{"as_of":"2026-08-11T08:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cb99421136fb352a25c02ba1a4dbeec1ea1acc7a4a2a3fb0519fb1be319ce6b3","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:57:33.487441Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.06933/citation-record","integrity":"/paper/2506.06933/integrity","json":"/paper/2506.06933/citation-record.json","paper":"/paper/2506.06933"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-07-06T06:13:56.299732Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-07T05:57:31.430289Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models.arXiv preprint arXiv:1712.04248, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.430289Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:8021156e7b7bdcaaf5178e0e5e810b87815720929c5e4aaacf637a0d380b99a8","observation_id":"b0aa951e-8705-441a-8789-87ba06cd7a96","resolution":{"observed_at":"2026-08-07T05:57:31.430289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:31.435526Z","title":"Imagenet: A large- scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.435526Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:d5b1e878d3045537cc9212e1851318ae627b81326484f5526e5f2ba2332628ff","observation_id":"45edecbd-c622-4c1a-968c-ce432f8da46f","resolution":{"observed_at":"2026-08-07T05:57:31.435526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.361804Z","title":"Hopskipjumpattack: Aquery-efficient decision-based attack","venue":null,"work_id":"30292ce9-f90f-4c4a-8f75-c2b4d873f8a9","year":2020},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.439670Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:ac1306296fc91a53d50ef1eb94ff6027f267774803713f9b030aed19ff662555","observation_id":"ba804405-4490-4e8f-8ef2-48a6391dff0e","resolution":{"observed_at":"2026-08-07T05:57:41.366368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.348356Z","title":"Rays: Araysearchingmethodforhard-labeladversarialattack, 2020","venue":null,"work_id":"509a7d16-0226-46f0-bd33-091235dc6a19","year":2020},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.444428Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:e10ebc88c83e148d22ce11fef14fc1b53a57959d24d825fa32700c251c4bd6c2","observation_id":"9e6b7ff6-2a64-4a75-9bac-b48219df07da","resolution":{"observed_at":"2026-08-07T05:57:41.352552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.04457","last_updated":"2018-07-12T08:04:27Z","snapshot_observed_at":"2026-07-06T06:49:45.373049Z","submitted_at":"2018-07-12T08:04:27Z","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.04457","snapshot_observed_at":"2026-08-07T05:57:31.449133Z","title":"Query-efficient hard-label black-box attack: An optimization-based approach.arXiv preprint arXiv:1807.04457, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.449133Z"},"links":{"cited_paper":"/paper/1807.04457","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:38516e7949680893fd579ce527e93ccc95aa6308bb0cdd43dbc1c423df70a14c","observation_id":"adfe8d3a-51ab-4680-b377-88dea1564f1a","resolution":{"observed_at":"2026-08-07T05:57:31.449133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.10773","last_updated":"2020-02-14T01:44:07Z","snapshot_observed_at":"2026-08-11T08:14:22.149204Z","submitted_at":"2019-09-24T09:27:08Z","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.10773","snapshot_observed_at":"2026-08-07T05:57:31.453954Z","title":"Sign-opt: A query-efficient hard-label adversarial attack.arXiv preprint arXiv:1909.10773, 2019","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.453954Z"},"links":{"cited_paper":"/paper/1909.10773","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:97a1e35d1bab33e975b75073b4435fc582d2cd0edceebc3911d35738f0d620b3","observation_id":"be720c57-3e25-47e5-9de4-db646f4f89ff","resolution":{"observed_at":"2026-08-07T05:57:31.453954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.333983Z","title":"Ageometry-inspireddecision- based attack, 2019","venue":null,"work_id":"389cba9d-c8ad-4af4-8fa7-9bd99bdd820c","year":2019},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.459741Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:360b792aaea59ef742ad1b711755e0fb57b57dcfce0119789f2a19e9222417b9","observation_id":"9a1cd8e8-9ff4-419d-8f35-9d7cc6108771","resolution":{"observed_at":"2026-08-07T05:57:41.338423Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.318841Z","title":"Geoda: a geometric framework for black-box adversarial