{"as_of":"2026-08-19T17:03:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cc32f0c15aa496269b655cf70d1f31cec818fa9457f1540d6480ccdc85c39437","coverage":[{"denominator":66,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":66,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T14:40:54.690777Z","state":"measured"},{"denominator":67,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":67,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-19T21:21:04.971834Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-19T21:22:47.612297Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"cited_work":{"arxiv_id":"2508.21072","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.21072","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shamshad, T","venue":null,"work_id":"ade32823-4fe4-487a-a042-a99748104893","year":2024},"citing_paper":{"arxiv_id":"2605.16796","last_updated":"2026-05-16T03:57:37Z","snapshot_observed_at":"2026-08-14T10:55:27.681200Z","submitted_at":"2026-05-16T03:57:37Z","title":"Watermarks Attack Watermarks: Re-Watermarking as a Generic Removal Strategy","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-19T21:21:04.971834Z"},"links":{"cited_paper":"/paper/2508.21072","citing_paper":"/paper/2605.16796"},"observation_digest":"sha256:d881b13c22908f68ebc8b8987601443a63dcb5f4a783de42660f0cf98af25894","observation_id":"b0348a39-7a2b-4c9b-8c14-d2c7ff93c6e7","resolution":{"observed_at":"2026-05-19T21:22:47.616950Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.21072/citation-record","integrity":"/paper/2508.21072/integrity","json":"/paper/2508.21072/citation-record.json","paper":"/paper/2508.21072"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.329465Z","title":"Digital image and video watermarking: methodologies, attacks, applications, and future directions","venue":null,"work_id":"9d7bc053-72f7-474c-a3f2-93d9cc42cf44","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.290706Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:da14d5891bbf07cb518ddb84a49971aa8fcd7e0e8be3babbbbb497e3bc7964bb","observation_id":"3ce5dc02-835f-4a89-955d-9475f4f9418f","resolution":{"observed_at":"2026-08-05T14:40:56.335577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T14:40:54.296889Z","title":"Gpt-4 technical report.arXiv preprint arXiv:2303.08774, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.296889Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:4882921f5bffea97b1423b7ae820e52e48bdc41c1b52fa21205e08280d6e12c7","observation_id":"9b717481-4d10-45f5-a14c-b7086de5ff66","resolution":{"observed_at":"2026-08-05T14:40:54.296889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.311216Z","title":"Combined dwt-dct digital image watermarking.Journal of computer science, 3(9):740–746, 2007","venue":null,"work_id":"663dfee6-8e7d-48c6-84b8-56d6df4bc761","year":2007},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.302453Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:59f61655ea3bfd881e00eafc04d6a37271e19fc5a7a623e03fc4122a44a5a6b0","observation_id":"c22a7a7e-520c-4655-86af-866811b576db","resolution":{"observed_at":"2026-08-05T14:40:56.317195Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.293364Z","title":"Waves: Benchmarking the robustness of image watermarks","venue":null,"work_id":"c495764c-06f4-4754-a1e1-a9552bcccd8c","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.307590Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:6f2adbab0f44334913ce3dc28e7a81d4185ac4aed5d84bb8490957e8dc267e8c","observation_id":"ab6393d8-f64e-44de-89a7-48eab0e54207","resolution":{"observed_at":"2026-08-05T14:40:56.298540Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07871","last_updated":"2026-05-11T08:00:17Z","snapshot_observed_at":"2026-08-14T12:50:51.890540Z","submitted_at":"2025-07-10T15:52:32Z","title":"Mitigating Watermark Forgery in Generative Models via Randomized Key Selection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07871","snapshot_observed_at":"2026-08-05T14:40:54.312582Z","title":"Mitigating watermark stealing attacks in generative models via multi-key watermarking.arXiv preprint arXiv:2507.07871, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.312582Z"},"links":{"cited_paper":"/paper/2507.07871","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:9ea2547e8e597685ba82648068d11fb30b532224cff922047ab4dff528a33b44","observation_id":"7b21b1f0-49c6-4323-b704-11672c863626","resolution":{"observed_at":"2026-08-05T14:40:54.312582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.276556Z","title":"Blind image deconvolution using deep generative priors.IEEE Transactions on Computational Imaging, 6:1493–1506, 2020","venue":null,"work_id":"65e7f986-ec19-48ef-9972-526321ed312b","year":2020},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.318446Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:086f5d36d59a451398a15d799acd113948a347bcc0c1c04821f40e5b3a1bc919","observation_id":"8bd846e7-e2a7-4bd6-9829-40b20a32c6d9","resolution":{"observed_at":"2026-08-05T14:40:56.282370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.258107Z","title":"Image watermarking using dct domain