585f34","resolution":{"observed_at":"2026-08-09T10:44:58.728327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.11524","last_updated":"2020-07-22T16:33:14Z","snapshot_observed_at":"2026-08-04T15:18:26.501887Z","submitted_at":"2020-07-22T16:33:14Z","title":"Improving Deep Learning with Differential Privacy using Gradient Encoding and Denoising","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.11524","snapshot_observed_at":"2026-08-09T10:44:58.529061Z","title":"Improving deep learning with dif- ferential privacy using gradient encoding and denoising","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.529061Z"},"links":{"cited_paper":"/paper/2007.11524","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:ad699e1cdf1f030d653c94efe9c5ef5ec735293b63432a5a2836ecff22e66288","observation_id":"72b8ebef-94b3-4d8e-bcdc-269b6ce4db1d","resolution":{"observed_at":"2026-08-09T10:44:58.529061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.700788Z","title":"Mem- bership inference attacks against machine learning mod- els","venue":null,"work_id":"dae7e76f-cced-461d-ae7c-78a9b88c7fe8","year":2017},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.536782Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:614adc8f9e2983fec6caae5b8d573edc8454a66f266149dcce4a017b25d860d2","observation_id":"38d756df-0a18-4b97-8f70-93a424a9cd5e","resolution":{"observed_at":"2026-08-09T10:44:58.704869Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.677383Z","title":"Variational model inversion attacks","venue":null,"work_id":"7e182b35-94e6-4e13-8694-0adb383779dc","year":2021},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.543877Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:a790bbe5a72bf0ec5535d12d65cbdbf5f330dfa80c5ce6ddf8226ca525b21d69","observation_id":"89ce4689-67f5-49a8-8fc4-1a83cc152e1f","resolution":{"observed_at":"2026-08-09T10:44:58.681386Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.665434Z","title":"Settings of MINE Network","venue":null,"work_id":"5fa54073-317f-4448-b731-8c61bdf8f5ca","year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.551571Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:0cc0c1a9fa2a852220059b0f760c51789cb39088e37f3b2b2658904b150e3c5f","observation_id":"2bc2f188-1f78-47a4-9224-5e9df346b745","resolution":{"observed_at":"2026-08-09T10:44:58.669432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.735736Z","title":"Detecting adversarial examples on deep neural networks with mutual information neural esti- mation","venue":null,"work_id":"d3b2745b-c673-400f-9259-1a4bea78350d","year":1901},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.512515Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:2cd2a599ec319ddfdcefa62d24e9950428c573cba2b808bc91bdf8752af5089d","observation_id":"94eb60c3-3b41-48bc-917a-a33f33187f98","resolution":{"observed_at":"2026-08-09T10:44:58.739945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.04062","last_updated":"2021-08-14T18:35:05Z","snapshot_observed_at":"2026-08-14T19:55:44.931753Z","submitted_at":"2018-01-12T05:42:58Z","title":"MINE: Mutual Information Neural Estimation","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.04062","snapshot_observed_at":"2026-08-09T10:44:58.495070Z","title":"I., Baratin, A., Rajeswar, S., Ozair, S., Bengio, Y ., Courville, A., and Hjelm, R","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.495070Z"},"links":{"cited_paper":"/paper/1801.04062","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:2400782e92b7d4fda149c68ada77b023c872096f701617b0a92972ac20756047","observation_id":"6dc60f01-a935-4ec5-9c92-931e75d362a5","resolution":{"observed_at":"2026-08-09T10:44:58.495070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.689305Z","title":"E., Yu, L., and Wei, W","venue":null,"work_id":"420c724f-6bfc-4f63-91f4-0011994deaa5","year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.540289Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:91ef34e0d965ac5c30908aea185bdb948a259ad6189e198b1d304dec1a8f00dc","observation_id":"74014975-f5ef-43c8-9fa3-79e9802c51d1","resolution":{"observed_at":"2026-08-09T10:44:58.693122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.746908Z","title":"A., Tramer, F., Carlini, N., and Paper- not, N","venue":null,"work_id":"2faf0ad9-c5de-4641-ab20-bb692e442e0d","year":1964},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.499706Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:ad46621b77fd2766aed4da42928f759f2fac0f6b9584e4428214db2ef9bde973","observation_id":"86e98dff-6722-478c-bd1d-b9c03e90e138","resolution":{"observed_at":"2026-08-09T10:44:58.751702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-17T02:26:19.835254Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-09T10:44:58.521159Z","title":"Adversarial