{"as_of":"2026-08-10T08:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c120e6d4b4605c96970087a7a56e7bc9f360b5d3c6a22cc671d5b49da0fea4ff","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:17:34.540307Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.10039/citation-record","integrity":"/paper/2508.10039/integrity","json":"/paper/2508.10039/citation-record.json","paper":"/paper/2508.10039"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.689367Z","title":null,"venue":null,"work_id":"bb5ee26f-be70-4565-9f07-292306176f5c","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.527979Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:9f551a8901784c1c252d07d36d50d640b8765fe4cff8ee26551f4de94c8e78c6","observation_id":"7fcb4847-622b-4660-8caf-d3424e3e9756","resolution":{"observed_at":"2026-08-05T22:17:34.692570Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.677770Z","title":null,"venue":null,"work_id":"c6e4d239-a329-40bb-b362-142974a14c34","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.532745Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:ed2901c374d6064001e9bbd9715056178dc9f9df1b651e5c1e6965e0f76a4bc2","observation_id":"51173ed5-a8c7-4628-b139-dcd4fd6264f5","resolution":{"observed_at":"2026-08-05T22:17:34.681722Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.662920Z","title":"(11) Therefore, the probability of at least one success is: P (Au) = 1 − P (Au)","venue":null,"work_id":"1c14a67c-784b-4e97-b94a-6aa2bc96ba29","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.536169Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:2d397372ce79d2dd40bda07d7aca24195106fa9048b5f228587c5c66c3e87f29","observation_id":"ce68229b-16ad-4332-b94f-29e07acee64f","resolution":{"observed_at":"2026-08-05T22:17:34.667916Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.651385Z","title":"(14) Therefore, the probability of at least one success with u + 1 attack methods is: P (Au+1) = 1 − P (Au+1)","venue":null,"work_id":"1bb23c0f-9039-43aa-bd25-884717bf48d2","year":2000},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.540307Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:65103be7f1cc5d4366732ea4cc67a3151b4b19771eeee48ee401f4d14db22fca","observation_id":"c84394ab-ef4d-402f-bb63-a5bad2bf5d32","resolution":{"observed_at":"2026-08-05T22:17:34.655181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.712630Z","title":"Cambodian Journal of Educational Re- search, 4(1):35–56","venue":null,"work_id":"733465f8-c9c6-4e32-ba77-9ebf13a42863","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.502543Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:cbf912457679c357a00fd3a15ba28afd4e6e620de49aaf15bd946b2ed8d94786","observation_id":"da566b24-2554-4fd6-b2a9-70c4eb6bcd93","resolution":{"observed_at":"2026-08-05T22:17:34.716198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11934","last_updated":"2021-03-11T18:45:13Z","snapshot_observed_at":"2026-08-09T05:32:57.900052Z","submitted_at":"2020-10-22T17:58:14Z","title":"mT5: A massively multilingual pre-trained text-to-text transformer","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11934","snapshot_observed_at":"2026-08-05T22:17:34.518223Z","title":"Wang Xiaosen, Kangheng Tong, and Kun He","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.518223Z"},"links":{"cited_paper":"/paper/2010.11934","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:5c76ce36d53124d5b1106b35267c42885e563ec14470ad7fc69526f6f78ddead","observation_id":"4f42dccd-0a73-4bbb-9ded-6bdd09c91234","resolution":{"observed_at":"2026-08-05T22:17:34.518223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15244","last_updated":"2024-05-28T00:33:16Z","snapshot_observed_at":"2026-07-06T18:19:08.871953Z","submitted_at":"2024-05-24T06:11:30Z","title":"Adversarial Attacks on Hidden Tasks in Multi-Task Learning","version":2},"cited_work":{"arxiv_id":"2405.15244","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.15244","snapshot_observed_at":"2026-08-05T22:17:34.566440Z","title":"Adversarial Attacks on Hidden Tasks in Multi-Task Learning","venue":"cs.LG","work_id":"79a09164-336c-4b34-95c6-ac3f20d1b978","year":2024},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":1996,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.523163Z"},"links":{"cited_paper":"/paper/2405.15244","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:d82dbfa8454c8b3fbb0e13f666fefd95a3f1956ac8ad3dd07af8ebcb368ad1d0","observation_id":"b4924e65-bba1-4c9f-bf10-b683aaccbeba","resolution":{"observed_at":"2026-08-05T22:17:34.572561Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.700162Z","title":"In CCS, pages 