constraints","venue":null,"work_id":"b7c0be1f-0ed0-4dea-84b5-a606326e3be6","year":1996},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.324697Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:5bef1e85a200c1a995b6dd51b769fc5a1e0d7b57dc2b28c29111f1d79abae44c","observation_id":"b360b876-27a2-47ff-be31-bc889989eb53","resolution":{"observed_at":"2026-08-05T14:40:56.263918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10465","last_updated":"2025-02-12T09:00:48Z","snapshot_observed_at":"2026-08-18T07:17:02.579178Z","submitted_at":"2025-02-12T09:00:48Z","title":"Image Watermarking of Generative Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.10465","snapshot_observed_at":"2026-08-05T14:40:54.329386Z","title":"Image watermarking of generative diffusion models.arXiv preprint arXiv:2502.10465, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.329386Z"},"links":{"cited_paper":"/paper/2502.10465","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:2e14f2b7cbd4d99be7f1205a83e75a64491f221342ebb9a99b4a190f30ca1b82","observation_id":"148ce7d4-4602-4126-b0da-7e6012da0ba8","resolution":{"observed_at":"2026-08-05T14:40:54.329386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02440","last_updated":"2025-05-21T04:37:27Z","snapshot_observed_at":"2026-08-16T13:12:59.586248Z","submitted_at":"2024-10-03T12:37:39Z","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02440","snapshot_observed_at":"2026-08-05T14:40:54.335560Z","title":"Optimizing adaptive attacks against content watermarks for language models.arXiv preprint arXiv:2410.02440, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.335560Z"},"links":{"cited_paper":"/paper/2410.02440","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:04546c8051363dbe5e9fecc6359fc01f2cf112c160d6cac5f6317c7359e1a127","observation_id":"646e5f38-fd0f-418f-b767-8b32c416eb65","resolution":{"observed_at":"2026-08-05T14:40:54.335560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:54.341599Z","title":"Erasing the invisible: A stress-test challenge for image watermarks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.341599Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:d032ce62acc2a8fc6f63750c9456c1de4b98b514b0259ed07aef12154fe0719d","observation_id":"03b6630e-24ac-486e-9ade-5312ae3efcfc","resolution":{"observed_at":"2026-08-05T14:40:54.341599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.08197","last_updated":"2025-05-16T05:17:14Z","snapshot_observed_at":"2026-08-19T04:55:47.388734Z","submitted_at":"2025-05-13T03:14:18Z","title":"Visual Watermarking in the Era of Diffusion Models: Advances and Challenges","version":2},"cited_work":{"arxiv_id":"2505.08197","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.08197","snapshot_observed_at":"2026-08-05T14:40:55.342315Z","title":"Visual Watermarking in the Era of Diffusion Models: Advances and Challenges","venue":"cs.CV","work_id":"95054645-4b67-4ad9-bd2c-9adcb238d9b8","year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.348280Z"},"links":{"cited_paper":"/paper/2505.08197","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:b85ee20060b39a4e20ef59e95e5e1bbf5f7908cf07eaa730607dc6d2e411c5ad","observation_id":"14c78cc1-4897-47cc-9716-c2e9ef422e90","resolution":{"observed_at":"2026-08-05T14:40:55.349102Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.04901","last_updated":"2025-04-26T09:43:17Z","snapshot_observed_at":"2026-08-19T16:20:05.699071Z","submitted_at":"2025-02-07T13:11:28Z","title":"On the Difficulty of Constructing a Robust and Publicly-Detectable Watermark","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.04901","snapshot_observed_at":"2026-08-05T14:40:54.353684Z","title":"On the difficulty of constructing a robust and publicly-detectable watermark.arXiv preprint arXiv:2502.04901, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.353684Z"},"links":{"cited_paper":"/paper/2502.04901","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:63805cb7c493119e6b9000fbcb408f8820a946b8c56c1055c850f5cbde79f846","observation_id":"f0948a6d-d1a2-48c6-bf2f-59b83e041bf1","resolution":{"observed_at":"2026-08-05T14:40:54.353684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.227444Z","title":"Creating, using, misusing, and detecting deep fakes.Journal of Online Trust and Safety, 1(4), 2022","venue":null,"work_id":"79b67185-6911-4c9f-b28f-73fbff38caac","year":2022},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.360340Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:37e28fe8b38adfb25e7b5e7e909038029a4370cc9f6582e52b6dca74b892c993","observation_id":"637f8ee7-db07-46ca-bf7c-3401c6bd4df7","resolution":{"observed_at":"2026-08-05T14:40:56.232814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:54.365307Z","title":"The good, the bad and the ugly: Watermarks, transferable attacks and adversarial defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.365307Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:60399965b3c8fe79a04eff063afc8f4be3e5650d205031337d16addd9dd0e0fe","observation_id":"04330989-c8ff-4d6e-8def-687ca7a549b8","resolution":{"observed_at":"2026-08-05T14:40:54.365307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.211449Z","title":"Generative adversarial