attacks","venue":null,"work_id":"e2d40aa8-425d-4705-8a8f-7956713c227c","year":2020},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.463893Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:0a6bf5addc7bc21de420a637a12300a10880d91397a12866d2014a6c60576ca3","observation_id":"d149d072-a3b5-411f-a98e-1437a75b9933","resolution":{"observed_at":"2026-08-07T05:57:41.323275Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"help/1584908","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:34.058872Z","title":"How does facebook use artificial intelligence to moderate content? URLhttps: //www.facebook.com/help/1584908458516247, 2024","venue":null,"work_id":"4edc4d7d-4252-44df-8c54-8213d9e18d05","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.467800Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:2bdfd0167caf1c327f9a66e1e54ca6f6feab873ae701ba030e2aec53f360763a","observation_id":"f9869c7e-71d9-4334-9b2d-a8caa9221e3d","resolution":{"observed_at":"2026-08-07T05:57:34.146521Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.304326Z","title":"X’s sensitive media policy","venue":null,"work_id":"675033d3-dcf6-42d0-acc1-5ffd4611971c","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.471744Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:3754d082561675d51266c7bd0782bf228597e0ef26e0f335864966a8787eba82","observation_id":"c2240e7f-6976-4d4c-8aaa-02edd4fc6ce2","resolution":{"observed_at":"2026-08-07T05:57:41.308626Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.288333Z","title":"Detect explicit content (safe search)","venue":null,"work_id":"b5be6acd-a391-49bf-b734-7a5bb0083194","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.475889Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:2197fd6c933f1e5f20df29332b3f919cc97f1c90040b61c52dfe63e4a362f417","observation_id":"646dcd7e-950d-4347-a57b-048b079fb47a","resolution":{"observed_at":"2026-08-07T05:57:41.293639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.274005Z","title":"Moderating content","venue":null,"work_id":"dc9f5afb-cf2f-49fb-8935-a19ceaf0aff0","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.480113Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:aec2b47426e14cfee4d012abd053e6e81a545ab25de0604c615e8f99d054bb30","observation_id":"ae317cb2-87cd-4cb8-a07c-3a3f0564b393","resolution":{"observed_at":"2026-08-07T05:57:41.278807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:41.124835Z","title":"Detect adult, racy, or gory content","venue":null,"work_id":"5a360a28-4e8d-4f73-b6c6-5d5bef210c6c","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.484181Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:4f2929b6242fc3eb66bf3c63da9c7ab4a85383ca211283fe2f84d9d9b3721236","observation_id":"dffbdee2-089f-4c6b-9bb1-bd227fbc974a","resolution":{"observed_at":"2026-08-07T05:57:41.206754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:40.876694Z","title":"Evading black-box classifiers without breaking eggs","venue":null,"work_id":"8f66b85d-2794-4906-bd58-b793366fb684","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.488041Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:a6bfafa778f49621575cb5179a6342a33a4b6721b3ca1016aa9f9332993db227","observation_id":"c7d98209-ebbf-4b50-b3d7-1275541d3495","resolution":{"observed_at":"2026-08-07T05:57:40.991983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:40.547198Z","title":"Egg dropping","venue":null,"work_id":"f4f1cbb3-4667-46f9-a759-a514c84757b9","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.491985Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:82b1f0ed9c560a071740cc9e2fda88a3e5e24253fb416e3d5a07508088c7676a","observation_id":"773c9fcb-35b5-40f3-9438-3c4f18f7bbca","resolution":{"observed_at":"2026-08-07T05:57:40.678876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:40.229486Z","title":"Cgba: Curvature-aware geometric black-box attack","venue":null,"work_id":"d7714e28-4e65-4bee-b0e4-656a4448870a","year":2023},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.495883Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:3a46302263ce99b59dd82b8d3287e0fc361e7ab183a35f09b5ae4fb5c1d422c5","observation_id":"7ab3b1f1-25c0-4063-ab42-b03c9eeb1095","resolution":{"observed_at":"2026-08-07T05:57:40.396013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:39.923132Z","title":"Understanding x limits","venue":null,"work_id":"5007e0e9-bdc5-450c-81b1-6b1b16d685bf","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.501945Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:d3eeaeca5458172d8be0f9863246e8960d67f2957ec5c8c96b04ef89dcb3e311","observation_id":"91fc7a95-3caa-4773-ada9-d87f5ad7cb84","resolution":{"observed_at":"2026-08-07T05:57:40.096110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:39.594185Z","title":"Surfree: a fast surrogate-free black- box