{"as_of":"2026-08-09T17:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5ce9d3808c8a37c4eeaf781cb515926b3c4cce8d49aff4a5c319c8e0d3679d10","coverage":[{"denominator":61,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":61,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:55:12.834660Z","state":"measured"},{"denominator":61,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":61,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.23313/citation-record","integrity":"/paper/2505.23313/integrity","json":"/paper/2505.23313/citation-record.json","paper":"/paper/2505.23313"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:20.297378Z","title":"Pedestrian attribute recognition: A survey,","venue":null,"work_id":"4cc6e96f-cc20-4cb1-aac1-478b649c1931","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:07.806900Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:c5f5a3e10587983ac482ea82ad874690f0f48a24b1436dee2d543ffa2cff05f5","observation_id":"d2d49b07-43d4-4324-95fd-d4a8e33bd478","resolution":{"observed_at":"2026-08-07T12:55:20.366543Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:20.109538Z","title":"Improving person re-identification by attribute and identity learning,","venue":null,"work_id":"4af2935e-4782-4dbb-96ba-b2769341f3a7","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:07.891959Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:64c2930c3099584a14669053612380b0510c7275ad30f54723083a705792e3c9","observation_id":"f09ac288-d69d-40da-b97f-53650d994c6f","resolution":{"observed_at":"2026-08-07T12:55:20.178658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.894535Z","title":"Attmot: improving multiple-object tracking by introducing auxiliary pedestrian attributes,","venue":null,"work_id":"8b770192-17ac-42aa-b10b-c704cdfb721f","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.052371Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:5e9561f4a496ce89d89b4ba04330db865d3eb170e6e16ac4e3fe776ecd38c882","observation_id":"53a77a22-94bc-45f1-af5d-c44187f8e553","resolution":{"observed_at":"2026-08-07T12:55:19.995912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.673108Z","title":"Attribute- guided pedestrian retrieval: Bridging person re-id with internal attribute variability,","venue":null,"work_id":"39c587c8-0079-4dd1-a55f-fac7772b4033","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.167927Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:9dff4f831209f73c2b6c8e9574500d2819964661089f9f226b9a9635213c7408","observation_id":"a0254c75-025b-4fe9-b663-0dbc4d75d537","resolution":{"observed_at":"2026-08-07T12:55:19.780063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.286439Z","title":"Attribute recognition by joint recurrent learning of context and correlation,","venue":null,"work_id":"8be3b95b-3104-4c33-b822-101581aaff80","year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.299983Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:51e3f94997d0bcb0d702f0eb2020fcf08a368e06f02b50616a00959c84c0313f","observation_id":"5098b420-ad0b-45c9-867f-39949d53c0df","resolution":{"observed_at":"2026-08-07T12:55:19.390486Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.072883Z","title":"A simple visual-textual baseline for pedestrian attribute recognition,","venue":null,"work_id":"271d57b6-09c9-4f24-a85c-00338d4e3a79","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.389045Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:fde647f56cb4c6eb6b7a4669acd1f7b08b05fa8c9d2ff13dafdfed1c8ee9be0e","observation_id":"07fa31e3-e5fc-4d12-9d78-697a7d9c35a9","resolution":{"observed_at":"2026-08-07T12:55:19.172573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.882453Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":"0695cc2c-0456-4716-a782-b66c6a452673","year":2021},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.475774Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:1a5791c86e79c28fde0a72e52de9f6c2033767d4e7f8b089781056dac6dd7c37","observation_id":"546f1743-07af-41e8-beb7-efaa0dface66","resolution":{"observed_at":"2026-08-07T12:55:18.990323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T12:55:08.561745Z","title":"Gpt-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.561745Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:a5a54086c004ead701ba190e46e8decefe84d0d74999f72b35206b82794eadae","observation_id":"9913ca98-f05e-489b-ae87-544ae76c770b","resolution":{"observed_at":"2026-08-07T12:55:08.561745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T12:55:08.636731Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.636731Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:6f3203db016d2268b97754c139e5e74b066ea278996719aea501854cd868ae4b","observation_id":"f9438499-5ce0-435d-8452-40cdd7760309","resolution":{"observed_at":"2026-08-07T12:55:08.636731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-07T12:55:08.702623Z","title":"Qwen technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.702623Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:3c9c28795b2ec3f5fbbaf633548709fc58712889f894d5c13be22a74a206d3d5","observation_id":"e3356fb2-3f32-47d9-8342-7b504cf91b5e","resolution":{"observed_at":"2026-08-07T12:55:08.702623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.699269Z","title":"Pedestrian attribute recognition via clip based prompt vision-language fusion,","venue":null,"work_id":"ead5bcd5-6411-4e40-92d7-6bb2a2e274ae","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.766370Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:8621f780fb7c45d68385f7c2bb5f7f12f49e3ec82a0f54aacf7fb93eefacd048","observation_id":"0b3a6d3c-44f2-4e9c-8bb2-077086ea8194","resolution":{"observed_at":"2026-08-07T12:55:18.769264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.521612Z","title":"Pedestrian attribute recognition: A new benchmark dataset and a large language model augmented framework,","venue":null,"work_id":"2f282a1c-7471-4c82-93c9-80ef66525882","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.831564Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:512f94cc2086e361d417d62548231d1659820cfd9e8da243a512203d0f57fe87","observation_id":"4aaeb43d-2707-4c5a-b8be-af4b8fb247bd","resolution":{"observed_at":"2026-08-07T12:55:18.621107Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.354133Z","title":"Physical adversarial attack meets computer vision: A decade survey,","venue":null,"work_id":"517137e5-b004-4cec-8311-cbfd090867f9","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.961165Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:64125f5f308cee70b0ffae9b929a7e8214cf4eb4921c71abecc9dfbef116337b","observation_id":"b6409c07-a1bf-4751-9f4c-51ac73d81914","resolution":{"observed_at":"2026-08-07T12:55:18.442000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.135439Z","title":"Mutual-modality adversarial attack with semantic perturbation,","venue":null,"work_id":"27a30727-3f1f-4ac5-91f6-85a8cec0f102","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.053116Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:37fa5103809182d87113c78c4b0d80db6154350599d4b5cacf54063f4bdb1ef6","observation_id":"21308daa-958a-44d1-bac8-e0cc75605786","resolution":{"observed_at":"2026-08-07T12:55:18.239586Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.915133Z","title":"Diffattack: Evasion attacks against diffusion-based adversarial purification,","venue":null,"work_id":"e19d4363-7f96-4caf-a8e8-9d76dd6ddc80","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.119928Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:536cc437f37ec9c6e21832d58c1a18eb6af0b29fe22ad3f9eaefd24bb480b776","observation_id":"53af098e-945c-42cb-8d38-bae1e3a7a09a","resolution":{"observed_at":"2026-08-07T12:55:18.008202Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.677026Z","title":"Strong transferable adversar- ial attacks via ensembled asymptotically normal distribution learning,","venue":null,"work_id":"a5bab545-8741-4ac1-b8a0-ac7c0b1a8ffe","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.221075Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:e4eda3c8034102b6de96e6e6948d1bf8b444453cd4ac129805e77f98fbf7cf78","observation_id":"bdd6f855-44ea-4644-ae4f-316e52394b21","resolution":{"observed_at":"2026-08-07T12:55:17.785597Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.474054Z","title":"Stealthiness assessment of adversarial perturbation: From a visual perspective,","venue":null,"work_id":"d09e2285-38f9-4ded-962b-837d3a1d6fdf","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.286661Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:e1854faca7b1d881b335988a1ce3cb23dcef1e8c15e2fd8ce71d5c410b21faa8","observation_id":"57d22da9-4755-4d9b-9a16-eb0c155e07f6","resolution":{"observed_at":"2026-08-07T12:55:17.567589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.259894Z","title":"Pedestrian attribute recog- nition at far