networks","venue":null,"work_id":"99de2761-7fd6-4771-b65c-dcf6755b5eda","year":2020},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.371304Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:d064599976ce1ac0b3386b549db8dd6b3661614bd39b046fc0f796db006947ae","observation_id":"2feeb74a-eff4-491e-a459-cf6ef394e9e4","resolution":{"observed_at":"2026-08-05T14:40:56.216700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.192664Z","title":"Stable diffusion prompts dataset.https://huggingface.co/datasets/ Gustavosta/Stable-Diffusion-Prompts, 2024","venue":null,"work_id":"e567e930-8d87-4ec2-97fd-08a170d19dc0","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.381978Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:4a6c2f2c802563b7477c97abbbb06a21881fb9535e6894521cfec34aabc10adb","observation_id":"552168a2-0b5e-48d5-a696-fb5c239694fe","resolution":{"observed_at":"2026-08-05T14:40:56.198567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:54.388143Z","title":"Denoising diffusion probabilistic models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.388143Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:2006e3b75876066c213580a6a1d30bf6748288446a4895516108ba8d82fa7792","observation_id":"0e428ea7-4f3a-414e-b676-b3fee9254d42","resolution":{"observed_at":"2026-08-05T14:40:54.388143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2505.22845","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.201593Z","title":"Security benefits and side effects of labeling ai-generated images.arXiv preprint arXiv:2505.22845, 2025","venue":null,"work_id":"84012415-b4d5-4749-b331-a422ffe893c7","year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.393849Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:2dc6359dc09d21d339fd74cd05de5f598486f5b9d0c3aec3bd6cef6f1e961548","observation_id":"1b05aec8-49a2-479b-a594-3bd2ad96017a","resolution":{"observed_at":"2026-08-05T14:40:55.211139Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.152491Z","title":"Digital image watermarking using deep learning: A survey.Computer Science Review, 53:100662, 2024","venue":null,"work_id":"b7dee801-380c-4619-9255-ccb850cf30dc","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.399553Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:fae30bd58008d745715037d8c2ec9d19f1f3c0943a03d2bc4800d5d4212613ff","observation_id":"759ab440-259b-4f01-8993-04e0bb8526e9","resolution":{"observed_at":"2026-08-05T14:40:56.160338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.131501Z","title":"Robin: Robust and invisible watermarks for diffusion models with adversarial optimization.Advances in Neural Information Processing Systems, 37:3937–3963, 2024","venue":null,"work_id":"d363a006-76d0-49c5-b4b9-eb02b412f0fb","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.405809Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:fe6781cea12ce0cbd2797cc80b8fc871b9c775cd6d6df99976e2dc6385b00f58","observation_id":"2869f3c6-e47b-46c6-9b88-236a47ceb6af","resolution":{"observed_at":"2026-08-05T14:40:56.138962Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.12511","last_updated":"2024-12-17T03:50:13Z","snapshot_observed_at":"2026-08-13T19:40:52.588887Z","submitted_at":"2024-12-17T03:50:13Z","title":"Invisible Watermarks: Attacks and Robustness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.12511","snapshot_observed_at":"2026-08-05T14:40:54.411602Z","title":"Invisible watermarks: Attacks and robustness.arXiv preprint arXiv:2412.12511, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.411602Z"},"links":{"cited_paper":"/paper/2412.12511","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:47b55ab477f90faf60f978b68b6bdf8e9547f0ed4480c9e6ec25edfb76517e5f","observation_id":"a6c17bad-6503-4623-9099-4d14de5077f7","resolution":{"observed_at":"2026-08-05T14:40:54.411602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.20111","last_updated":"2025-04-27T18:29:26Z","snapshot_observed_at":"2026-08-18T22:14:06.685862Z","submitted_at":"2025-04-27T18:29:26Z","title":"Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.20111","snapshot_observed_at":"2026-08-05T14:40:54.417216Z","title":"Forging and removing latent- noise diffusion watermarks using a single image","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.417216Z"},"links":{"cited_paper":"/paper/2504.20111","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:ae7d6563fd1d1c439b56f5c1992ac89112f81663beb81051bb6e8709e36f2414","observation_id":"37ef5f00-69df-4b38-a540-728fae0bfd14","resolution":{"observed_at":"2026-08-05T14:40:54.417216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.110382Z","title":"A dwt-dft composite watermarking scheme robust to both affine transform and jpeg compression.IEEE transactions on circuits and systems for video technology, 13(8):776–786, 2003","venue":null,"work_id":"868761b9-b71b-40ab-b561-057095a4bdd8","year":2003},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.423513Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:cf44ced317360c887a4eee968c335281feb5f354035eff2b63b3373198deadf3","observation_id":"9ac04f42-7c78-4514-810e-8d979751812c","resolution":{"observed_at":"2026-08-05T14:40:56.117101Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:54.429717Z","title":"Auto-encoding variational bayes, 