ma- chine learning at scale","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.521159Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:ad603528e7dbd8ebb2ba222b4d663436d3835effa3dd370f4542dbf4c1e72f82","observation_id":"a6751d79-d943-43d1-8546-2f4f448d6cfc","resolution":{"observed_at":"2026-08-09T10:44:58.521159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.712423Z","title":"V ., Krpalkova, L., Riordan, D., and Walsh, J","venue":null,"work_id":"ed18991b-6ced-40c2-b2cc-0e1e06f459e5","year":2019},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.533177Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:edb74cf820aebf56bb3f2704c85e85bf624433a0894993f0302b4b2f5fca7302","observation_id":"a5edd8ac-3f06-4b77-8712-0daa20620909","resolution":{"observed_at":"2026-08-09T10:44:58.716246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-16T09:25:53.087782Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-09T10:44:58.503867Z","title":"An image is worth 16x16 words: Trans- formers for image recognition at scale","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.503867Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:29feae40847278b5c5382c9a0752d3d178afe48f0725c3fe24e016860129ae37","observation_id":"446be18f-0d92-485e-adfd-ba9b0fbc4ac7","resolution":{"observed_at":"2026-08-09T10:44:58.503867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00696","last_updated":"2024-12-01T06:40:28Z","snapshot_observed_at":"2026-08-16T07:27:55.772787Z","submitted_at":"2024-12-01T06:40:28Z","title":"Intermediate Outputs Are More Sensitive Than You Think","version":1},"cited_work":{"arxiv_id":"2412.00696","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.00696","snapshot_observed_at":"2026-08-09T10:44:58.615067Z","title":"Intermediate Outputs Are More Sensitive Than You Think","venue":"cs.CV","work_id":"7408d9da-dd40-480c-b94f-9a993add1487","year":2024},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.516688Z"},"links":{"cited_paper":"/paper/2412.00696","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:ad8dfbf87009aeb5338d6a5492cb4ab5a37933b3ef8fd31d890de520ca2d64c3","observation_id":"bf57f052-ece7-47ff-bb39-050c93273a83","resolution":{"observed_at":"2026-08-09T10:44:58.621232Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2001.10648","last_updated":"2020-04-28T00:43:42Z","snapshot_observed_at":"2026-08-16T06:28:59.647827Z","submitted_at":"2020-01-29T00:42:08Z","title":"Modelling and Quantifying Membership Information Leakage in Machine Learning","version":2},"cited_work":{"arxiv_id":"2001.10648","doi":null,"metadata_source":"pith","pith_arxiv_id":"2001.10648","snapshot_observed_at":"2026-08-09T10:44:58.633384Z","title":"Modelling and Quantifying Membership Information Leakage in Machine Learning","venue":"cs.LG","work_id":"3899c50a-1c95-4d36-b3b9-2c0de72a5bb4","year":2020},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.508410Z"},"links":{"cited_paper":"/paper/2001.10648","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:35987525c37f94f70a9d7d29e0bdd603d559d4b15192888cbb994bd84b076dc5","observation_id":"381e7552-db1d-456a-916c-2a101c548c69","resolution":{"observed_at":"2026-08-09T10:44:58.637443Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2001.02610","last_updated":"2020-01-08T16:45:09Z","snapshot_observed_at":"2026-08-15T12:58:25.117101Z","submitted_at":"2020-01-08T16:45:09Z","title":"iDLG: Improved Deep Leakage from Gradients","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.02610","snapshot_observed_at":"2026-08-09T10:44:58.547558Z","title":"G., Zhao, C., Sun, Q., Tang, Y ., Qian, F., and Kurths, J","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.547558Z"},"links":{"cited_paper":"/paper/2001.02610","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:7402a0f71b92366241470ebd7ef387e064daccd37b732e94fdd2507decab0020","observation_id":"9259e078-b24d-4a83-8f2a-2fb6509493fd","resolution":{"observed_at":"2026-08-09T10:44:58.547558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","latest_version":4,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-15T01:59:58.010223Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage"},"reference_resolution":{"displayed":16,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":2,"verified_fuzzy":9},"total_outbound_references":16},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 16 of 16 outbound references and 0 inbound Pith citation observations for arXiv:2502.02913."}