{"as_of":"2026-08-20T01:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:615adc75b4f242395432bf75e85eb5a3a1ec748f7005bfa324ef38ed5987d245","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:25:00.748079Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.24703/citation-record","integrity":"/paper/2505.24703/integrity","json":"/paper/2505.24703/citation-record.json","paper":"/paper/2505.24703"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:05.002769Z","title":"Krishnamurthy, M","venue":null,"work_id":"e61afc0e-81f2-44b5-9cdd-1c579327a322","year":2022},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.290078Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:96b07d1ef015177a7a84f7326671c579abe813e07dfcf724195395973890e17f","observation_id":"75456b3d-2608-4152-a47f-d9e94a1399b8","resolution":{"observed_at":"2026-08-07T12:25:05.063032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:04.900452Z","title":"Salman Asif, Srikanth V","venue":null,"work_id":"0c745bbe-936e-4918-9fb8-f508ca2bf09a","year":2023},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.330705Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:f6c0d25ee5504e7c96429bd55c8b8bb4ed9946a2b68c7208111895bc76b5feed","observation_id":"c11202d1-be54-4eae-a7e8-382e2adfa44c","resolution":{"observed_at":"2026-08-07T12:25:04.939591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:04.779902Z","title":"Asymmet- ric Loss For Multi-Label Classification","venue":null,"work_id":"f21175e8-7477-424a-bde8-3ae70401710a","year":2021},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.365932Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:9227dba385b2043cb92b10e8b7f90c3d311bcd29c2cf3996106c24896ac6f5c4","observation_id":"53f0326f-20e1-4948-b0c4-6b3ff2d7005d","resolution":{"observed_at":"2026-08-07T12:25:04.849869Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-16T02:01:26.676409Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-07T12:24:58.494232Z","title":"Brown, Dandelion Man´e, Aurko Roy, Mart´ın Abadi, and Justin Gilmer","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.494232Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:90415f45bfa9e1793ff90c7d4679cf59512932dcad9d8dc421b0c2bdb0c854a2","observation_id":"1ffeb14c-197a-401e-bcf9-7e4ba70b8255","resolution":{"observed_at":"2026-08-07T12:24:58.494232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:04.651338Z","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","venue":null,"work_id":"0dc63d1b-7c45-4965-90e5-6132388d2ea3","year":2017},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.581405Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:5256c32ed011a94192f63dbb614589592edbf63f87df0f0037c2f7a3d3e1823c","observation_id":"5928bfc2-6204-443b-a0de-6688c4958445","resolution":{"observed_at":"2026-08-07T12:25:04.709199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.06693","last_updated":"2020-09-25T15:51:40Z","snapshot_observed_at":"2026-08-16T02:25:43.398982Z","submitted_at":"2020-03-14T19:57:31Z","title":"Certified Defenses for Adversarial Patches","version":2},"cited_work":{"arxiv_id":"2003.06693","doi":null,"metadata_source":"pith","pith_arxiv_id":"2003.06693","snapshot_observed_at":"2026-08-07T12:25:01.996400Z","title":"Certified Defenses for Adversarial Patches","venue":"cs.CR","work_id":"151f5333-d913-463b-b341-9b71794ac344","year":2020},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.618005Z"},"links":{"cited_paper":"/paper/2003.06693","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:a7ca4e82709031f34d2597090c9a388dd1f95fe0cbba9d5120849353c69f9fb0","observation_id":"ccebc7ea-6521-4bdb-bc1f-5d0288d71d92","resolution":{"observed_at":"2026-08-07T12:25:02.072575Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:04.556183Z","title":"Cohen, Elan Rosenfeld, and J","venue":null,"work_id":"1d2ecba7-800f-4a8d-adae-03143fe83b56","year":null},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.650677Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:bae8f8c898ddc6d220962da47d135971612b97ee257f4b91b56b0b7ae59045ff","observation_id":"d92e671c-713b-4f79-ace6-adf6d0d285a9","resolution":{"observed_at":"2026-08-07T12:25:04.614985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.04552","last_updated":"2017-11-29T14:51:40Z","snapshot_observed_at":"2026-08-13T11:54:46.030796Z","submitted_at":"2017-08-15T15:21:53Z","title":"Improved