2013","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.429717Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:a35804ff47948b69602ebd526c112300057ea19f9c77c685e5e1ae73e4726da5","observation_id":"804f9e62-816b-45b4-b5fc-0997ce969634","resolution":{"observed_at":"2026-08-05T14:40:54.429717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.06026","last_updated":"2023-02-14T12:45:31Z","snapshot_observed_at":"2026-08-16T17:15:17.549261Z","submitted_at":"2022-03-11T15:50:06Z","title":"The Role of ImageNet Classes in Fr\\'echet Inception Distance","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.06026","snapshot_observed_at":"2026-08-05T14:40:54.435610Z","title":"The role of imagenet classes in fr\\’echet inception distance","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.435610Z"},"links":{"cited_paper":"/paper/2203.06026","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:8ce2c9e82321a669af91fb3844f6dbbcd110cddf7f63310e798cef346cebe9d7","observation_id":"fee94f46-48f9-4ec0-812b-2caa1b34c9e4","resolution":{"observed_at":"2026-08-05T14:40:54.435610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13998","last_updated":"2025-07-02T07:13:48Z","snapshot_observed_at":"2026-08-19T15:48:05.925643Z","submitted_at":"2025-02-19T07:30:19Z","title":"A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior","version":2},"cited_work":{"arxiv_id":"2502.13998","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.13998","snapshot_observed_at":"2026-08-05T14:40:55.034047Z","title":"A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior","venue":"eess.IV","work_id":"36dfc787-e684-46e1-a6e9-49f5ada9cc6a","year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.441772Z"},"links":{"cited_paper":"/paper/2502.13998","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:46c6494f63da53a8f5349cacd6715305d0b7f54c73bc4c083f48d8e23e920f15","observation_id":"cffe5a5d-f73f-4426-a1b5-66d94934f75c","resolution":{"observed_at":"2026-08-05T14:40:55.040805Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.068869Z","title":"A survey of text watermarking in the era of large language models","venue":null,"work_id":"ddf95b4d-d068-4536-a871-c79a949593b5","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.449753Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:cef839274a13e28b282ce12c30f04761fded9a285141efa50aaade4197cab21e","observation_id":"23fbc9cc-fc41-4986-8f8c-2bc146f48073","resolution":{"observed_at":"2026-08-05T14:40:56.074891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05470","last_updated":"2025-03-02T02:07:21Z","snapshot_observed_at":"2026-08-18T22:16:07.631916Z","submitted_at":"2024-10-07T20:04:29Z","title":"Image Watermarks are Removable Using Controllable Regeneration from Clean Noise","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05470","snapshot_observed_at":"2026-08-05T14:40:54.463578Z","title":"Image watermarks are removable using controllable regeneration from clean noise","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.463578Z"},"links":{"cited_paper":"/paper/2410.05470","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:d028b623525ac8ab47b0934a1778377e02b27db86298662f923dcf9e8f001a20","observation_id":"7aa9df13-d970-46b3-bbee-c3b1bef97c41","resolution":{"observed_at":"2026-08-05T14:40:54.463578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.049694Z","title":"Analyzing Threats of Large-Scale Machine Learning Systems","venue":null,"work_id":"9b848b3a-0c28-489f-a909-eb853b2a52b7","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.469059Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:6d7791d42de1b89018fba574becc1d11284751fb39860c607e206fa5057887b1","observation_id":"5368520a-5f40-45b8-aa36-fa23a2d830f6","resolution":{"observed_at":"2026-08-05T14:40:56.055418Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.029084Z","title":"In32nd USENIX Security Symposium (USENIX Security 23), pp","venue":null,"work_id":"5095fed2-a592-4eff-9111-009c7f4624cd","year":2023},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.475254Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:2951f93c0849d1820b595c19b4cd97672eb062f0310e734b407a3064c94368be","observation_id":"3b0fd4c6-ad40-40cf-af71-203b7739e33d","resolution":{"observed_at":"2026-08-05T14:40:56.037537Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:56.010574Z","title":"Leveraging optimization for adaptive attacks on image watermarks","venue":null,"work_id":"367af16f-83bd-4f07-b47a-19701a3bb2d2","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.481075Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:519ec4ee9f489c87e7055246377c48c5388a0b1d0348ba6fc662c7024132c498","observation_id":"7a50db26-4a74-4eb4-a2c0-f3e09ad222f2","resolution":{"observed_at":"2026-08-05T14:40:56.015928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.988945Z","title":"Are semantic watermarks for diffusion models resilient to layout control? InThe 1st Workshop on GenAI Watermarking","venue":null,"work_id":"aecf7ee6-015d-4322-b35f-80f877f3fd25","year":null},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.486881Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:e911727a565cb69fe7ce9d498ee26691c05f1ba03fb7a984c035a5461c23d1b0","observation_id":"847e48b0-60ec-469d-8334-edc0d993cde6","resolution":{"observed_at":"2026-08-05T14:40:55.994180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-08-18T22:44:13.666151Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-05T14:40:54.492314Z","title":"Safety