{"as_of":"2026-08-17T07:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7d7fafea8da9256e675893774d42b9c6a6020813c2646c4b0f2a6425caead4af","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:25:33.261216Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T20:14:02.553313Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-10T22:05:49.130029Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"cited_work":{"arxiv_id":"2505.07258","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.07258","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2505.07258 (2025)","venue":null,"work_id":"c98c843b-b22c-4e08-959a-72da74ed2a40","year":2025},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-16T22:50:02.447684Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2505.07258","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:480603145f672aa0e29e0daee5398c7c522da5ba6530cb647932b92832ef9e38","observation_id":"0afb5f8c-cece-4a2c-89f3-4a21ef5e8654","resolution":{"observed_at":"2026-05-10T22:05:49.131666Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.07258/citation-record","integrity":"/paper/2505.07258/integrity","json":"/paper/2505.07258/citation-record.json","paper":"/paper/2505.07258"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.792157Z","title":null,"venue":null,"work_id":"3af62a7d-b930-4230-8cb2-96902567ef88","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.081445Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:b5c5cf03d6b7d185e14f85d18d887ce644c1db798a0fe55e64721c4d97a8dd52","observation_id":"c3d9dee8-74d1-48fc-ac30-f067e9785faa","resolution":{"observed_at":"2026-08-15T22:25:33.795277Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.783907Z","title":"and Biecek, P","venue":null,"work_id":"88f84c10-d8ee-424b-8c0f-e21b58bca5a6","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.085255Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:308c97b4859fe4f88bf631cc2aab8e7874438e2437958c847345e37440431b5e","observation_id":"0540a748-638f-4af6-9ba7-087afdc4e638","resolution":{"observed_at":"2026-08-15T22:25:33.786890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09164","last_updated":"2024-09-05T19:56:09Z","snapshot_observed_at":"2026-08-16T14:18:39.695146Z","submitted_at":"2024-02-14T13:30:02Z","title":"Less is More: Fewer Interpretable Region via Submodular Subset Selection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09164","snapshot_observed_at":"2026-08-15T22:25:33.088618Z","title":"Less is more: Fewer interpretable region via submodular subset selection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.088618Z"},"links":{"cited_paper":"/paper/2402.09164","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:7257e767b64dbce2ebc07f8b5506f63aab3d69bb7fd659b46827aaef962b6532","observation_id":"70d17f35-d877-42b3-9dfa-ab7c34dabbb9","resolution":{"observed_at":"2026-08-15T22:25:33.088618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.775511Z","title":"Goemotions: A dataset of fine-grained emotions","venue":null,"work_id":"5e8aaf63-21d4-4811-91d4-4bdf7f5fbd8c","year":2020},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.092391Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:692d2522c864c486d6d575980757a819127b040f19e2e771d36018edfb63ab2a","observation_id":"fa8b4853-5f0f-4645-adbf-4f2839230bce","resolution":{"observed_at":"2026-08-15T22:25:33.778713Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.766541Z","title":null,"venue":null,"work_id":"17e4bbca-e5bb-4308-9ed5-cde380eaccb6","year":2021},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.095910Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:ba82dea34b1db6615047870328a624fbd1fd66b472a7fe32f6fb10cf2b9cacda","observation_id":"7eff1bf3-504b-4f94-b14d-eff5649b02f7","resolution":{"observed_at":"2026-08-15T22:25:33.769852Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.757810Z","title":"Hotflip: White-box adversarial examples for text classification","venue":null,"work_id":"91e5da37-e912-4e9d-acd7-8a067b9d2491","year":2018},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.100094Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:00ac1170682feeae044cd3f7a35b497c3a64e9a6e82a972e50fd29f0e911e64d","observation_id":"ea318505-46de-4b24-8fb8-5a69c24af5c7","resolution":{"observed_at":"2026-08-15T22:25:33.761245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.748693Z","title":"A