distance,","venue":null,"work_id":"d100db85-38b3-4c31-a793-703e4429d98a","year":2014},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.362625Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:6c9269247ed6ece8277a37a110e9bf6d6365fd78f927d9e233a6ea320a7ad97c","observation_id":"0b32dded-4937-40be-890b-323ab10272f8","resolution":{"observed_at":"2026-08-07T12:55:17.360976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.016765Z","title":"Hydraplus-net: Attentive deep features for pedestrian analysis,","venue":null,"work_id":"e7fce049-c05c-492d-bc03-5ef5ed4e8e26","year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.463690Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:4e0bd463bce6b6c952e6d7c711f542b18f4e1e026565a8db7d0c3eb2e37d0caa","observation_id":"b727f4b4-2970-406d-b8a4-11a348a95ccd","resolution":{"observed_at":"2026-08-07T12:55:17.120800Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.850241Z","title":"A richly annotated pedes- trian dataset for person retrieval in real surveillance scenarios,","venue":null,"work_id":"03063c73-b3c6-4812-b729-d1f4970ae771","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.538834Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:7514277267ff899f5a63835c9ee629bafa22d217ee652960930f3f5f3c8efeb3","observation_id":"aa8d0c78-e2d1-4233-ab3f-2bfa027796f0","resolution":{"observed_at":"2026-08-07T12:55:16.916561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-07T12:55:09.630931Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.630931Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:40eb42bd9ced8d31bcd7996d3f4d9425342660f9689439c4796ae8dcc2ab6dff","observation_id":"d798fe70-5b33-42d2-b10c-a196fbd67019","resolution":{"observed_at":"2026-08-07T12:55:09.630931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T12:55:09.712866Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.712866Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:446e43472a4c9d0d69d01a4a440f9e93af62bd36433f4279534bb02d5ae13f49","observation_id":"c226c5cc-37fb-4fc8-b132-817e723d295a","resolution":{"observed_at":"2026-08-07T12:55:09.712866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:09.805219Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.805219Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:ff674303aecfe98f780320ac0540b10277b211b5b66ec6f6011399cc288abdb5","observation_id":"32612ef9-278c-4b4d-b29c-e9da96496992","resolution":{"observed_at":"2026-08-07T12:55:09.805219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:09.859867Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.859867Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:fd2744662d4c795f081bad31b8986339d255cc7b6123463a5f2bde6fb534fff5","observation_id":"119d7d96-6a6b-42cf-8de1-8805451d94eb","resolution":{"observed_at":"2026-08-07T12:55:09.859867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:09.917413Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.917413Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:a5e645711923af64cf5b3a96e9fd5af2e4eed186a6554c7688ee9f1b11d46a3d","observation_id":"0f2d89f8-6451-4879-8351-9919f52a2aea","resolution":{"observed_at":"2026-08-07T12:55:09.917413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.002949Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.002949Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:8ee3c85b58c0b3754e2ea069c0fbe1a63c11076b3ac136cb6b364b7c648cd8da","observation_id":"41636ec8-9540-40d5-bcce-99cb07c75266","resolution":{"observed_at":"2026-08-07T12:55:10.002949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.652795Z","title":"Advdrop: Adversarial attack to dnns by dropping information,","venue":null,"work_id":"231d0883-16ad-4f43-aaa8-6b566458372a","year":2021},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.062313Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:aa76133d009217901f1aada27b593240ac398dbe03d359c2b22c35db9a4285f5","observation_id":"95fc24e1-a7d1-4892-9845-ecb17882b13c","resolution":{"observed_at":"2026-08-07T12:55:16.730328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.472520Z","title":"The best protection is attack: Fooling scene text recognition with minimal pixels,","venue":null,"work_id":"75e9a7a8-1f5d-499a-a334-d913c66c15f0","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.132479Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:0e10fdef69a9e88af21a84a5e306a23f333585d7bd33588c74a61c4e17c7f97f","observation_id":"b34b6c1f-f0fc-4ea5-84b1-40b8939da234","resolution":{"observed_at":"2026-08-07T12:55:16.546342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T12:55:10.204398Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.204398Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:a0437d8dcb973452ae8ea013fc3edc5e59de2412df238c77ff7bab0c63b7ed3c","observation_id":"59faab4e-f9db-4771-8347-94733c790ad2","resolution":{"observed_at":"2026-08-07T12:55:10.204398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-07-06T05:43:27.961693Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-07T12:55:10.270586Z","title":"Ensemble