attack","venue":null,"work_id":"37f358b8-3252-4eac-9871-8cdca77a7d01","year":2021},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.515144Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:9f734570c087ece8a5ad385e372bdadfa895f2014e0c26b2d767f333a0230b31","observation_id":"bf885fd1-9e95-4957-8dd4-d49ac7fc284c","resolution":{"observed_at":"2026-08-07T05:57:39.706791Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:39.271882Z","title":"Robustness of classifiers: from adversarial to random noise.Advances in neural information processing systems, 29, 2016","venue":null,"work_id":"5aabf62b-14c2-47ff-8f54-9f120597866c","year":2016},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.534374Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:302fcd5289955e7c2f2f2add8c734998934ebb243586a705f7491ff6b0fb11c1","observation_id":"a70a6c3b-8368-466f-b82c-6db155a90540","resolution":{"observed_at":"2026-08-07T05:57:39.416993Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:39.107049Z","title":"The robustness of deep networks: A geometrical perspective.IEEE Signal Processing Magazine, 34(6):50–62, 2017","venue":null,"work_id":"702a9553-d36a-411d-b529-49b57b8a89a9","year":2017},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.553826Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:f0e12a1ab42102faa68d28fa11b5512c96eddab9d39800d2c173b23a0c5c63a1","observation_id":"2c56283f-5241-4943-bd2b-4a11b60211aa","resolution":{"observed_at":"2026-08-07T05:57:39.177382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:38.949623Z","title":"Empirical study of the topology and geometry of deep networks","venue":null,"work_id":"ad93d2f4-665c-4eea-873e-f7d6bb315a87","year":2018},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.572786Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:43d760160175507a7b07a9616c16f737a153c3fb40f8260099380f213ad68368","observation_id":"c075d3fb-ccfd-472c-8d97-d7200dfb1a65","resolution":{"observed_at":"2026-08-07T05:57:39.019923Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:38.782627Z","title":"On minimax signal generation and reception algorithms","venue":null,"work_id":"85ea768a-f1b3-42c1-9a1c-77db949d79b1","year":1986},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.596371Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:3ab6118b8c11eaaa15c21bfdf7818cad02b94d17667f00773da2c7d26fb7adaa","observation_id":"c1ff1bc4-ce98-4f34-b3e0-7b0d6a55421b","resolution":{"observed_at":"2026-08-07T05:57:38.876192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:38.574495Z","title":"American Mathematical Soc., 2001","venue":null,"work_id":"4e29255c-e3b6-49e3-8189-a0e15f0a6fcc","year":2001},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.622218Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:fc9c286e62cb66c67a729a89dc14f1e95be4668518a0142d4d64985abc3cb55b","observation_id":"07f8ef27-f76f-4b13-bd4a-158dd3b5de68","resolution":{"observed_at":"2026-08-07T05:57:38.664146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:38.393227Z","title":"Quadpack: a subroutine package for automatic integration, volume 1","venue":null,"work_id":"ee363126-812a-43e3-94ff-57229ef30b53","year":2012},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.647287Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:7a1218a97efa74bf8834d5ed5bb537189b22e7dfd3e28781adc03a51a0747069","observation_id":"20eedfa7-e9d3-48bb-ad50-ed924ccb7dbc","resolution":{"observed_at":"2026-08-07T05:57:38.448785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:31.675222Z","title":"A simplex method for function minimization.The computer journal, 7(4):308–313, 1965","venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.675222Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:1ca28fe5ff5501333c62cf67bd0ee065e628cb26a654b963c3b109a5541dfc62","observation_id":"ae2e3429-a498-41a2-8a92-eb159f4d90de","resolution":{"observed_at":"2026-08-07T05:57:31.675222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:31.697798Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.697798Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:e7325817d1f1ce752e7ea63d9db9273f4a0bafb1c4af099d3d346040c0dab949","observation_id":"8dbd2586-25a3-467c-8b72-805f331225b1","resolution":{"observed_at":"2026-08-07T05:57:31.697798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:31.745279Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.745279Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:167a29d86ff19507444259b899ec9be8121bb2514022887593ce3aa8eec21759","observation_id":"9f268cf1-f6cc-498b-a1ac-2308854ccd4e","resolution":{"observed_at":"2026-08-07T05:57:31.745279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:38.150703Z","title":"Learning