survey of text classification with transformers: How wide? how large? how long? how accurate? how expensive? how safe? IEEE Access, 2024","venue":null,"work_id":"fb68ef05-b8e2-4701-a757-121c72df5345","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.103760Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:d2b93aefdff9bf2238fb1164e8e4a4c2181506cdb068c1b42eb3e4196617c003","observation_id":"83de80e8-6066-4c82-86cc-32e6eed6adfb","resolution":{"observed_at":"2026-08-15T22:25:33.752280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.738673Z","title":"Adversarial attacks on deep models for financial transaction records","venue":null,"work_id":"4e7fbb87-db57-4812-b2d4-3bd5b51ff13e","year":2021},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.106936Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:a9c0b05f62a36b5c80cc6dc8938458d43813c691c263fac6c414dc75cfdfa55f","observation_id":"5e6165da-bcda-4bb0-afba-8b7bfce35905","resolution":{"observed_at":"2026-08-15T22:25:33.741827Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.729828Z","title":"and Ramakrishnan, G","venue":null,"work_id":"41491653-2aac-48d9-a1a9-fb75250d6d16","year":2020},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.110265Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:10d2bdf116d71f3a36bd34e509ee0577d51fd71c4f1695570ee29d4ebbd0b87c","observation_id":"dbb7c218-6e62-4d26-bfd8-5c7f918e5dae","resolution":{"observed_at":"2026-08-15T22:25:33.733513Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.720866Z","title":"Improving open data web api documentation through interactivity and natural language generation","venue":null,"work_id":"41f30550-2e4c-42b3-b304-d7d7253ad7bb","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.113365Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:68fb3d3c7ebbf7ff5e4dd1462ff30e078d82a310485451e86896961cb1abad1c","observation_id":"18b638f9-b336-4852-a7bd-d26c4e162a3c","resolution":{"observed_at":"2026-08-15T22:25:33.724135Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.711865Z","title":"Bfs2adv: Black-box adversarial attack towards hard-to-attack short texts","venue":null,"work_id":"6fd16ebe-a7aa-40ad-93ce-155870527b92","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.116315Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:464f4259638346b889905f0a506e3d428e515e95fcb659867e8092bd477138cc","observation_id":"158ce055-9b29-4761-a923-210e3ddf60fb","resolution":{"observed_at":"2026-08-15T22:25:33.715481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.703197Z","title":"Fasttextdodger: Decision-based adversarial attack against black-box nlp models with extremely high efficiency","venue":null,"work_id":"6cfe5b3c-a014-4ce6-bda9-bcec81f4c162","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.119521Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:d807bf37c521bc25045e92b2ce3c9428df994dabe4983b1b4612597cf4578dfb","observation_id":"bb4bbce3-9083-4510-aeec-37ef07dad0ab","resolution":{"observed_at":"2026-08-15T22:25:33.706402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.11815","last_updated":"2025-01-22T03:17:01Z","snapshot_observed_at":"2026-08-13T15:03:06.254960Z","submitted_at":"2025-01-21T01:45:56Z","title":"CogMorph: Cognitive Morphing Attacks for Text-to-Image Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.11815","snapshot_observed_at":"2026-08-15T22:25:33.122457Z","title":"Cogmorph: Cognitive morphing attacks for text-to-image models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.122457Z"},"links":{"cited_paper":"/paper/2501.11815","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:f805ad731ae57f5c312f4712b82b1709363b42a8838ec01c12bd93b2b5b173ac","observation_id":"a185aa02-e2e6-45ee-b654-9a0d6ae20d3c","resolution":{"observed_at":"2026-08-15T22:25:33.122457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.693426Z","title":"A hybrid style transfer with whale optimization algorithm model for textual adversarial attack","venue":null,"work_id":"42e2ae0e-e089-48ba-8f43-9d2eb286d41b","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.125928Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:42819e3f769a862029ad7190931449765ecb682a5dfc1161dce33f6405a7c3b6","observation_id":"011a8f68-b5db-4a78-aabb-12fc150ca9bd","resolution":{"observed_at":"2026-08-15T22:25:33.696950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.683969Z","title":"and