adversarial training: Attacks and defenses,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.270586Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d57aa2949a7821776d3a01ce0520d85bd6b3acaecd864e1e0629ecfee9e3108b","observation_id":"a5f60b0f-6f56-4bdc-982a-b85ac909052c","resolution":{"observed_at":"2026-08-07T12:55:10.270586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-07-06T06:07:07.703002Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-07T12:55:10.335984Z","title":"Counter- ing adversarial images using input transformations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.335984Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:f2954671b118c7e85c9377816eefa2c9e6f6a263722edbc810ac74369e412c7d","observation_id":"810ed97e-0ff1-4639-a9dc-d9002070e885","resolution":{"observed_at":"2026-08-07T12:55:10.335984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-04T13:57:53.214741Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T12:55:10.431484Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.431484Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:97c18fc0157c7e0032c36578a7b8378c00a75c994489bb6f8cc8a90c46d21b6e","observation_id":"fbcac3b2-2a76-475f-91c1-5fc107e47f68","resolution":{"observed_at":"2026-08-07T12:55:10.431484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.500260Z","title":"Defense against adversarial attacks using high-level representation guided denoiser,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.500260Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d1d1ae077582e6c6f8387f148da96958eb732a650fc64ffd3e328f3515b11dfd","observation_id":"fcdb0f9b-d9e6-4707-b439-4dff727c29e2","resolution":{"observed_at":"2026-08-07T12:55:10.500260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.565856Z","title":"Enhancing the transferability of adversarial attacks through variance tuning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.565856Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:cc834cf50772cb7612733ff3ce7a17cd9c195a6e470768623e8b46fa7414eb44","observation_id":"32ea8f98-4d7e-4a35-a57c-d93206eb77ca","resolution":{"observed_at":"2026-08-07T12:55:10.565856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-07-06T08:14:59.387021Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-07T12:55:10.617905Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.617905Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:6be0f9665152c862128ba9bbca3538660e231d066ee9299dcc8eeac59b07302a","observation_id":"b6c0e771-5534-4b64-ac33-1710277972ac","resolution":{"observed_at":"2026-08-07T12:55:10.617905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.271586Z","title":"Certified adversarial robustness via randomized smoothing,","venue":null,"work_id":"0a4dbbb3-fa4e-406d-9b05-d14154cb458a","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.673746Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:3ab13c6c4d322a229ae2f0b3757f926e8076c80de75a3fd4980c0f110708be5c","observation_id":"54d9c871-9084-4c1e-b130-11fc3e153998","resolution":{"observed_at":"2026-08-07T12:55:16.384539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.092354Z","title":"A robust open-set multi- instance learning for defending adversarial attacks in digital image,","venue":null,"work_id":"c4945e05-22fc-47b8-bf07-3ec7ad23973e","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.733600Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:5bc17570b494286abd6e25ff5cd4ff7240990a5e217d56acdf407d6b47f973ec","observation_id":"41893b0e-d7c9-437b-aab5-1ebee2571871","resolution":{"observed_at":"2026-08-07T12:55:16.171370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.786337Z","title":"Generative adversarial nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.786337Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:b8a0549d154e9db57290801a2018871e55f873657cad8fb2b867e1ea328f0661","observation_id":"f0b61a8b-942d-441d-8b96-e1166e7b4952","resolution":{"observed_at":"2026-08-07T12:55:10.786337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02610","last_updated":"2019-02-14T15:53:22Z","snapshot_observed_at":"2026-08-09T12:14:36.195423Z","submitted_at":"2018-01-08T18:50:13Z","title":"Generating Adversarial Examples with