{"as_of":"2026-08-23T11:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:266f1e818b8b11d1cd3d1f22cf0328b8bbc4fc46bef98f027637958ccef9478e","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T06:04:25.061599Z","state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.06488/citation-record","integrity":"/paper/2506.06488/integrity","json":"/paper/2506.06488/citation-record.json","paper":"/paper/2506.06488"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:22.016374Z","title":"Scalable membership inference attacks via quantile regression.Advances in Neural Information Processing Systems, 36:314–330, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.016374Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:ace9d11dcc7e7cb30860d2b4ae240181a298befc69fb35b7b19e43686ef22a78","observation_id":"cfe5bb5c-fdaf-416e-ac46-33455d0fedc0","resolution":{"observed_at":"2026-08-07T06:04:22.016374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:22.082887Z","title":"Membership inference attacks from first principles","venue":null,"work_id":null,"year":1914},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.082887Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:48063b30932dd6d3f39487fa39c851907f9b3eb841d31fe377730c2ab714bf3e","observation_id":"470d32b5-6e54-4aed-8c80-3d474129e102","resolution":{"observed_at":"2026-08-07T06:04:22.082887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:30.744434Z","title":"Extracting training data from diffusion models","venue":null,"work_id":"364d5531-39a2-4527-84b4-9666d69e8989","year":2023},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.180236Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:36bd2054b9a996a1e28d5fd859ed03721c1f1400ae501696bdc1acba45406678","observation_id":"a80a2acb-a08a-40f9-a05d-78db2dae928c","resolution":{"observed_at":"2026-08-07T06:04:30.941670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:30.333885Z","title":"Label-only mem- bership inference attacks","venue":null,"work_id":"2e41b911-e670-4aaa-bbb6-2f31d6660f42","year":1964},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.284431Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:d1e7ec00c550e4104bd3489cd137b00b63564cac25792984f4391168157da737","observation_id":"10cf8af3-a111-4862-8f16-1f3ab96cbafe","resolution":{"observed_at":"2026-08-07T06:04:30.514604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:30.022654Z","title":"Are diffusion models vulnerable to membership inference attacks? InInternational Conference on Machine Learning, pages 8717–8730","venue":null,"work_id":"75051d26-2729-41ce-bcce-7739af568adc","year":2023},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.365204Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:741181699b5f06f18d17c252ed039a0e2c68fbbb5c05c8672d27675b8aa15d1f","observation_id":"ca7d307a-1b92-43bb-8e60-a0f7ca946f05","resolution":{"observed_at":"2026-08-07T06:04:30.151452Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:22.444112Z","title":"Strong membership inference attacks on massive datasets and (moderately) large language models.arXiv preprint arXiv:2505.18773, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.444112Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:6a53715c9819801b84aada9411ec76466d3da64f4a9740cf6faabf19b8fe6910","observation_id":"ecab6685-af40-4d3e-a08d-0eb9846db654","resolution":{"observed_at":"2026-08-07T06:04:22.444112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:29.743215Z","title":"Kim, Omer Reingold, and Guy N","venue":null,"work_id":"5f9c0f49-4d78-418c-8c3d-71fecadb6eec","year":1939},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.519451Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:7dbcbf6b690a1c9f23e0a42985254f63fb7d9122991734399a6c3a00360b1f46","observation_id":"76bc1443-4f0e-4601-885a-2f81ed0e72dd","resolution":{"observed_at":"2026-08-07T06:04:29.883610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:29.467424Z","title":"On the societal impact of open foundation models","venue":null,"work_id":"d48eae8d-3470-4081-bd75-04b4290befae","year":2024},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.614566Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:f21fc4b95234330d34ea007606f2bdeba7f33b4220e828f1765c954338a37271","observation_id":"90b9d2c5-0b52-44bd-88f7-e804f21dbd2e","resolution":{"observed_at":"2026-08-07T06:04:29.610846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:22.683898Z","title":"Kim, Christoph Kern, Shafi Goldwasser, Frauke Kreuter, and Omer Reingold","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.683898Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:78bfc377a734fccbcb07d30d2d9258fc851dba6dfdc9b515e4982994737aee43","observation_id":"89de9d46-f849-4196-8019-b5a138d2af1a","resolution":{"observed_at":"2026-08-07T06:04:22.683898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:29.159383Z","title":"Stolen memories: Leveraging model memorization for calibrated {White-Box} membership inference","venue":null,"work_id":"2410d7c2-b769-4313-8ee1-4aca2c6a4040","year":2020},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.752659Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:87fb521b6afb7b118ed68183a8774e32f461b57a213be3d70a1567ecf4278948","observation_id":"d578ba8c-226b-4ce4-93f1-87ec036f9dc4","resolution":{"observed_at":"2026-08-07T06:04:29.301141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:28.839603Z","title":"Membership leakage in label-only