Lee, S","venue":null,"work_id":"25cc4b22-1391-4488-82cc-abd0bdeaa3dc","year":2022},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.129063Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:68865be18c2bd8efd259d3257a46f9394e88d837870327cbcfbc1d0b0c15c847","observation_id":"6d4e2dfe-c12c-412c-a35e-8c438a15faef","resolution":{"observed_at":"2026-08-15T22:25:33.687328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.673504Z","title":"Efficient adversarial attacks for visual object tracking","venue":null,"work_id":"32e1ecf9-2b59-4423-8a5f-52ff9f63eae8","year":2020},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.132103Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:5e1ff7eb8d2d96dc7f64fb802274bb72994a8d4456d53f1b55d8c273ba48ed42","observation_id":"50b81455-2f68-47d7-af0f-071665dc131e","resolution":{"observed_at":"2026-08-15T22:25:33.677756Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.664644Z","title":"A large-scale multiple-objective method for black-box attack against object detection","venue":null,"work_id":"01d6542a-8d24-4da3-ac06-fa746cf89f1d","year":2022},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.135164Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:19bd12d795ccb7fcb60285ea8dd1f3609c3172d2cd1d9bbe0c16a5a113822fa8","observation_id":"a9e47caf-0ab8-4fae-b8d0-095dbd22cf66","resolution":{"observed_at":"2026-08-15T22:25:33.667927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.654516Z","title":"Imitated detectors: Stealing knowledge of black-box object detectors","venue":null,"work_id":"73753a58-0af0-4651-9949-a84af5fd081b","year":2022},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.138114Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:289f1e33ae4c1c7c155a93f5061a108ac5517324551cc82f3e09ec7435d61c0f","observation_id":"45802aef-542f-4d38-8a94-adda3c032012","resolution":{"observed_at":"2026-08-15T22:25:33.658437Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.08970","last_updated":"2022-01-22T06:00:17Z","snapshot_observed_at":"2026-08-16T17:26:44.390349Z","submitted_at":"2022-01-22T06:00:17Z","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.08970","snapshot_observed_at":"2026-08-15T22:25:33.141059Z","title":"Parallel rectangle flip attack: A query-based black-box attack against object detection","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.141059Z"},"links":{"cited_paper":"/paper/2201.08970","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:a2ce79525e65fca83c17aef0597f98376aa75c2d192426c0c43086ecf26bd244","observation_id":"1454efc0-1261-482f-812a-3b9e88a4e47f","resolution":{"observed_at":"2026-08-15T22:25:33.141059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12075","last_updated":"2024-03-04T13:59:22Z","snapshot_observed_at":"2026-08-16T14:41:59.499521Z","submitted_at":"2023-11-20T02:21:49Z","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12075","snapshot_observed_at":"2026-08-15T22:25:33.144253Z","title":"Badclip: Dual-embedding guided backdoor attack on multimodal contrastive learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.144253Z"},"links":{"cited_paper":"/paper/2311.12075","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:5b2235c00ac15121b209100e9f585a358ff4510f03f35358938b6341ffe275c9","observation_id":"b1e0361f-f367-4c38-aaaf-b9ebbbb14618","resolution":{"observed_at":"2026-08-15T22:25:33.144253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18844","last_updated":"2024-12-16T06:59:33Z","snapshot_observed_at":"2026-08-16T13:39:14.208419Z","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18844","snapshot_observed_at":"2026-08-15T22:25:33.147868Z","title":"Revisiting backdoor attacks against large vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.147868Z"},"links":{"cited_paper":"/paper/2406.18844","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:2080d3d80d309e371860a460f27078bdc350ee62fc2f4bfe2f652aaf7e7fdffe","observation_id":"6546af31-47cc-4d10-a5c4-6dff9cfbe6dc","resolution":{"observed_at":"2026-08-15T22:25:33.147868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.644751Z","title":"Using adversarial attacks to reveal the statistical bias in machine reading comprehension