506–519","venue":null,"work_id":"93957dce-16c1-4346-bd3f-121cbd259de6","year":2016},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.507479Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:5865ef6def981a8ad631c6df6f4096d649d3bdd4d2391a9b4f34eccaab49ae8f","observation_id":"b861d24d-cb7f-4a4e-9d82-fe08f727bf51","resolution":{"observed_at":"2026-08-05T22:17:34.704253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.723864Z","title":"K Krishna and M Narasimha Murty","venue":null,"work_id":"0d3aabf9-41a4-4d41-b79f-174e5eb9d8d7","year":1999},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.493771Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:8179579c9176e8c8371ba9afd5c1312252473edb706a6a488c89d75ae03e6e65","observation_id":"781e8d42-fc75-467c-aa0b-946659aac2db","resolution":{"observed_at":"2026-08-05T22:17:34.727768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.00944","last_updated":"2023-06-16T13:24:15Z","snapshot_observed_at":"2026-08-09T17:46:06.104474Z","submitted_at":"2023-02-02T08:35:34Z","title":"TransFool: An Adversarial Attack against Neural Machine Translation Models","version":2},"cited_work":{"arxiv_id":"2302.00944","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.00944","snapshot_observed_at":"2026-08-05T22:17:34.598201Z","title":"TransFool: An Adversarial Attack against Neural Machine Translation Models","venue":"cs.CL","work_id":"ae074385-ba0a-46bd-842d-d6f6b215101f","year":2023},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.512599Z"},"links":{"cited_paper":"/paper/2302.00944","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:0e556d811078fe679795e650db3d029ef90571b85015de3142b05b38ee7964cd","observation_id":"adf30482-37f7-4b60-a2ee-5077d8fcc117","resolution":{"observed_at":"2026-08-05T22:17:34.603352Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2107.04187","last_updated":"2021-07-15T11:14:15Z","snapshot_observed_at":"2026-08-09T18:34:41.285201Z","submitted_at":"2021-07-09T03:28:17Z","title":"A Multi-modal and Multi-task Learning Method for Action Unit and Expression Recognition","version":2},"cited_work":{"arxiv_id":"2107.04187","doi":null,"metadata_source":"pith","pith_arxiv_id":"2107.04187","snapshot_observed_at":"2026-08-05T22:17:34.630188Z","title":"A Multi-modal and Multi-task Learning Method for Action Unit and Expression Recognition","venue":"cs.CV","work_id":"9002d840-fb83-4b90-b35c-68c40212314e","year":2021},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.489612Z"},"links":{"cited_paper":"/paper/2107.04187","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:80ba7de9d83878a69fed79b81695ee39bc630af29c34cd5bee3474824d9ca5fe","observation_id":"f070afd0-a91c-4a2e-bff7-16c1316aeb3a","resolution":{"observed_at":"2026-08-05T22:17:34.634359Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1903.06620","last_updated":"2019-03-19T01:37:05Z","snapshot_observed_at":"2026-07-06T07:39:34.988778Z","submitted_at":"2019-03-15T16:04:11Z","title":"On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models","version":2},"cited_work":{"arxiv_id":"1903.06620","doi":null,"metadata_source":"pith","pith_arxiv_id":"1903.06620","snapshot_observed_at":"2026-08-05T22:17:34.615334Z","title":"On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models","venue":"cs.CL","work_id":"b10572af-2dbb-40ff-9eaa-bfe36fc3f9a3","year":2019},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.497816Z"},"links":{"cited_paper":"/paper/1903.06620","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:2026aa7558fc7fd6ed5e0881bbfad23e26b92899c67d5938430cd9c82f27dcdb","observation_id":"dec4d6e4-552d-4275-b57b-8448daf69cbb","resolution":{"observed_at":"2026-08-05T22:17:34.619647Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.02116","last_updated":"2020-04-08T01:02:17Z","snapshot_observed_at":"2026-08-02T09:09:10.011185Z","submitted_at":"2019-11-05T22:42:00Z","title":"Unsupervised Cross-lingual Representation Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.02116","snapshot_observed_at":"2026-08-05T22:17:34.485159Z","title":"Multimedia Tools and Applica- tions, 83(4):11215–11227","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.485159Z"},"links":{"cited_paper":"/paper/1911.02116","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:05d7859ae35b6b03785dfe6a241bf4dd1d0e937cd3a52284d0999334aeb3c03d","observation_id":"c3c80742-b9da-496a-9cd6-39a90b802b13","resolution":{"observed_at":"2026-08-05T22:17:34.485159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T12:36:45.945281Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":4,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2508.10039."}