Regularization of Convolutional Neural Networks with Cutout","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.04552","snapshot_observed_at":"2026-08-07T12:24:58.734603Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.734603Z"},"links":{"cited_paper":"/paper/1708.04552","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:74bfc24247a9fbd29287e0a0fddc97112264c0fc8755d9ef6e2f666775608190","observation_id":"96452744-a6a1-4bb2-a881-e47fb0f75063","resolution":{"observed_at":"2026-08-07T12:24:58.734603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-16T09:25:53.087782Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-07T12:24:58.795839Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.795839Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:d2560538ed5b68c42aa57a5af412a9c1669cab28efaa01d1978894727c675c57","observation_id":"a3ae16b9-15b5-4c3c-903a-6e62f7c9752a","resolution":{"observed_at":"2026-08-07T12:24:58.795839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:04.425513Z","title":"Mul- tiClass Object Classification in Video Surveillance Systems - Experimental Study","venue":null,"work_id":"1c49c679-8aeb-4aec-9cff-fdc84e5adb64","year":2013},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.869257Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:44453d322978295c4b9148510a79ed0cd514d969b5e8738b7d49e24a6f89bf71","observation_id":"1589c3d0-8a5a-430a-a741-58f5b1e2f248","resolution":{"observed_at":"2026-08-07T12:25:04.490681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:04.292507Z","title":null,"venue":null,"work_id":"6287a83f-98fd-4775-8285-e156a55ccc1f","year":2010},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.963821Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:c94ed1fe3c20115d09879c506775dabcf68c11991ebab88e723667d1eef484b4","observation_id":"49e24b47-823b-49b9-be37-95ef75ed6327","resolution":{"observed_at":"2026-08-07T12:25:04.354017Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:04.138738Z","title":"Robust Physical-World Attacks on Deep Learning Visual Classification","venue":null,"work_id":"803bb73c-15d4-433d-9648-0d53e58ae1e8","year":2018},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.031506Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:f577cddb07f991ac42821017076a1bdafbc65054ac4887282643a253f40f7262","observation_id":"46bd6aef-3827-4b34-806b-910fbeecb41b","resolution":{"observed_at":"2026-08-07T12:25:04.220045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.994543Z","title":"Recognizing Prod- ucts: A Per-exemplar Multi-label Image Classification Approach","venue":null,"work_id":"92147f74-7b9e-429a-a70a-9980c1dcd35d","year":2014},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.101758Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:de1797849de2ba1b4cde070c1e85b7a8bae5d152ab4bff461fba743916f7b025","observation_id":"2118b928-b281-40ac-8697-c160f4d6ba10","resolution":{"observed_at":"2026-08-07T12:25:04.069259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.891318Z","title":"On Visible Adversarial Perturbations & Digital Watermarking","venue":null,"work_id":"a0058ac5-e798-4a24-95a3-8d916883a811","year":2018},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.169952Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:66adb30c4ac2637eda64a2a368f41b5e95efa41593bba9ab5de46b53b179cb73","observation_id":"904a617a-3f77-4a1f-a67a-5a7ebab2ac4b","resolution":{"observed_at":"2026-08-07T12:25:03.940328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.01111","last_updated":"2022-10-03T17:50:57Z","snapshot_observed_at":"2026-08-16T16:27:14.857407Z","submitted_at":"2022-10-03T17:50:57Z","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2210.01111","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.01111","snapshot_observed_at":"2026-08-07T12:25:01.864601Z","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","venue":"cs.CR","work_id":"4e7b13d7-dc2c-42ec-8957-49e188b42d6b","year":2022},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.255710Z"},"links":{"cited_paper":"/paper/2210.01111","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:991a6da134b66c8a8a792ed92569bd49f91182215636982a41972005bb82c061","observation_id":"20962e19-3ce2-4b3f-8171-1b0d0a796588","resolution":{"observed_at":"2026-08-07T12:25:01.893673Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.780030Z","title":"Action-Slot: Visual Action-Centric Representations for Multi- Label Atomic Activity Recognition in Traffic Scenes","venue":null,"work_id":"ab624c8c-4edc-4997-9300-5a8811bdbb72","year":2024},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.356202Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:d1b4c236566f196db8551837423cdf5ad78dd9498f692471235eb00a0c66baf1","observation_id":"58d01bcb-ee5f-4829-9086-1b9209a62634","resolution":{"observed_at":"2026-08-07T12:25:03.835194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.10733","last_updated":"2021-01-08T06:36:56Z","snapshot_observed_at":"2026-08-06T01:19:30.817572Z","submitted_at":"2020-02-25T08:39:46Z","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","version":3},"cited_work":{"arxiv_id":"2002.10733","doi":null,"metadata_source":"pith","pith_arxiv_id":"2002.10733","snapshot_observed_at":"2026-08-07T12:25:01.731700Z","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","venue":"cs.LG","work_id":"c7ba3859-f66a-4082-9e2e-66b51dca648d","year":2020},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.381974Z"},"links":{"cited_paper":"/paper/2002.10733","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:dc9a13d4bf8d5ae822b5f0f62daca1975094e1081367462c2d6f9b0d5ee60c71","observation_id":"56f61f24-0e4a-4ff4-883b-277ecea441e7","resolution":{"observed_at":"2026-08-07T12:25:01.791349Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.674659Z","title":"A Survey of Convolutional Neural Networks: Analysis, Appli- cations, and Prospects.IEEE Transactions on Neural Networks and Learning Systems, 33(12):6999–7019, 2022","venue":null,"work_id":"d5a6a17f-75ba-4d80-981e-09f8aaaaf346","year":2022},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.414059Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:3f28f14aea1b2f3e90030f43cdbf8ca41ec2e912186d83d7bf8da997bd291c15","observation_id":"ffc74b59-ac97-4f6c-8220-50b9b07dfdb1","resolution":{"observed_at":"2026-08-07T12:25:03.724021Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1405.0312","last_updated":"2015-02-21T01:48:49Z","snapshot_observed_at":"2026-07-06T03:42:37.507458Z","submitted_at":"2014-05-01T21:43:32Z","title":"Microsoft COCO: Common Objects in Context","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1405.0312","snapshot_observed_at":"2026-08-07T12:24:59.475107Z","title":"Lawrence Zitnick, and Piotr Doll ´ar","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.475107Z"},"links":{"cited_paper":"/paper/1405.0312","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:73d5af480885d7d633179e32c79cca5765f5840dbf14ab4e7ab5ffecd5501ed5","observation_id":"ac4f3753-3e91-48a4-9e28-aa37f37e23f6","resolution":{"observed_at":"2026-08-07T12:24:59.475107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.10834","last_updated":"2021-07-22T17:49:25Z","snapshot_observed_at":"2026-08-19T11:48:21.724838Z","submitted_at":"2021-07-22T17:49:25Z","title":"Query2Label: A Simple Transformer Way to Multi-Label Classification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.10834","snapshot_observed_at":"2026-08-07T12:24:59.536469Z","title":"Query2Label: A Simple Transformer Way to Multi-Label Classi- fication, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.536469Z"},"links":{"cited_paper":"/paper/2107.10834","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:0a375b058fbf061bcd0816d8ec76663b918bb1e64a6a1a7fb3bef98da7f31fa3","observation_id":"0fd6c77f-86e5-433f-8c74-4ac0ad394d3e","resolution":{"observed_at":"2026-08-07T12:24:59.536469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T12:24:59.626489Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.626489Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:5f1ac5f48940f297f3ebbeff3811476c724ee0995aaa26c0e5a846cabc6d32db","observation_id":"697d86f6-523a-43a5-827a-666575b521da","resolution":{"observed_at":"2026-08-07T12:24:59.626489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.569486Z","title":"Semantic-Aware