models","venue":null,"work_id":"56b082be-1989-4326-bbbb-83a20111268f","year":2021},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.151176Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:a2d7dae473297033f5c3bebcbd20207b9b31a228da88456d94c24baa8c878e18","observation_id":"f35e027e-10d7-4c47-85f6-024fb00cb34c","resolution":{"observed_at":"2026-08-15T22:25:33.648038Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.635061Z","title":"Sspattack: a simple and sweet paradigm for black-box hard-label textual adversarial attack","venue":null,"work_id":"f78922c5-babf-488d-a7d7-7c662b1f3ede","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.154206Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:d8ff913b9a0c709a1334b62e34b0b19047c5cc758d5bc4c9d459450000c290b6","observation_id":"f0ebf442-cb83-4891-bc9f-dc00000e8cc1","resolution":{"observed_at":"2026-08-15T22:25:33.638560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.624064Z","title":"Hqa-attack: Toward high quality black-box hard-label adversarial attack on text","venue":null,"work_id":"84a89568-f0e2-4674-96c2-cfc08b80796e","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.157655Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:534cdd295693936c1b4312e485ae166aebc0cc069ac5458c7913c92d86a42f24","observation_id":"43ee89e1-b57b-4640-becc-d4fe894e3843","resolution":{"observed_at":"2026-08-15T22:25:33.628145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.613940Z","title":"Least squares quantization in pcm","venue":null,"work_id":"e83dbd9e-6842-40b5-a7c4-88e033a60c5a","year":1982},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.160794Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:053ff9115f1d60bbab2f5dc8ae4347ef8fd0d65dcbad0572171bbaf076022058","observation_id":"46e995c3-f9cb-41bb-90af-0c9e967a9bb7","resolution":{"observed_at":"2026-08-15T22:25:33.617379Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.603771Z","title":"Ct-gat: Cross-task generative adversarial attack based on transferability","venue":null,"work_id":"1a8e4537-e64a-48b9-a5e2-866369edeec3","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.163722Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:22f5c5c33e315e45ae7ccd9cca525f061bf3d73410ec8ea7c454f1683deddcf6","observation_id":"04d78b4f-85aa-4564-9541-02fb57546b80","resolution":{"observed_at":"2026-08-15T22:25:33.607180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.166968Z","title":"Cross-entropy loss functions: Theoretical analysis and applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.166968Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:94a1bd723ca575292c9ca87e0e5a9863d6052780ef2c2b677ae1d6f0f1af29b9","observation_id":"c7967c0e-ec77-4181-b93d-35864799f845","resolution":{"observed_at":"2026-08-15T22:25:33.166968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.587428Z","title":"A., and Malki, K","venue":null,"work_id":"aed617e4-ecfb-43a6-9fde-5a4178cc4005","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.170215Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:e50858765983a50fdca670bf5ba2b2bcf2ed11c57d35f3338aaa4560c90bd8b7","observation_id":"bb63af3b-6e47-4ac6-b7c0-7327c48ece43","resolution":{"observed_at":"2026-08-15T22:25:33.590842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.578123Z","title":"S., and Porikli, F","venue":null,"work_id":"caffe048-33d2-427d-8219-d84f0444c7f4","year":2021},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.173445Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:9d2f00c44824cb7aab09f4125244d360fe3dfee40464e4e3db3d7316f0a3b8e3","observation_id":"3dfd6b97-f5f3-43da-9af7-c4f25df19709","resolution":{"observed_at":"2026-08-15T22:25:33.581524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.568864Z","title":"Chatgpt: Gpt-4, 2023","venue":null,"work_id":"2945e217-91ac-4abd-9eb9-b82b6a8b0359","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.176492Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:2f586577c79016ff8cc50ffc0e68a0a031b387d9def6e3618776617858cdbe6c","observation_id":"ef5ace61-238e-4c6b-8699-108fbfc97738","resolution":{"observed_at":"2026-08-15T22:25:33.572145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.559551Z","title":"and