at scale: A comprehensive survey of large model safety.arXiv preprint arXiv:2502.05206, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.492314Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:2b201c99db748e8ee03454ee57554b4666514b70cd39d96fe262c3b1d52e16e4","observation_id":"064f7a99-bcc6-4ccd-accf-47c09ccd9273","resolution":{"observed_at":"2026-08-05T14:40:54.492314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.01073","last_updated":"2022-01-05T00:07:35Z","snapshot_observed_at":"2026-08-16T16:53:14.231987Z","submitted_at":"2021-08-02T17:59:47Z","title":"SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.01073","snapshot_observed_at":"2026-08-05T14:40:54.498309Z","title":"Sdedit: Guided image synthesis and editing with stochastic differential equations","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.498309Z"},"links":{"cited_paper":"/paper/2108.01073","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:39ded286e8b83231f4467c6a386d6f174b07220f8b6bc90651aaa959ce8fa7b6","observation_id":"85972f23-10ee-40bf-b0aa-3b52bf3eef4e","resolution":{"observed_at":"2026-08-05T14:40:54.498309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.969126Z","title":"Black-box forgery attacks on semantic watermarks for diffusion models","venue":null,"work_id":"c50f92e1-f135-40db-b638-d618573af288","year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.505878Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:578744066d62d933e60dec090d5847e5e61b6db5dd50bdc85bab819889763ae5","observation_id":"5bb87a25-efb7-4821-a564-146f603c4317","resolution":{"observed_at":"2026-08-05T14:40:55.976323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-18T12:29:58.053859Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-05T14:40:54.510736Z","title":"Diffusion models for adversarial purification.arXiv preprint arXiv:2205.07460, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.510736Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:be4bf59ddc554a224521eb51843dadfb20e0286fbd763af9765de6f981f1772c","observation_id":"6a589f5b-b5a9-4d48-9015-06542f1e4e4b","resolution":{"observed_at":"2026-08-05T14:40:54.510736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.951922Z","title":"A survey of digital image watermarking techniques","venue":null,"work_id":"125eeb2d-98ac-45dc-88a5-c94ba98c3690","year":2005},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.516226Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:1bef751a9ac08df75ad92d16069c71d68a66d7a53b6b2c4deb3b43a7e9fef03d","observation_id":"955e9713-b0d6-4ba8-ae86-bbf1ee125275","resolution":{"observed_at":"2026-08-05T14:40:55.957237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.931080Z","title":"Single-shot retinal image enhancement using deep image priors","venue":null,"work_id":"e05835f0-decd-4dca-afa4-a898e8ba40db","year":2020},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.522907Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:3f5344991807d2a8daa30a38f268779d71ce5f6c824426f6a62cfc8c572a3be3","observation_id":"075dd0d5-4c26-49c4-b4c5-ed3542c905e7","resolution":{"observed_at":"2026-08-05T14:40:55.938745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.912519Z","title":"Untrained neural network priors for inverse imaging problems: A survey","venue":null,"work_id":"717c4f9d-ab3e-4867-8a5b-53be59fb013b","year":2022},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.528684Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:c0cfc187d081ea89591f5f64765741294711abd52594b59a56b3e89168e9cb74","observation_id":"a11a2310-b451-4ea0-8617-53e85309c6c7","resolution":{"observed_at":"2026-08-05T14:40:55.918380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.891357Z","title":"An overview on digital content watermarking","venue":null,"work_id":"5a2aa3c4-3a72-461a-a945-d059ed06f81d","year":2022},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.534289Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:4dd82fcd69a0576d22073f72af7b3304f9236167586bd8a596a8e5c88a3af901","observation_id":"541d188f-5871-4ab4-a046-cc788c158a38","resolution":{"observed_at":"2026-08-05T14:40:55.899754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.11478","last_updated":"2024-11-19T14:11:22Z","snapshot_observed_at":"2026-08-15T05:22:40.307672Z","submitted_at":"2024-11-18T11:26:42Z","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.11478","snapshot_observed_at":"2026-08-05T14:40:54.539544Z","title":"Sok: On the role and future of aigc watermarking in the era of gen-ai","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.539544Z"},"links":{"cited_paper":"/paper/2411.11478","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:c2399e1c1735d56f8661f9c0f62cf8b73b6638f1e0d8e4fbb66932762494445e","observation_id":"0344d920-bfe0-4291-98b7-ef0498f1c61d","resolution":{"observed_at":"2026-08-05T14:40:54.539544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13407","last_updated":"2025-07-17T05:38:30Z","snapshot_observed_at":"2026-08-18T18:57:05.126969Z","submitted_at":"2025-07-17T05:38:30Z","title":"IConMark: Robust Interpretable Concept-Based Watermark For AI Images","version":1},"cited_work":{"arxiv_id":"2507.13407","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.13407","snapshot_observed_at":"2026-08-05T14:40:54.908105Z","title":"IConMark: Robust Interpretable Concept-Based Watermark For AI Images","venue":"cs.CV","work_id":"0fe29ed8-f2a6-45dc-bf6d-99252b449d07","year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.545044Z"},"links":{"cited_paper":"/paper/2507.13407","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:31bb9276c53d284673ad71c09d864773fd6d44dd97be23102b5b21bd0be0f371","observation_id":"f72e7d8b-918b-487b-9b40-4fc4efd9a976","resolution":{"observed_at":"2026-08-05T14:40:54.913582Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.06605","last_updated":"2018-05-18T00:20:52Z","snapshot_observed_at":"2026-08-15T23:59:07.582902Z","submitted_at":"2018-05-17T05:38:55Z","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.06605","snapshot_observed_at":"2026-08-05T14:40:54.551256Z","title":"Defense-gan: Protect- ing classifiers against adversarial attacks using generative models","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.551256Z"},"links":{"cited_paper":"/paper/1805.06605","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:6ee4cb7821e5357676d90a7b7ca9997754f8f102e32da9fe614656f68e483366","observation_id":"fa40f2ce-391d-4c3c-b5d7-d49c2e75409b","resolution":{"observed_at":"2026-08-05T14:40:54.551256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.15386","last_updated":"2024-04-22T09:09:21Z","snapshot_observed_at":"2026-08-17T20:02:26.099304Z","submitted_at":"2024-04-22T09:09:21Z","title":"U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AI","version":1},"cited_work":{"arxiv_id":"2406.15386","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.15386","snapshot_observed_at":"2026-08-05T14:40:54.856005Z","title":"U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AI","venue":"cs.CY","work_id":"8e9ab3b4-fdd4-4ec4-bd66-7585564c96c1","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.558432Z"},"links":{"cited_paper":"/paper/2406.15386","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:475c1492a768340da66a10292167e2710a8b758e250a8ec79ed39aa5a5ca6335","observation_id":"5ea8444c-ab9f-4acd-9ac7-bc11e95ddb9b","resolution":{"observed_at":"2026-08-05T14:40:54.862470Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.871159Z","title":"Compressed sensing-based robust phase retrieval via deep generative priors.IEEE Sensors Journal, 21(2):2286–2298, 2020","venue":null,"work_id":"28b332ae-19cb-496f-af81-458a0c34e686","year":2020},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.566139Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:7f96d8ef0e7a424919ef19d335773e7222f0ae6e2903ba66a757090b3b128845","observation_id":"1d20d8ba-c6f1-4ce6-99d2-743ddcf4a877","resolution":{"observed_at":"2026-08-05T14:40:55.877712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.852231Z","title":"Deep ptych: Subsampled fourier ptychography using generative priors","venue":null,"work_id":"65d854f4-95de-40b5-a4df-acc2ed463931","year":2019},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.573610Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:24339658226e28ad49f2ebb17abddfb83acba43a63ddb21de2d4cb64153816f7","observation_id":"48f0f7b6-b430-4bd2-810a-ff6f492dc714","resolution":{"observed_at":"2026-08-05T14:40:55.857622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.831911Z","title":"Adaptive ptych: Leveraging image adaptive generative priors for subsampled fourier ptychogra- phy","venue":null,"work_id":"282fa5df-db9c-4205-ad24-16c8cc3d4111","year":2019},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.579897Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:e823191a2092d86e08647822a7c5dbe4b81cdaef6e5d0a8ac01adf92f5d57136","observation_id":"b4cd88ac-853c-4ed1-ab88-e85cb4d30d8c","resolution":{"observed_at":"2026-08-05T14:40:55.838407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.811620Z","title":"Subsampled fourier ptychography via pretrained invertible and untrained network priors","venue":null,"work_id":"7153b108-a4d3-4083-a67c-553098ce201c","year":2019},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.585519Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:5be7c3df393ded1914dadcaada3f243cfa9b57446bb9cdc16fbc4b95228d88f4","observation_id":"a137b06b-3797-47e9-838d-dbe91d1549a5","resolution":{"observed_at":"2026-08-05T14:40:55.817972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.777053Z","title":"Clip2protect: Protect- ing facial privacy using text-guided makeup via adversarial latent search","venue":null,"work_id":"9f7f0af8-94f4-4c76-b339-24d0390f4589","year":2023},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.591077Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:c37d4f7c9c00c99474cacae2c1c512a770f7c6616278a7554a238ef502cd7510","observation_id":"639a8bd0-cd98-4cf9-a7b9-478cb902c189","resolution":{"observed_at":"2026-08-05T14:40:55.788492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.749007Z","title":"Evading forensic classifiers with attribute-conditioned adversarial