Multi- Label Adversarial Attacks","venue":null,"work_id":"f58750c7-a007-4172-b7a5-63ebab219dd5","year":2024},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.709365Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:1917c3ff48fcb16f49ca095a034af03b6c4ec46962c7d89b752267933bdf7d29","observation_id":"0b62fa44-7fa6-45f2-aca9-979550b77be1","resolution":{"observed_at":"2026-08-07T12:25:03.615771Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.451173Z","title":"Do- main Knowledge Alleviates Adversarial Attacks in Multi-Label Classifiers.IEEE Transactions on P attern Analysis and Machine Intelligence, 44(12):9944–9959, 2022","venue":null,"work_id":"ffd276f7-aa96-4955-97b8-2f862e57a50b","year":2022},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.777445Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:13c48b1db28a323ee1463626176c00657172cd41af17e0b50a70e3337749f66a","observation_id":"2fa7600f-0d31-41e3-a4ed-b1a483d1643e","resolution":{"observed_at":"2026-08-07T12:25:03.509457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.257654Z","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","venue":null,"work_id":"86098794-5e28-4843-be0f-e0304f9058e8","year":null},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.841007Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:204fae23c3d334aa9946a34d91f4ac840afa96ab51965d7e4cc99bb36868e36c","observation_id":"ef3d7911-ab4b-46f9-adc0-4e72f2d73ca2","resolution":{"observed_at":"2026-08-07T12:25:03.341491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.01216","last_updated":"2018-11-19T05:45:03Z","snapshot_observed_at":"2026-08-14T18:56:08.406551Z","submitted_at":"2018-07-03T14:48:05Z","title":"Local Gradients Smoothing: Defense against localized adversarial attacks","version":2},"cited_work":{"arxiv_id":"1807.01216","doi":null,"metadata_source":"pith","pith_arxiv_id":"1807.01216","snapshot_observed_at":"2026-08-07T12:25:01.439200Z","title":"Local Gradients Smoothing: Defense against localized adversarial attacks","venue":"cs.CV","work_id":"da715e5c-af79-4bc4-a735-a71d9fe09136","year":2018},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.037114Z"},"links":{"cited_paper":"/paper/1807.01216","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:8c6f2d54b1e234db00d1c3476d5235948ae5cb9c2eaa30c6323891cc131a571e","observation_id":"3bd8689f-d062-4569-bbae-310f9b126e3a","resolution":{"observed_at":"2026-08-07T12:25:01.509601Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.06179","last_updated":"2021-08-13T11:49:09Z","snapshot_observed_at":"2026-08-16T18:03:25.371131Z","submitted_at":"2021-08-13T11:49:09Z","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","version":1},"cited_work":{"arxiv_id":"2108.06179","doi":null,"metadata_source":"pith","pith_arxiv_id":"2108.06179","snapshot_observed_at":"2026-08-07T12:25:01.342561Z","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","venue":"cs.CV","work_id":"f465461d-bdcd-42bc-8260-e0b38938c567","year":2021},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.095866Z"},"links":{"cited_paper":"/paper/2108.06179","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:797282f9915d846deb5aac1bb464f736a4b6cf6ee10deafe2f22d8622fd185fe","observation_id":"e9c161ba-9cb0-46c3-bcd6-573f4a49b8de","resolution":{"observed_at":"2026-08-07T12:25:01.386907Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.04154","last_updated":"2021-02-08T12:11:41Z","snapshot_observed_at":"2026-08-16T18:47:03.696308Z","submitted_at":"2021-02-08T12:11:41Z","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","version":1},"cited_work":{"arxiv_id":"2102.04154","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.04154","snapshot_observed_at":"2026-08-07T12:25:01.597335Z","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","venue":"cs.LG","work_id":"02c80b5a-87b0-4da5-835f-d015be314bbc","year":2021},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:59.930110Z"},"links":{"cited_paper":"/paper/2102.04154","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:cda0235e169ffe151cbb629b6aad7d55a14292440bab69f729b4bd60ae9c40bf","observation_id":"38266ce3-198e-4397-a35d-cc76e3ba7f03","resolution":{"observed_at":"2026-08-07T12:25:01.639918Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:02.903855Z","title":"Revisiting