Lee, L","venue":null,"work_id":"15a92ee5-734c-442c-a1fc-7e89debcabde","year":2005},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.179677Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:6415c614ed41daa941c0476353037c5a087b77e9cc009768a110de67dd4b506c","observation_id":"a6989070-d73b-4d9d-871a-b44839ca1931","resolution":{"observed_at":"2026-08-15T22:25:33.562822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.549545Z","title":"Crafting adversarial input sequences for recurrent neural networks","venue":null,"work_id":"fa66cc21-0116-4457-b537-4266238b9171","year":2016},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.183057Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:a1d9dee90e97222433417333fed358300e847110022d79d87e5a4c4469373777","observation_id":"5a94015e-188d-4930-8119-c8bca4526c18","resolution":{"observed_at":"2026-08-15T22:25:33.552958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.539091Z","title":"Review of artificial intelligence adversarial attack and defense technologies","venue":null,"work_id":"6e43795d-770a-4d1e-b991-8eafd17f5aef","year":2019},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.186349Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:535571e73ce3e1ddb4b480c02d5064fbbfd92bc138554f2437b72e74fd489533","observation_id":"4b7ca1e5-a4a5-43b4-9e02-a1176c84d866","resolution":{"observed_at":"2026-08-15T22:25:33.542729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.189337Z","title":"W., Hallacy, C., Ramesh, A., Goh, G., Agarwal, S., Sastry, G., Askell, A., Mishkin, P., Clark, J., et al","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.189337Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:064a5219c2ff44fb4f0c5a20617df1fae7dfeda20af7b8052acbf8785e20bd43","observation_id":"bc6949f7-656c-426e-b619-29b20de567e7","resolution":{"observed_at":"2026-08-15T22:25:33.189337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.523170Z","title":null,"venue":null,"work_id":"0d07fd97-0b36-4930-903e-99fec7219e6f","year":2020},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.192507Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:5b9464bbea1624cae8b81404fc1f46cf4a93e92db94d199b7bbe6ba23ba85546","observation_id":"a519c2ce-b9a2-4cbe-aa0f-bc73fe0eec1d","resolution":{"observed_at":"2026-08-15T22:25:33.526816Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.513300Z","title":"Generating natural language adversarial examples through probability weighted word saliency","venue":null,"work_id":"fcf19bd0-aa68-43b8-8b50-04b4a2127c2d","year":2019},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.195709Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:713d3aa09267e7cb995e01bb37301e92600634939e27db0e6cee86fb2490cd98","observation_id":"f9ca90a2-8059-4dce-88e7-e772cf8c7786","resolution":{"observed_at":"2026-08-15T22:25:33.517030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.504080Z","title":"A., Gonzalez, J., and Escalera, S","venue":null,"work_id":"0f4250a4-b33e-4b41-8f46-413e23cb1224","year":2018},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.198969Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:7d631ce61832ea3103fc0917449447dff582ae2f3dfafb307ff39012d289a924","observation_id":"8b44532f-afbd-495a-b866-e238dfa2e764","resolution":{"observed_at":"2026-08-15T22:25:33.507338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.493850Z","title":"T., Huang, Y.-C., Wu, J., and Chen, Y.-S","venue":null,"work_id":"44a71761-2a81-4486-b265-0337df1f6a3b","year":2018},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.202126Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:654453f6955e8a539a2c4cf4fc928bf54a7ecbd36a69f4fdc7f353144be0c9ae","observation_id":"fba67c5b-9159-4d9b-a524-3ff961eaa08d","resolution":{"observed_at":"2026-08-15T22:25:33.497474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.205057Z","title":"D., Ng, A","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.205057Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:7565b732ac952dfb30147d10bf1b9057439356b19ccd5f9c82747e8c8e91871d","observation_id":"ae5ca4c2-3efb-4be8-bf30-ae746b6f0405","resolution":{"observed_at":"2026-08-15T22:25:33.205057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.478547Z","title":"Text classification via large language models","venue":null,"work_id":"8e570be0-1ac8-4d7e-9ba0-51a019c7ed1a","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.211413Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:43e58e71e30f9ab06c36418421efb7c6a5779cf0dcceba1a0637d1b3fefcbd91","observation_id":"5c585113-24d0-4988-8c3e-d17862305564","resolution":{"observed_at":"2026-08-15T22:25:33.482105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.468315Z","title":"A