transferable visual models from natural language supervision, 2021","venue":null,"work_id":"42a4d98a-210c-48c9-8b4a-636badb4a1ac","year":2021},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.769274Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:82c87e55d37353b435be4e5af36ed138980c683e6731eb5cbea2401457b3fce5","observation_id":"6e07b444-f67e-4536-82e3-445273b993ef","resolution":{"observed_at":"2026-08-07T05:57:38.239268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:37.980877Z","title":"Scipy 1.0: fundamentalalgorithmsforscientificcomputinginpython","venue":null,"work_id":"8fb9d57a-99c2-483d-b637-18ca12278bd7","year":2020},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.796239Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:29ac2838c1bd32770960733c0893f7d9f0b6d69a492bbc26299558c2c20e048a","observation_id":"0467eab8-cf0f-487e-ba7c-ccf376df22d7","resolution":{"observed_at":"2026-08-07T05:57:38.067144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:31.815524Z","title":"Visionllama: A unified llama backbone for vision tasks, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.815524Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:d21349169f25366e5432c25772ecf620e1799c5b736770d2980438b83324bc5c","observation_id":"cdb86ec5-e79c-46d1-a6fe-8b3d59c145fd","resolution":{"observed_at":"2026-08-07T05:57:31.815524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:37.784797Z","title":"Llama 2: Open foundation and fine-tuned chat models, 2023","venue":null,"work_id":"8f159373-110c-46e0-ac3a-5fbf5c2aeb74","year":2023},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.834070Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:50c3f3b1415ee076dd3fc406631a03ca269cae5b26b64d9956cfb52ef150510d","observation_id":"0bc502ea-30b8-4e20-b335-182f9ba2f346","resolution":{"observed_at":"2026-08-07T05:57:37.884159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-10T11:04:18.421023Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-07T05:57:31.866940Z","title":"Jailbreaking leading safety-aligned llms with simple adaptive attacks.arXiv preprint arXiv:2404.02151, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.866940Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:3fb791a7ba76c8c0300a1953268a0c96d88e01d170b5b6190230f9daa3226696","observation_id":"490068e0-5791-4c30-9202-668e99ad3566","resolution":{"observed_at":"2026-08-07T05:57:31.866940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-07T05:57:31.879314Z","title":"Jailbreakbench: An open robustness benchmark for jailbreaking large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.879314Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:c3186d92308c1abd3db114a5485bfa05f7eb567cf6039e1d3d41780e8951ed37","observation_id":"3ebb87ce-0fd8-45aa-af3f-31200400aa2c","resolution":{"observed_at":"2026-08-07T05:57:31.879314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:37.568325Z","title":"Chrysos, and Volkan Cevher","venue":null,"work_id":"43b91f7d-08aa-4443-a3c7-df52b48e9477","year":2025},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:31.968312Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:8e8e801d8fef8a4ce952b10d4434bed16927a8e41530675ff9c4f49291e68d1a","observation_id":"436c6d5f-cb57-4671-b9a6-3ab7ead5079c","resolution":{"observed_at":"2026-08-07T05:57:37.642976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T05:57:32.022709Z","title":"Explainingandharnessingadversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.022709Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:c5b4a67107c29b9f5bf9888089ade354f3f34a18d4a8fccbb8248bc7a98c9a83","observation_id":"a3bc83e3-2021-4b1d-9406-c2e1634c8ebe","resolution":{"observed_at":"2026-08-07T05:57:32.022709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:37.366969Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"f50037f9-6544-482e-a1dd-887491b38076","year":2016},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.124758Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:1120a23aa5f6abd9a49857f90153faeef4ea14abd2108d7a7f3343b48a998b7b","observation_id":"303c54e9-3d22-44de-8930-0250b55c0ded","resolution":{"observed_at":"2026-08-07T05:57:37.455602Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:32.203361Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.203361Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:f847255accc692b879c525806cc967f33f5c92118999a5055f2a62a53572b031","observation_id":"24902171-ef03-4014-a509-fc5d46defd4a","resolution":{"observed_at":"2026-08-07T05:57:32.203361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:37.075218Z","title":"Su- perdeepfool: a new fast