Adversarial Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02610","snapshot_observed_at":"2026-08-07T12:55:10.881029Z","title":"Gener- ating adversarial examples with adversarial networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.881029Z"},"links":{"cited_paper":"/paper/1801.02610","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:b80b1083a139999b17b199784548bbbb6f1d747b76bcbe05ffef5187211512e6","observation_id":"031ad194-f71c-43c8-8b80-a96ca3aa4ea8","resolution":{"observed_at":"2026-08-07T12:55:10.881029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.07793","last_updated":"2020-02-07T18:11:58Z","snapshot_observed_at":"2026-07-06T07:46:31.893420Z","submitted_at":"2019-04-16T16:26:19Z","title":"AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.07793","snapshot_observed_at":"2026-08-07T12:55:10.951615Z","title":"At-gan: A generative attack model for adversarial transferring on generative adversarial nets,","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.951615Z"},"links":{"cited_paper":"/paper/1904.07793","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:226d1d98955f74d31c269788f644ed672ca756b374d34c5cd82ba3a067cede83","observation_id":"a6ba3ab9-aa0e-4c9d-9373-801e1d53d23a","resolution":{"observed_at":"2026-08-07T12:55:10.951615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.922879Z","title":"Label-only model inversion attacks: Attack with the least information,","venue":null,"work_id":"f6cfc3ae-6920-4cd1-a7ad-9b53ebde728a","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.026806Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:f095f22207bd35bbd44beab900b15feea7c6ab708c97c57f8c3a05dcb2984d6b","observation_id":"45993bc7-8ef5-4f53-bb5b-1c8682b67a4e","resolution":{"observed_at":"2026-08-07T12:55:16.011340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.746371Z","title":"Robust and general- ized physical adversarial attacks via meta-gan,","venue":null,"work_id":"23f3d540-2a1a-4f88-bd6b-ffde620e1413","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.105486Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d75410743a0187cd27b741731b7c6ab65860a4fa0799fb943e1700f7df793842","observation_id":"5b4895db-fd06-4019-97c7-d3f49e021f3c","resolution":{"observed_at":"2026-08-07T12:55:15.830505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.596603Z","title":"Hierarchical reasoning network for pedestrian attribute recognition,","venue":null,"work_id":"2f17aada-f822-4e4a-9cf3-ef707b3a5c0b","year":2020},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.172179Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:c5f8cab59d33dd0299dd57041fd264c44dd7b251349276648006a4208dc26533","observation_id":"59f622eb-4e1c-42a9-a95c-9a95528ee09e","resolution":{"observed_at":"2026-08-07T12:55:15.670005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.493592Z","title":"Multi-task cnn model for attribute prediction,","venue":null,"work_id":"9ea20e3d-153a-470f-be82-2acb4cb06d23","year":1949},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.239680Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d3db9eb1a83f5786bcb2f1383fdb0ea8eb9306a79c0d0d9d571d0d20ab55a776","observation_id":"63b0ac36-e8dc-41f0-a9a7-6cb289a65804","resolution":{"observed_at":"2026-08-07T12:55:19.566482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.452274Z","title":"Recurrent attention model for pedestrian attribute recognition,","venue":null,"work_id":"6135e03a-ecf8-48d2-9b06-fb69cfd32003","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.331606Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:47f3d6eaf951ebc3966857963c70e96a35b4489d2bf9fe6d42c1b51f06d14f75","observation_id":"257c68fc-08ef-40e9-9fff-f9ba833190e8","resolution":{"observed_at":"2026-08-07T12:55:15.516778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.321874Z","title":"Correlation graph convolu- tional network for pedestrian attribute recognition,","venue":null,"work_id":"8092155f-8db4-4261-a3bd-7c009b17b004","year":2020},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.391103Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:af4740e91ed9573ec89db4947e742724584e3be008754c8712e79dc8fd215044","observation_id":"2212bc88-3b32-4615-9713-8b646a07e70e","resolution":{"observed_at":"2026-08-07T12:55:15.409412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.132409Z","title":"Relation-aware pedestrian attribute recognition with graph convolutional