tutorial on spectral clustering","venue":null,"work_id":"2f817f92-c57e-46e8-8e31-fe8687a7efea","year":2007},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.214994Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:5a6293abc1ebefc3a038c36b237ccd150063771a560237557fa7555a7a735a32","observation_id":"10e919eb-cedb-434c-a0e8-2118e796b32d","resolution":{"observed_at":"2026-08-15T22:25:33.471709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.458819Z","title":null,"venue":null,"work_id":"6d130362-b311-4f38-8a79-12ecc7362d82","year":2000},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.218262Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:df0bd881996d490abab6a2c62add9e1564943b77d086477c85539f5d5f0d9ca0","observation_id":"d28fbb16-60e4-40c0-a12f-6eaded2dce5b","resolution":{"observed_at":"2026-08-15T22:25:33.462144Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.11297","last_updated":"2024-03-17T18:39:14Z","snapshot_observed_at":"2026-08-17T05:32:50.808710Z","submitted_at":"2024-03-17T18:39:14Z","title":"A Modified Word Saliency-Based Adversarial Attack on Text Classification Models","version":1},"cited_work":{"arxiv_id":"2403.11297","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.11297","snapshot_observed_at":"2026-08-15T22:25:33.319683Z","title":"A Modified Word Saliency-Based Adversarial Attack on Text Classification Models","venue":"cs.CL","work_id":"ca9b8443-076a-4c37-ba1e-afff0823ef5d","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.221393Z"},"links":{"cited_paper":"/paper/2403.11297","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:abb9182a110f543d431fd7d3f45f146af04bbc9a94c57cfb98de1b62d132b7a5","observation_id":"38e578b5-655b-44db-98f1-737f42b48809","resolution":{"observed_at":"2026-08-15T22:25:33.325533Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.448662Z","title":"Punctuation-level attack: Single-shot and single punctuation can fool text models","venue":null,"work_id":"218325c5-c22b-4d71-9952-3ef4987a15ca","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.224826Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:a22850ad50b8c80f25fc641354dc5c9c8720158ddcf3c49f6f9198819ef4f0ba","observation_id":"a21ef408-0606-4b85-818c-e92af0469111","resolution":{"observed_at":"2026-08-15T22:25:33.452530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.12641","last_updated":"2019-05-13T07:22:16Z","snapshot_observed_at":"2026-08-14T17:50:49.224322Z","submitted_at":"2018-11-30T06:55:22Z","title":"Transferable Adversarial Attacks for Image and Video Object Detection","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.12641","snapshot_observed_at":"2026-08-15T22:25:33.228268Z","title":"Transferable adversarial attacks for image and video object detection","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.228268Z"},"links":{"cited_paper":"/paper/1811.12641","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:4c81f5eb1910d20f439c70de73d0b7001360466b383d8c5ebf878a62b3dacf49","observation_id":"8991aba5-4cba-4e4e-9df4-7e69d309526f","resolution":{"observed_at":"2026-08-15T22:25:33.228268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.439411Z","title":"R., and King, I","venue":null,"work_id":"eaca560a-b210-457e-a42d-c3ba47baee3a","year":2021},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.231868Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:dc5df125deffe662942c323c353fb20333c6f0a951eeedfdc4af0a1207365813","observation_id":"603113fe-2bd5-4003-ac46-7c816e51c3ed","resolution":{"observed_at":"2026-08-15T22:25:33.442615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.430418Z","title":"Leap: Efficient and automated test method for nlp software","venue":null,"work_id":"0c2646e2-246e-4d55-b6a1-8a7e60a3c58d","year":2023},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.235080Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:e160d6ff22a65ce7dbf0cc98f0d960606bf40c6e469e7236be707ae38ed59208","observation_id":"fd4d8293-3a7b-484b-8e68-f0197a7f6c31","resolution":{"observed_at":"2026-08-15T22:25:33.433618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-08-16T18:57:50.930866Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-15T22:25:33.238553Z","title":"Qwen2 