and accurate minimal adversarial attack","venue":null,"work_id":"022008ad-1e1c-4248-a8b8-8bf12e53891f","year":2024},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.238227Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:a1613f4de4601df784158e2f7004db68bcd633c86a5c7766ff681a13e211ee70","observation_id":"2744c72c-2062-4cb8-a528-1d23f42a3398","resolution":{"observed_at":"2026-08-07T05:57:37.238461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1612.06299","last_updated":"2016-12-19T18:12:20Z","snapshot_observed_at":"2026-07-06T05:23:21.065620Z","submitted_at":"2016-12-19T18:12:20Z","title":"Simple Black-Box Adversarial Perturbations for Deep Networks","version":1},"cited_work":{"arxiv_id":"1612.06299","doi":null,"metadata_source":"pith","pith_arxiv_id":"1612.06299","snapshot_observed_at":"2026-08-07T05:57:33.655161Z","title":"Simple Black-Box Adversarial Perturbations for Deep Networks","venue":"cs.LG","work_id":"675a2d50-c11a-4504-aa73-bce7a200d058","year":2016},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.328490Z"},"links":{"cited_paper":"/paper/1612.06299","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:d74d91b120e18e1d3e31f5b3e2478d12a5a40e21723220d0da6fd871854ac79e","observation_id":"688f9910-7ccd-460f-a637-668dd1b473ba","resolution":{"observed_at":"2026-08-07T05:57:33.746610Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:36.815243Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models","venue":null,"work_id":"4732fa5f-b72e-4fb7-bf12-61bd22344929","year":2017},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.419822Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:bf0f880e344dabd25f5bc89f72ceb77a2a071c76552296d5363690425f1f7625","observation_id":"56e4ace2-79a8-49c4-8cf8-f5c477ac7551","resolution":{"observed_at":"2026-08-07T05:57:36.935749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:32.522555Z","title":"Black-box adversarial attacks with limited queries and information","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.522555Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:d06594de3fa1c395a6877164b778415f6962c53dfaf5ac99912ed5346c72f351","observation_id":"82e8d4a7-3f65-4e12-9cd6-5e83931ed033","resolution":{"observed_at":"2026-08-07T05:57:32.522555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"cs/0408007","last_updated":"2004-08-02T21:24:41Z","snapshot_observed_at":"2026-07-07T03:05:55.751870Z","submitted_at":"2004-08-02T21:24:41Z","title":"Online convex optimization in the bandit setting: gradient descent without a gradient","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"cs/0408007","snapshot_observed_at":"2026-08-07T05:57:32.620428Z","title":"Online convex optimization in the bandit setting: gradient descent without a gradient","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.620428Z"},"links":{"cited_paper":"/paper/cs/0408007","citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:acee4013bb317cf0b3e20be87a4ad82182edd399fd90bd23d1832e7bc1f93a1c","observation_id":"306390fe-afcb-4056-97a0-8d0d96505c1c","resolution":{"observed_at":"2026-08-07T05:57:32.620428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:36.459088Z","title":"Randomgradient-freeminimizationofconvexfunctions","venue":null,"work_id":"8e8909f2-c8ba-44b3-b683-9c551e44af0c","year":2017},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.694195Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:1cb9628beb5c72a00494fc77791b0155e3a1d1112d3948adee87bca3ba1bd6e4","observation_id":"eb728cd9-2cb3-478c-b4e6-9e6a0197226f","resolution":{"observed_at":"2026-08-07T05:57:36.647956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:36.174528Z","title":"Qeba: Query-efficient boundary-based blackbox attack","venue":null,"work_id":"37772272-9177-47a3-9b8f-86ef8c54a19f","year":2020},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.779934Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:6d78ae7d33523c2f77707f5691f21bd05a481f4bc8fe10420c57af6040ca2a00","observation_id":"4d968076-befa-4167-88c5-aa8d225c67ab","resolution":{"observed_at":"2026-08-07T05:57:36.323133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:35.853361Z","title":"Ageometry-inspireddecision- based attack","venue":null,"work_id":"502652f3-3ef9-4f0f-95d0-ae64022ab2a6","year":2019},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.842504Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:86a147a1992776d40f30aacb14eb0083a77e4bc44011928b017a6c1d12f98265","observation_id":"6ffa9df9-cc65-4f72-a8c9-7c65028a7d3b","resolution":{"observed_at":"2026-08-07T05:57:36.007743Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:35.619048Z","title":"Triangle