Im- age Classifier Training for Improved Certified Robust Defense 9 against Adversarial Patches.Transactions on Machine Learning Research, 2023","venue":null,"work_id":"288480e7-0a8b-4ada-8a43-c1c85411371e","year":2023},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.154527Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:26f750244d7b01ea82fa3429be0f8903bae7ad6f03ddc4da475ebc89b3a1fd68","observation_id":"22e12986-fa89-4c73-b0a2-f9a5c0ef63c8","resolution":{"observed_at":"2026-08-07T12:25:02.979368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:02.792232Z","title":"Certified Patch Robustness via Smoothed Vision Transformers","venue":null,"work_id":"e33844b9-faf0-4c53-8d73-611bd3075edb","year":2022},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.184056Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:142482eab70cee9687f2d5cbf6acef18788b4a897af140c15fbd61085f98cccc","observation_id":"91ec27a7-7b0e-4719-8fdc-ce51d77e0eca","resolution":{"observed_at":"2026-08-07T12:25:02.852540Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:03.081600Z","title":"ML-Decoder: Scalable and V ersatile Classification Head","venue":null,"work_id":"796f50fe-c7bf-4da4-8e02-2c011cc4428c","year":2023},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.124864Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:d04f4c4162819c5a6a8dd3fe1e17bde5215e208c5546f74f35056350d1a6b3d4","observation_id":"aca0b6b1-403b-41f9-9440-f0ed4ce96e07","resolution":{"observed_at":"2026-08-07T12:25:03.160251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.12609","last_updated":"2021-04-26T14:22:33Z","snapshot_observed_at":"2026-08-18T05:03:56.175289Z","submitted_at":"2021-04-26T14:22:33Z","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","version":1},"cited_work":{"arxiv_id":"2104.12609","doi":null,"metadata_source":"pith","pith_arxiv_id":"2104.12609","snapshot_observed_at":"2026-08-07T12:25:01.223860Z","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","venue":"cs.CV","work_id":"eccf8d89-851c-40a6-8b58-b4cd8dc2b42e","year":2021},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.307519Z"},"links":{"cited_paper":"/paper/2104.12609","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:c10c240b816d6b46448c5a27ce68fd7d541869709315e8431989dd1c2640d3c6","observation_id":"2bc61404-761e-4d1c-a353-db977e2408ff","resolution":{"observed_at":"2026-08-07T12:25:01.288504Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.10884","last_updated":"2021-03-31T14:20:39Z","snapshot_observed_at":"2026-07-06T09:22:26.664263Z","submitted_at":"2020-05-17T03:38:34Z","title":"PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking","version":5},"cited_work":{"arxiv_id":"2005.10884","doi":null,"metadata_source":"pith","pith_arxiv_id":"2005.10884","snapshot_observed_at":"2026-08-07T12:25:01.127236Z","title":"PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking","venue":"cs.CV","work_id":"18b6e565-185c-4971-9ebe-fa30369a1596","year":2020},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.347588Z"},"links":{"cited_paper":"/paper/2005.10884","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:1312846bacdf0d2af0b770198e9a0bce72c98c0fb47fa4fe3a75eacc730d58c6","observation_id":"e4f6d7c8-177d-464f-aed5-9209d7b9335f","resolution":{"observed_at":"2026-08-07T12:25:01.162820Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-07T12:25:00.245643Z","title":"In- triguing properties of neural networks, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.245643Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:a7da049dbecee8685147345e801156d4638b320c6baa978b719fcd2501fa619e","observation_id":"806aa612-f4ff-48fc-ab36-ae0701f4ada3","resolution":{"observed_at":"2026-08-07T12:25:00.245643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.01811","last_updated":"2022-12-28T19:03:52Z","snapshot_observed_at":"2026-08-18T06:42:24.676413Z","submitted_at":"2022-02-03T19:34:25Z","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","version":2},"cited_work":{"arxiv_id":"2202.01811","doi":null,"metadata_source":"pith","pith_arxiv_id":"2202.01811","snapshot