faces","venue":null,"work_id":"523a73f5-57f1-4c05-ae37-9d3b6df07f50","year":2023},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.596635Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:5b61545fd635e49678b5f9529c342406611ebff080c455d65df6bef52f46a6cf","observation_id":"c9f40d6a-750c-402b-83ac-972d9f0b86c8","resolution":{"observed_at":"2026-08-05T14:40:55.756393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.21452","last_updated":"2025-06-26T16:34:00Z","snapshot_observed_at":"2026-08-19T12:55:00.520269Z","submitted_at":"2025-06-26T16:34:00Z","title":"Rethinking Oversaturation in Classifier-Free Guidance via Low Frequency","version":1},"cited_work":{"arxiv_id":"2506.21452","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.21452","snapshot_observed_at":"2026-08-05T14:40:54.828098Z","title":"Rethinking Oversaturation in Classifier-Free Guidance via Low Frequency","venue":"cs.CV","work_id":"1bbdcfa6-a871-4f31-871d-b9485a14796f","year":2025},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.603302Z"},"links":{"cited_paper":"/paper/2506.21452","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:4f4900ed0e459cb2ea80c8cce2d870ac1f6d299bca2e6e071da70cf2ccbf069c","observation_id":"dda84875-9978-4e5e-98bb-9131e701bd46","resolution":{"observed_at":"2026-08-05T14:40:54.833804Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.722931Z","title":"Stegastamp: Invisible hyperlinks in physical photographs","venue":null,"work_id":"2a7d802c-b090-4a72-beda-c4c65badb6bc","year":2020},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.610058Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:7791c191c23498467c31c8f6a91dd40df6b678de5a1e71669aa0e7b10edb8184","observation_id":"ea2ad536-42d6-466d-b162-982b775d55ef","resolution":{"observed_at":"2026-08-05T14:40:55.728980Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14260","last_updated":"2024-01-07T21:52:09Z","snapshot_observed_at":"2026-08-16T14:32:26.417153Z","submitted_at":"2023-12-21T19:21:36Z","title":"Elevating Defenses: Bridging Adversarial Training and Watermarking for Model Resilience","version":2},"cited_work":{"arxiv_id":"2312.14260","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.14260","snapshot_observed_at":"2026-08-05T14:40:54.787195Z","title":"Elevating Defenses: Bridging Adversarial Training and Watermarking for Model Resilience","venue":"cs.LG","work_id":"0a20aaf1-3574-46ab-beed-6a58a9ae6730","year":2023},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.615588Z"},"links":{"cited_paper":"/paper/2312.14260","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:8d7f79ca4f135273e47d78a4519429baa39fcc866c66e75a71cd604977f659a2","observation_id":"795f29ff-062e-4521-956d-6ade4c8fb204","resolution":{"observed_at":"2026-08-05T14:40:54.796059Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.677340Z","title":"Deep image prior","venue":null,"work_id":"d670de9b-6ebd-45e8-9ce6-4a709b005cce","year":2018},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.621772Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:5d38303151df7ba1e09edcb1abe4a2a9c496a8c923e2da3c2259e52fc467cb94","observation_id":"9e0e67b2-be4a-470e-9260-3e82db8a65e1","resolution":{"observed_at":"2026-08-05T14:40:55.687474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:54.627911Z","title":"Security and privacy on generative data in aigc: A survey.ACM Computing Surveys, 57(4):1–34, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.627911Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:4ec6f30ea3ce28f14210346a99c15598cfb0b4941ade70eb90e37b86dee80f8b","observation_id":"7f2f5c61-b6d7-482d-a47c-d7bf30017bbd","resolution":{"observed_at":"2026-08-05T14:40:54.627911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:54.632571Z","title":"Image quality assessment: from error visibility to structural similarity.IEEE transactions on image processing, 13(4):600–612, 2004","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.632571Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:4990e7591e427a845ff0402497612e3486dfac817948bef4d7497d9fc2dc00d9","observation_id":"8f982f08-989d-4802-8ce6-000853ac6793","resolution":{"observed_at":"2026-08-05T14:40:54.632571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.617583Z","title":"Tree-rings wa- termarks: Invisible fingerprints for diffusion images.Advances in Neural Information Processing Systems, 36, 2024","venue":null,"work_id":"a5e2b106-7369-43d0-9f95-1fd164ebef70","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.637448Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:55c8d9f6ddce6e486b21add66cc28b16221e1974b5535d3055ebaadbc7a261b1","observation_id":"8fa0885d-06b5-47d0-8659-1af7b30dae65","resolution":{"observed_at":"2026-08-05T14:40:55.624173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.13144","last_updated":"2024-11-20T09:19:10Z","snapshot_observed_at":"2026-08-17T20:04:19.735155Z","submitted_at":"2024-11-20T09:19:10Z","title":"CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.13144","snapshot_observed_at":"2026-08-05T14:40:54.642489Z","title":"Copyrightmeter: Revisiting copyright protection in text-to-image models.arXiv preprint