attack: A query-efficient decision-based adversarial attack","venue":null,"work_id":"c9a52d46-3633-4e80-bbe1-144979fdf9a1","year":2022},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.880340Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:9d64ba2a86b47ab1632f9beaaad691286f0758f578e7696b4c3bfcb8bbb0ecc2","observation_id":"8f53f986-4b8c-4c73-8c63-ba11b9a8fd61","resolution":{"observed_at":"2026-08-07T05:57:35.692924Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:35.438715Z","title":"Springer Science & Business Media, 1986","venue":null,"work_id":"ab3ae9d3-9f8b-4d80-8ba5-3d84c1a9fa43","year":1986},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:32.973330Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:c1da1e1776f5f672f06d19c5c3a419cfa3a867554183f2da756a85171f4f7dae","observation_id":"21b176e1-b0ac-4b6f-8e88-fcb95dc3937f","resolution":{"observed_at":"2026-08-07T05:57:35.517875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:35.191684Z","title":"A measure of asymptotic efficiency for tests of a hypothesis based on the sum of observations.The Annals of Mathematical Statistics, pages 493–507, 1952","venue":null,"work_id":"a0b7766c-b595-4176-8aaa-a3a1df3cd369","year":1952},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:33.048618Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:125de3002399aed142ceb3c50171b6d1a93d13a3db0537087b39854271cd4236","observation_id":"3bf4f3b3-3e02-4701-951d-c31ba7c65890","resolution":{"observed_at":"2026-08-07T05:57:35.329352Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:35.060498Z","title":"Cambridge University Press, 2023","venue":null,"work_id":"0510443a-d216-4685-92b0-4c5b31699c54","year":2023},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:33.119790Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:006543ca43592053423216c25e81eae99d04ee387d0647b1a5541dcf54075f61","observation_id":"b755fc25-2586-4dc3-b569-d5a602541269","resolution":{"observed_at":"2026-08-07T05:57:35.125420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:34.830988Z","title":"GeoDA and qFool [8,45] use techniques similar to HSJA’s gradient estimation to locally approximate the decision boundary as a hyperplane at each iteration","venue":null,"work_id":"20ed516a-ed95-42ac-9abb-1ed6225761e4","year":null},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:33.212267Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:d7428387d34173b89a97167425f94986c141b5013dae8188020cd9024b994b11","observation_id":"3e9e5223-ba14-4ef6-b8a3-461625afdc3f","resolution":{"observed_at":"2026-08-07T05:57:34.940121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:34.621066Z","title":"copy ofbϕt,i, then the following inequality holds: P 1 nt ntX i=1 bϕ2 t,i − E[ bϕ2 t ] > ε ! ≤ 2 exp − 2ntε2 (2βt − 1)2","venue":null,"work_id":"70e2d7a0-6fe0-471d-a5ac-baa0b221f0e0","year":null},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:33.303263Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:34277632059e66dff1c167348cae5edecbce42e83b93c3bebfc60b3b4f2fc474","observation_id":"af768fc6-4b75-4ef9-9fa8-87d535e19cf7","resolution":{"observed_at":"2026-08-07T05:57:34.706137Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:34.428464Z","title":null,"venue":null,"work_id":"c65b81bc-7e46-4539-9518-7b4be8469494","year":null},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:33.401355Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:33bf6541b0776301d1ac4f8fb64f0473ec12152cf0ffc7d15624ce09420878d1","observation_id":"2bf5a2fd-9ef2-4f57-bda8-28f4a645a6f6","resolution":{"observed_at":"2026-08-07T05:57:34.496650Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:34.295104Z","title":"Here, the error termKnt,d(ε1, ε2) is defined as Knt,d (ε1, ε2) = nt(nt + 1) exp −Cdε 2 1 + 2 exp − 2ntε2 2 (2βt − 1)2 , for some universal constantC >0","venue":null,"work_id":"6123bddf-42e8-4194-af04-90ce5e0a12a0","year":2000},"citing_paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:33.487441Z"},"links":{"citing_paper":"/paper/2506.06933"},"observation_digest":"sha256:312516ce6cdaa61dbb9d66d5e157caab115831dc48aee6a34a32bda6d4a993f4","observation_id":"24a895f5-fe5c-4c18-a8e4-37834734608c","resolution":{"observed_at":"2026-08-07T05:57:34.354731Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.06933","last_updated":"2025-06-07T22:02:27Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-09T21:07:21.398081Z","submitted_at":"2025-06-07T22:02:27Z","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":15,"verified_exact":2,"verified_fuzzy":35},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 0 inbound Pith citation observations for arXiv:2506.06933."}