_observed_at":"2026-08-07T12:25:00.960979Z","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","venue":"cs.CV","work_id":"59981fb7-b70a-48aa-adba-f4181885c99f","year":2022},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.414183Z"},"links":{"cited_paper":"/paper/2202.01811","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:7d3b45e5aa913827e481b1712887f64ca2be0d7d91fa9ba37aef697cbbc141d2","observation_id":"0e720f58-9569-4c3f-bd71-5a23e7cf47b0","resolution":{"observed_at":"2026-08-07T12:25:00.997325Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13076","last_updated":"2024-04-02T14:14:16Z","snapshot_observed_at":"2026-08-16T14:50:35.455374Z","submitted_at":"2023-10-19T18:14:33Z","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","version":2},"cited_work":{"arxiv_id":"2310.13076","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.13076","snapshot_observed_at":"2026-08-07T12:25:00.893322Z","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","venue":"cs.CV","work_id":"5539af96-7095-40ae-a952-ec0d1e499346","year":2023},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.453556Z"},"links":{"cited_paper":"/paper/2310.13076","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:20a6028ad3506831239daf6c0aa00c9d91c97a1aa4ee302e83dd82e86dc81dc8","observation_id":"2419a27f-238e-41d8-946a-e28d845575e0","resolution":{"observed_at":"2026-08-07T12:25:00.917387Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.09135","last_updated":"2022-04-08T18:52:45Z","snapshot_observed_at":"2026-08-16T18:02:03.728209Z","submitted_at":"2021-08-20T12:09:33Z","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","version":2},"cited_work":{"arxiv_id":"2108.09135","doi":null,"metadata_source":"pith","pith_arxiv_id":"2108.09135","snapshot_observed_at":"2026-08-07T12:25:01.061317Z","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","venue":"cs.CV","work_id":"5dce97a5-1a0f-4016-87b5-471a827d140d","year":2021},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.378586Z"},"links":{"cited_paper":"/paper/2108.09135","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:9c8168e39211fb760f0f993f95a394e944bc48d42aa51d1b013a0183c46fd16d","observation_id":"396270a7-e4d9-490a-95f9-c46bce406e1a","resolution":{"observed_at":"2026-08-07T12:25:01.088473Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:02.661209Z","title":"Grace Hua, Matthias Hein, and Jan Hendrik Metzen","venue":null,"work_id":"3913eed8-211a-41d0-a97f-fab44f9fe0fe","year":2023},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.545211Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:7b6c62fc822ded22df9396491fd05c380f8eebe2ab4499768e049a6dab650eb1","observation_id":"5e553a05-0803-431e-87cd-10576346f566","resolution":{"observed_at":"2026-08-07T12:25:02.733109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:02.548485Z","title":"A Review on Multi-Label Learning Algorithms.IEEE Transactions on Knowledge and Data Engineering, 26(8):1819–1837, 2014","venue":null,"work_id":"ceffea8c-51c9-47fc-84d2-9187be9ecbb9","year":2014},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.610571Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:a34d1cb2e1f91c19208c1edd492e46aa2dbe1a509033e84ca2dc1b62f21f3796","observation_id":"0a5e253d-8f75-47b2-85b5-7307e6487a7f","resolution":{"observed_at":"2026-08-07T12:25:02.600807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.09562","last_updated":"2023-10-07T22:24:42Z","snapshot_observed_at":"2026-08-16T16:38:04.166710Z","submitted_at":"2022-08-19T22:45:07Z","title":"Open Vocabulary Multi-Label Classification with Dual-Modal Decoder on Aligned Visual-Textual Features","version":2},"cited_work":{"arxiv_id":"2208.09562","doi":null,"metadata_source":"pith","pith_arxiv_id":"2208.09562","snapshot_observed_at":"2026-08-07T12:25:00.829214Z","title":"Open Vocabulary Multi-Label Classification with Dual-Modal Decoder on Aligned Visual-Textual