technical report","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.238553Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:d6da27e585b32c9d9fc530b78f84853ea900efee5a467a2d036faabbb17a0b96","observation_id":"56660a5c-2949-4ea1-b03e-95f8256702ea","resolution":{"observed_at":"2026-08-15T22:25:33.238553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04031","last_updated":"2024-07-01T14:25:23Z","snapshot_observed_at":"2026-08-17T07:16:08.436720Z","submitted_at":"2024-06-06T13:00:42Z","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04031","snapshot_observed_at":"2026-08-15T22:25:33.241825Z","title":"Jailbreak vision language models via bi-modal adversarial prompt","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.241825Z"},"links":{"cited_paper":"/paper/2406.04031","citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:b9e37088bf18a005f9487e30240c054df6ab1c32b446f69b30740d79af971bac","observation_id":"22d4788a-ca49-465a-bd61-75398dd055e2","resolution":{"observed_at":"2026-08-15T22:25:33.241825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.420835Z","title":"Adaptive image transformations for transfer-based adversarial attack","venue":null,"work_id":"5f9dce98-a4a3-408f-b3ef-b34fd85ffd16","year":2022},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.245216Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:921bb4d032dfc1bc1d5dc64c8affb86b629cdd2101926196a72eca035f9a0707","observation_id":"c2ce3a08-380b-45ec-bc58-54814870a3ab","resolution":{"observed_at":"2026-08-15T22:25:33.424152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.411732Z","title":"Word-level textual adversarial attacking as combinatorial optimization","venue":null,"work_id":"140eb308-2688-4f8f-aeec-ba2ae0c290d5","year":2020},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.248370Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:d560aea01f4571be6ca6bb8f09400e7760825f76c3bfd2ea493a0e014c8b1a0c","observation_id":"0c239b39-237d-45d5-9d5f-0c866fa1884b","resolution":{"observed_at":"2026-08-15T22:25:33.415137Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.401898Z","title":"Birch: an efficient data clustering method for very large databases","venue":null,"work_id":"4b6ab997-1422-42bf-9a3e-62f3991eb92f","year":1996},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.251801Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:50e6979a9c135bc8e4cce94e5d4fbc5247d26377c4aa37f667c8d74b16c6aaba","observation_id":"4e1252f2-d05e-41fe-930c-d99d7dcbbfa9","resolution":{"observed_at":"2026-08-15T22:25:33.405509Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.254847Z","title":"J., and LeCun, Y","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.254847Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:b1034b82de0057c72908c94aa60cf08b411de542fda0dda937baa09732feec1c","observation_id":"17ab8ee4-9f8d-4b81-87ce-0e649e1d6930","resolution":{"observed_at":"2026-08-15T22:25:33.254847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.385658Z","title":"Limeattack: Local explainable method for textual hard-label adversarial attack","venue":null,"work_id":"b3d4e42b-432e-492f-9d54-d10e4c3ec2bb","year":2024},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.258026Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:f91a6b7684be39f839a973a5d6c910bed976672f2c3647822fae01acba5b3ef7","observation_id":"cf2a9175-9460-4904-a587-5ac86e56502d","resolution":{"observed_at":"2026-08-15T22:25:33.389216Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:25:33.261216Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access","version":2},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-15T22:25:33.261216Z"},"links":{"citing_paper":"/paper/2505.07258"},"observation_digest":"sha256:5a16687190f366ce40cefcb8aab262d06fd54dbb54dfca31a2eebbeb50164226","observation_id":"9eed76fe-c343-4b99-b9c2-706f903283fd","resolution":{"observed_at":"2026-08-15T22:25:33.261216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.07258","last_updated":"2025-08-07T18:03:20Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-15T22:19:03.367996Z","submitted_at":"2025-05-12T06:19:59Z","title":"No Query, No Access"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":1,"verified_fuzzy":37},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 1 inbound Pith citation observation for arXiv:2505.07258."}