exposures","venue":null,"work_id":"edf3fed6-f246-489f-ba0a-0a86d59c6dcd","year":2021},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.837832Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:5ce297e2350491b5d4d8aa2522b3d9dd05de5fdeefa9d5a7e261505aa86e8765","observation_id":"b653c3f6-779e-4cdf-b42d-192dad055569","resolution":{"observed_at":"2026-08-07T06:04:28.981142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:28.568309Z","title":"Membership inference attacks by exploiting loss trajectory","venue":null,"work_id":"54c8525b-8c59-468b-bf08-c9473cd8fca5","year":2022},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:22.909416Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:d1b83ba7cd8204863d2fefd6b1b406e506811f432716764ae9db987b89f92e0c","observation_id":"b38344dc-c109-4781-9ef4-a19ad68f4c9f","resolution":{"observed_at":"2026-08-07T06:04:28.693551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.05101","last_updated":"2019-01-04T21:01:49Z","snapshot_observed_at":"2026-08-14T20:13:52.872565Z","submitted_at":"2017-11-14T14:24:06Z","title":"Decoupled Weight Decay Regularization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.05101","snapshot_observed_at":"2026-08-07T06:04:23.004070Z","title":"Decoupledweightdecayregularization.arXivpreprintarXiv:1711.05101, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.004070Z"},"links":{"cited_paper":"/paper/1711.05101","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:58d91678b7f9da8bf3a9d016132b00c7987712adb83fe69f5284615dd0a7beda","observation_id":"91437237-2595-45b9-bc36-7fec49f5c505","resolution":{"observed_at":"2026-08-07T06:04:23.004070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:28.201677Z","title":"Language models are unsupervised multitask learners","venue":null,"work_id":"b8206680-78ed-4ae5-8b40-a4b1842a6f50","year":2019},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.070306Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:b6cea83f4299b3cb745d1f1914cc7c224266d70c68cb2c680cd23a691e6b0594","observation_id":"44019a4e-ff18-4c6f-83aa-1af84986746c","resolution":{"observed_at":"2026-08-07T06:04:28.357169Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:27.923715Z","title":"Uncertain: Modern topics in uncertainty quantification.https://www.cis.upenn.edu/ ~aaroth/uncertain.html, 2022","venue":null,"work_id":"0276d955-2c88-4261-8c89-1f9a19efd1cd","year":2022},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.156786Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:177984e51762ddd1426b450d62fb1902bac01c716efaebc666e9852c7b844deb","observation_id":"f03d57b3-e5a2-4828-b964-ebbc4078a37e","resolution":{"observed_at":"2026-08-07T06:04:28.022717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:27.585739Z","title":"In2017 IEEE symposium on security and privacy (SP), pages 3–18","venue":null,"work_id":"28c7890f-107a-4cb8-8c44-29c62f85e2fb","year":2017},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.258509Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:c25f36d1ff587071b2fe6601dbe2cdc87716c2ba2133adb3ee9255378facf66d","observation_id":"1fab8025-0a10-4cd3-a39c-476d160eea97","resolution":{"observed_at":"2026-08-07T06:04:27.768766Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:23.401494Z","title":"Privacy risks of securing machine learning models against adversarial examples","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.401494Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:ed7e7fa0371fcf631c3c74b9875124f96a43b68640978927fbf6c029834d01c5","observation_id":"9438dc6b-4d58-4820-b100-e88f781aa4d3","resolution":{"observed_at":"2026-08-07T06:04:23.401494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04776","last_updated":"2025-05-12T16:01:29Z","snapshot_observed_at":"2026-08-19T22:48:49.520804Z","submitted_at":"2024-07-05T18:00:02Z","title":"Quantifying Privacy Risks of Public Statistics to Residents of Subsidized Housing","version":2},"cited_work":{"arxiv_id":"2407.04776","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.04776","snapshot_observed_at":"2026-08-07T06:04:25.690644Z","title":"Quantifying Privacy Risks of Public Statistics to Residents of Subsidized Housing","venue":"cs.CY","work_id":"bbc469e2-2573-4e07-8a5f-75d173bb399a","year":2024},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.550623Z"},"links":{"cited_paper":"/paper/2407.04776","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:635a389fb7d3ae35974c98ba08095381d5a9f6be94217b6a3cb22a4738e9a18d","observation_id":"7d4cadad-8c48-49e7-add1-a81a24ac0ece","resolution":{"observed_at":"2026-08-07T06:04:25.854291Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.05140","last_updated":"2023-12-08T16:21:24Z","snapshot_observed_at":"2026-08-16T14:36:29.051670Z","submitted_at":"2023-12-08T16:21:24Z","title":"Membership Inference Attacks on Diffusion Models via Quantile Regression","version":1},"cited_work":{"arxiv_id":"2312.05140","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.05140","snapshot_observed_at":"2026-08-07T06:04:25.414093Z","title":"Membership Inference Attacks on Diffusion Models via Quantile Regression","venue":"cs.LG","work_id":"8e7cdb32-7e15-4d8c-bf57-2b84c5f4ac32","year":2023},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.658456Z"},"links":{"cited_paper":"/paper/2312.05140","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:add407772bca8097f8047ec281b9c98e0bfb0afc4ebd3ceaf1e72dc702959233","observation_id":"9b4beae1-8e2b-4e70-9f83-7309f76a49da","resolution":{"observed_at":"2026-08-07T06:04:25.515231Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:27.333585Z","title":"Identifying and eliminating csam