Features","venue":"cs.CV","work_id":"59b15d2d-0a03-430e-9159-a072e4ba72a2","year":2022},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.513558Z"},"links":{"cited_paper":"/paper/2208.09562","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:fdc1417abc51a455e09addd653a69393cc62e4936da69aa3a65ddceb272bf685","observation_id":"7f141f62-1501-406f-814b-6ab294e0842b","resolution":{"observed_at":"2026-08-07T12:25:00.851314Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:02.447398Z","title":null,"venue":null,"work_id":"0be1cf15-f97d-4e9f-a42b-62b73b9aae7b","year":null},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.649410Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:6c7947e8260a1f401217d9dd84e17ed50938308f25e8fdb5e856ec184fa9a58e","observation_id":"db3aed9a-3a65-40eb-b25b-a1154ec0f379","resolution":{"observed_at":"2026-08-07T12:25:02.479807Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:02.327786Z","title":"disagreer","venue":null,"work_id":"0a8edd6f-510b-4f80-ae9f-982304745c64","year":2014},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.690739Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:ce2ed2ec9555b4ede0569cb5798be88d0f82cb468241e02eaf4258f1602eac6a","observation_id":"603ccab7-f2b2-4ddb-9d20-601972ed24d9","resolution":{"observed_at":"2026-08-07T12:25:02.376987Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:25:02.198844Z","title":"The former works by placing two square masks at random locations on training images, with each mask covering at most25% of the image area [8, 33]","venue":null,"work_id":"4995a64c-d707-47c3-a383-b0e0e5aba191","year":2014},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.748079Z"},"links":{"citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:731031713804aa4cb5545c5b1973432f60cfdc8580517189722b7c5629376903","observation_id":"d41ab500-6c12-4f73-9927-f791c986111c","resolution":{"observed_at":"2026-08-07T12:25:02.252844Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1902.02918","last_updated":"2019-06-15T07:40:33Z","snapshot_observed_at":"2026-08-14T17:19:22.044743Z","submitted_at":"2019-02-08T02:08:19Z","title":"Certified Adversarial Robustness via Randomized Smoothing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.02918","snapshot_observed_at":"2026-08-07T12:24:58.684323Z","title":"arXiv:1902.02918 [cs, stat]","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.684323Z"},"links":{"cited_paper":"/paper/1902.02918","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:fb74b851ae847b691ad8529812d757f23c724c30d0571ef7a094c411971d99f0","observation_id":"058b0fe7-33ea-4ea3-bc14-5779b2e8d5cc","resolution":{"observed_at":"2026-08-07T12:24:58.684323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2009.14119","last_updated":"2021-07-29T15:02:43Z","snapshot_observed_at":"2026-07-06T09:59:50.601893Z","submitted_at":"2020-09-29T16:08:19Z","title":"Asymmetric Loss For Multi-Label Classification","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.14119","snapshot_observed_at":"2026-08-07T12:24:58.428977Z","title":"2, 6, 4, 8","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T12:24:58.428977Z"},"links":{"cited_paper":"/paper/2009.14119","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:caf3a0865835f1a80a0d366374a767f4bae95750d319ec14ef2e96f25931131e","observation_id":"4d304ef5-2a6e-40de-a3fd-4c393b1b0fd9","resolution":{"observed_at":"2026-08-07T12:24:58.428977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.05980","last_updated":"2023-02-21T10:06:35Z","snapshot_observed_at":"2026-08-19T06:42:06.444450Z","submitted_at":"2022-09-13T13:24:22Z","title":"Certified Defences Against Adversarial Patch Attacks on Semantic Segmentation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.05980","snapshot_observed_at":"2026-08-07T12:25:00.573437Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:00.573437Z"},"links":{"cited_paper":"/paper/2209.05980","citing_paper":"/paper/2505.24703"},"observation_digest":"sha256:183c002e93c0b4b2a6637b55d0f32710f1b76cbefbd322bcab98c6f58071f95a","observation_id":"60173037-8c4a-434a-9d37-b6359f2ab016","resolution":{"observed_at":"2026-08-07T12:25:00.573437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.24703","last_updated":"2025-05-30T15:25:51Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T02:25:01.421000Z","submitted_at":"2025-05-30T15:25:51Z","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":12,"verified_exact":10,"verified_fuzzy":20},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2505.24703."}