arXiv:2411.13144, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.642489Z"},"links":{"cited_paper":"/paper/2411.13144","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:bc45362de5714b5e2773eeba3f67738b3c6ed7674a52d4ba78684c047ea3bf1f","observation_id":"9bb7b3cb-1a09-4a5b-be02-d0049bd923bc","resolution":{"observed_at":"2026-08-05T14:40:54.642489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.596237Z","title":"Can simple averaging defeat modern watermarks? Advances in Neural Information Processing Systems, 37:56644–56673, 2024","venue":null,"work_id":"fede4be6-f6a4-4338-8715-e8165a15b8dc","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.647285Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:6c9c26d51bd336e19fc8af376169b18012fb3a3dc6f7ba11efd1719d8d12fb81","observation_id":"166f7e5d-3585-4493-82d6-03b2e46632b4","resolution":{"observed_at":"2026-08-05T14:40:55.604041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.562950Z","title":"Gaussian shading: Provable performance-lossless image watermarking for diffusion models","venue":null,"work_id":"e637d399-cd9e-4a59-a604-5eb45fd970f1","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.652498Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:a05c61d1129a77e30bbdfa12ce104115638a074432b17694529fc11280d1558e","observation_id":"4c1f8d0d-31fa-4469-8ee2-3bef22e10c0f","resolution":{"observed_at":"2026-08-05T14:40:55.574969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.535808Z","title":"Protecting intellectual property of deep neural networks with watermark- ing","venue":null,"work_id":"2b5e2ee9-a5f0-4df1-ba5e-d197fce8e2d0","year":2018},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.658222Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:d2b5d87d4da1d77bfddcae64cb7d2be0e3cd91d726e777b0367b136ab4fdbb5b","observation_id":"099c1ef0-d343-4920-92dd-d7682a4bbf49","resolution":{"observed_at":"2026-08-05T14:40:55.542997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.503942Z","title":"Adding conditional control to text-to- image diffusion models","venue":null,"work_id":"836a9631-6064-47a9-96df-b704f131433d","year":2023},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.664905Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:1413cd9bd0e9c0a48a314bf6d45f58de1c1c171bed6135f9ed07bb6fce9abed2","observation_id":"8568192e-1730-488b-9112-63b71eac218c","resolution":{"observed_at":"2026-08-05T14:40:55.514262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.482190Z","title":"The unreasonable effectiveness of deep features as a perceptual metric","venue":null,"work_id":"45fb2488-01f2-4a44-b99c-025477dfb940","year":2018},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.670630Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:e775807fb4da5f6414b40e5a850128ecd5606c5bb120411be4b44a9cbe4c971f","observation_id":"6af838b1-d518-484b-9450-2403f206afc5","resolution":{"observed_at":"2026-08-05T14:40:55.488911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18479","last_updated":"2025-06-12T17:58:20Z","snapshot_observed_at":"2026-08-14T12:53:50.101382Z","submitted_at":"2024-11-27T16:22:33Z","title":"SoK: Watermarking for AI-Generated Content","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18479","snapshot_observed_at":"2026-08-05T14:40:54.677157Z","title":"Sok: Watermarking for ai-generated content.arXiv preprint arXiv:2411.18479, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.677157Z"},"links":{"cited_paper":"/paper/2411.18479","citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:17836043d2d286b61d613991fd05ea557b1482a10967bca1e21708a4130fcb11","observation_id":"0bc75d89-cd0c-4aa0-9ab3-c55d1d7b73e7","resolution":{"observed_at":"2026-08-05T14:40:54.677157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.462173Z","title":"Invisible image watermarks are provably removable using generative ai.Advances in neural information processing systems, 37:8643–8672, 2024","venue":null,"work_id":"ba89aab9-3dc2-4044-8aa2-8fcf770e567f","year":2024},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.684380Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:44432c3d2bb15724a0258e98cd66cc54536aae57e67302004c3306efacac4982","observation_id":"9b5a64ca-13e7-44ca-98a1-d3df17562989","resolution":{"observed_at":"2026-08-05T14:40:55.468502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:40:55.444250Z","title":"tree-ring","venue":null,"work_id":"5931f11c-fe0d-4da3-b679-b71b614fdee6","year":2023},"citing_paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T14:40:54.690777Z"},"links":{"citing_paper":"/paper/2508.21072"},"observation_digest":"sha256:97a1073de7b5ba5d9269e0cef415769ade75f88e046869b05cb8045a37c056e8","observation_id":"f5524375-4c90-4032-b4b7-f818d6027c11","resolution":{"observed_at":"2026-08-05T14:40:55.449225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.21072","last_updated":"2025-08-28T17:59:59Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-17T13:16:05.658580Z","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge"},"reference_resolution":{"displayed":66,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":7,"verified_fuzzy":37},"total_outbound_references":66},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 66 of 66 outbound references and 1 inbound Pith citation observation for arXiv:2508.21072."}