networks,","venue":null,"work_id":"03c2c7d3-3aae-4649-a7cf-84476ccd4ddb","year":2020},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.458119Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:b362b3942669272289d2142c441dd0112bca08c903fc8a714ac60821c2789fa0","observation_id":"303e3bb3-8537-4c4c-a4d0-288816fec0f9","resolution":{"observed_at":"2026-08-07T12:55:15.201081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.951065Z","title":"Visual attention consistency for human attribute recognition,","venue":null,"work_id":"237e34ef-d621-43a7-8f48-c66b95f3eca5","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.572076Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:db8473193a5342a8db2b6c8f62934c1d1b02e14d7ceb86e00b76c4cf3f59a63a","observation_id":"cba168e1-1479-43b6-a408-a195e1114945","resolution":{"observed_at":"2026-08-07T12:55:15.031673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-07T12:55:11.719523Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.719523Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:619abf3a981c4c843be91472223cc45cd78f37ae91ac7bc074399d5ad71fc3cb","observation_id":"b9753cdc-2d00-4ffd-8738-e804e474e763","resolution":{"observed_at":"2026-08-07T12:55:11.719523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.805299Z","title":"Learning clip guided visual-text fusion transformer for video-based pedestrian attribute recog- nition,","venue":null,"work_id":"aa8f56e2-7b5e-45fc-b719-d138da62d154","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.869936Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:ab93441beb2e906ff98959c6be19e4208e9074e8e9806206181c1e5f7d144299","observation_id":"9a7c89be-1730-4fd0-8878-21ccb9baeffb","resolution":{"observed_at":"2026-08-07T12:55:14.873878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17929","last_updated":"2024-04-27T14:43:32Z","snapshot_observed_at":"2026-08-05T17:17:37.619391Z","submitted_at":"2024-04-27T14:43:32Z","title":"Spatio-Temporal Side Tuning Pre-trained Foundation Models for Video-based Pedestrian Attribute Recognition","version":1},"cited_work":{"arxiv_id":"2404.17929","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.17929","snapshot_observed_at":"2026-08-07T12:55:13.599049Z","title":"Spatio-Temporal Side Tuning Pre-trained Foundation Models for Video-based Pedestrian Attribute Recognition","venue":"cs.CV","work_id":"123ff3b8-8d15-416a-bf09-59ef3848b1d3","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.984212Z"},"links":{"cited_paper":"/paper/2404.17929","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:18057321b0d0ff666cbae0fb84a1235229de17517b8ebba25fcebe3382ee63a6","observation_id":"9b16ba13-267c-4424-be36-7dc7278505f3","resolution":{"observed_at":"2026-08-07T12:55:13.693731Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.629694Z","title":"Drformer: Learning dual relations using trans- former for pedestrian attribute recognition,","venue":null,"work_id":"0f504000-c714-4259-896c-ec761f2b49a8","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.076772Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d9ed923c8f25a824c67bdc228a28968db77ad6e41844346fea3e821b5fee1799","observation_id":"a0c4daa8-72b6-4727-b5a0-841c36b52a23","resolution":{"observed_at":"2026-08-07T12:55:14.720544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.10018","last_updated":"2025-08-06T11:01:24Z","snapshot_observed_at":"2026-08-07T16:05:59.181360Z","submitted_at":"2025-04-14T09:22:16Z","title":"RGB-Event based Pedestrian Attribute Recognition: A Benchmark Dataset and An Asymmetric RWKV Fusion Framework","version":2},"cited_work":{"arxiv_id":"2504.10018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.10018","snapshot_observed_at":"2026-08-07T12:55:13.411445Z","title":"RGB-Event based Pedestrian Attribute Recognition: A Benchmark Dataset and An Asymmetric RWKV Fusion Framework","venue":"cs.CV","work_id":"4e513bcf-2217-46a8-90b5-128d57fede3c","year":2025},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.130086Z"},"links":{"cited_paper":"/paper/2504.10018","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:f0b9388708df7b948a9c22de3c38a0adf74dcd3669241ed60f882ec3877a04cd","observation_id":"e5e4e3f9-ad90-4098-b8c9-995953e34216","resolution":{"observed_at":"2026-08-07T12:55:13.505778Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.01640","last_updated":"2025-09-02T02:34:38Z","snapshot_observed_at":"2026-08-06T16:25:29.440902Z","submitted_at":"2023-12-04T05:42:56Z","title":"SequencePAR: Understanding Pedestrian Attributes via A Sequence Generation Paradigm","version":2},"cited_work":{"arxiv_id":"2312.01640","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.01640","snapshot_observed_at":"2026-08-07T12:55:13.244845Z","title":"SequencePAR: Understanding Pedestrian Attributes via A Sequence Generation Paradigm","venue":"cs.CV","work_id":"cfb24a30-ae93-472a-affd-66df63f163cd","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.211952Z"},"links":{"cited_paper":"/paper/2312.01640","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:8606b6d53737c0ac87547032b1c2c12de795593bf5dc21aa13e3e62de24bb474","observation_id":"e2aa4333-6ade-4e1e-918d-5c833d29c217","resolution":{"observed_at":"2026-08-07T12:55:13.329802Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.478536Z","title":"Cdul: Clip- driven unsupervised learning for multi-label image classification,","venue":null,"work_id":"f6c21120-e12b-4819-b191-e6ba7598964b","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.280264Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:73cb0ba176fb5eea74933c83b85ffa2cc0b39e963366e27f026172e9b2a4283c","observation_id":"e779b876-01e8-496f-b1cd-4e2f85717534","resolution":{"observed_at":"2026-08-07T12:55:14.536559Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:12.373287Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.373287Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:94983535d5d7bdd4af563bfe30065f7c17f25a1ae19183db22282f2ef856ccc7","observation_id":"967f5bfd-1364-415e-ab92-8163487bd8c0","resolution":{"observed_at":"2026-08-07T12:55:12.373287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.202691Z","title":"Boosting adversarial transferability via gradient relevance attack,","venue":null,"work_id":"840751d0-62fd-45b3-a98e-3479890650d7","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.461377Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:ba1c6956e9789894aceb5513ae408cfa1f8349615236af279b941026b508678d","observation_id":"0ad43ab4-627c-4268-8c44-bd759702d692","resolution":{"observed_at":"2026-08-07T12:55:14.352062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:12.565811Z","title":"Enhancing adversarial trans- ferability through neighborhood conditional sampling,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.565811Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:37372a3a2cb0692115dae5ad5d0104fddabd42fed51d28ea05998895e60b37a9","observation_id":"dd943d0b-3b9a-4fe6-aee5-0729fb666ced","resolution":{"observed_at":"2026-08-07T12:55:12.565811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:12.664773Z","title":"On the importance of initialization and momentum in deep learning,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.664773Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:bcab62823ea5bfcf28483f629abc5c42e51888bce424c29145a417d99da2fbb9","observation_id":"4b72d36b-4fbe-4ff8-8d8e-0624b0c903e0","resolution":{"observed_at":"2026-08-07T12:55:12.664773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:13.949934Z","title":"An empirical study of mamba-based pedestrian attribute recognition,","venue":null,"work_id":"e4217bac-7c30-4031-b164-eb7935f7d2e7","year":null},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.787579Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:90cfb755cda84a82eb67a6489db24f584179d7c41a3f0d1912d8c4a94a6282a4","observation_id":"c9152e08-d81a-4655-b76b-17dc42f00fc3","resolution":{"observed_at":"2026-08-07T12:55:14.048162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10374","last_updated":"2024-12-03T04:25:30Z","snapshot_observed_at":"2026-07-06T18:46:14.144689Z","submitted_at":"2024-07-15T00:48:06Z","title":"An Empirical Study of Mamba-based Pedestrian Attribute Recognition","version":2},"cited_work":{"arxiv_id":"2407.10374","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.10374","snapshot_observed_at":"2026-08-07T12:55:12.952482Z","title":"An Empirical Study of Mamba-based Pedestrian Attribute Recognition","venue":"cs.CV","work_id":"2241b145-d475-40ed-94d5-f71b3c7f82e6","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.834660Z"},"links":{"cited_paper":"/paper/2407.10374","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:4a2115f14d0357bd3fe652ddb28b27647d2208a605a6f918493f1fc00fdfb178","observation_id":"df68cdf9-e855-4d80-8b57-9346c2613b2d","resolution":{"observed_at":"2026-08-07T12:55:13.035170Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition"},"reference_resolution":{"displayed":61,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":23,"verified_exact":3,"verified_fuzzy":34},"total_outbound_references":61},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 61 of 61 outbound references and 0 inbound Pith citation observations for arXiv:2505.23313."}