in generative ml training data and models.Stanford Internet Observatory, Cyber Policy Center, 23:3, 2023","venue":null,"work_id":"3cbeebe2-be61-4266-b46f-5e85baec7c47","year":2023},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.767239Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:32c127da2a15e3869c2a4ab7225cfc2bd09c6b6239196f0511a197fef922cf63","observation_id":"7fe481b6-a535-467e-a52e-39dfd130e6db","resolution":{"observed_at":"2026-08-07T06:04:27.482214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:26.947231Z","title":"Generative ml and csam: Implications and mitigations","venue":null,"work_id":"bdd0744b-c561-46df-9966-767417324e81","year":2023},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:23.927467Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:0d5ece3af4fe0179c4cfc37470ab0155d9135ae7fae3e4f2e9dadd9a7e4461f7","observation_id":"22b7b743-b1e0-4c01-a135-7f0e621b88ec","resolution":{"observed_at":"2026-08-07T06:04:27.105239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:26.485287Z","title":"Safety by design for generative ai: Preventing child sexual abuse","venue":null,"work_id":"5971c82e-ec64-42c0-8717-1ffdaad5c669","year":2024},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:24.091250Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:d8b9b6853294b943ee0e9fe9b07095cd99ab5b02390cd32622b99c2d26873c87","observation_id":"5ddfb4df-5300-418d-8f1b-c4fabe86a528","resolution":{"observed_at":"2026-08-07T06:04:26.752712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.06470","last_updated":"2024-07-17T06:53:58Z","snapshot_observed_at":"2026-08-16T16:09:03.708656Z","submitted_at":"2022-12-13T10:41:12Z","title":"Position: Considerations for Differentially Private Learning with Large-Scale Public Pretraining","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.06470","snapshot_observed_at":"2026-08-07T06:04:24.194350Z","title":"Position: Considerations for differentially private learning with large-scale public pretraining.arXiv preprint arXiv:2212.06470, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:24.194350Z"},"links":{"cited_paper":"/paper/2212.06470","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:4fab02b033cfe9060f15042322441db116e76fd1c67a650d39b7d65170f84539","observation_id":"1f771b42-9e0b-4914-9246-bafd7217dd4e","resolution":{"observed_at":"2026-08-07T06:04:24.194350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.08440","last_updated":"2022-04-11T09:23:43Z","snapshot_observed_at":"2026-08-18T20:02:37.684810Z","submitted_at":"2021-11-15T12:32:20Z","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.08440","snapshot_observed_at":"2026-08-07T06:04:24.401244Z","title":"On the importance of difficulty calibration in membership inference attacks.arXiv preprint arXiv:2111.08440, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:24.401244Z"},"links":{"cited_paper":"/paper/2111.08440","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:87310aef1ae4dce4a0c9c3b74282b6d7638bf7027959c2b5ed39e33c423681ec","observation_id":"93ded813-d668-44f8-9a34-230841773cc7","resolution":{"observed_at":"2026-08-07T06:04:24.401244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:24.585390Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:24.585390Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:80166260f2960d5301a6b769e19834c2588898c66c088a0cf37287b17986cafb","observation_id":"fd3f627f-381e-4ecf-a6d6-df9ffbf4bcd2","resolution":{"observed_at":"2026-08-07T06:04:24.585390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:04:26.121142Z","title":"Assessing membership inference attacks under distribution shifts","venue":null,"work_id":"b64ff993-31ab-4b16-a3f2-6291b9679b25","year":2024},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:24.741273Z"},"links":{"citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:676f83ed1f97a5318bb9f0cb52e685d76f9f4ec3a7021e53603f66a01365bd2d","observation_id":"fb4b2f47-1b06-44c3-b454-fbe6af49e1b1","resolution":{"observed_at":"2026-08-07T06:04:26.298079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03262","last_updated":"2024-06-12T09:02:47Z","snapshot_observed_at":"2026-08-21T23:27:57.099434Z","submitted_at":"2023-12-06T03:18:49Z","title":"Low-Cost High-Power Membership Inference Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.03262","snapshot_observed_at":"2026-08-07T06:04:24.893482Z","title":"Low-cost high-power membership inference attacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:24.893482Z"},"links":{"cited_paper":"/paper/2312.03262","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:53efd8c028d761f53e587899a4a49a049edfc37d2e2a752dff8423681a3de19d","observation_id":"f9eb6635-a510-4ee8-b5c9-566eb177b8ad","resolution":{"observed_at":"2026-08-07T06:04:24.893482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-08-16T13:14:20.695452Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T06:04:25.061599Z","title":"Membership inference attacks cannot prove that a model was trained on your data.arXiv preprint arXiv:2409.19798, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:25.061599Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:ed4f497dd3bbd591702d2c9052ec74c89342f228c5cbe45af5aa69545c58947d","observation_id":"d7d1ba9e-f3ba-4b3b-81e3-47f987ded3f4","resolution":{"observed_at":"2026-08-07T06:04:25.061599Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T04:38:16.447381Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":2,"verified_fuzzy":15},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2506.06488."}