{"as_of":"2026-08-22T18:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:812fd1a1869c6c785a7d080b2e7bb531b8161788a2664c441feab82a32798975","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:35:03.671430Z","state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.03341/citation-record","integrity":"/paper/2509.03341/integrity","json":"/paper/2509.03341/citation-record.json","paper":"/paper/2509.03341"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.564828Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.564828Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:64270e957af352311b21ab9951d9a015abaa8b0e51171809a37c5b51caae0921","observation_id":"57032549-3058-41e3-8394-a9e87e6f7d25","resolution":{"observed_at":"2026-08-15T16:35:03.564828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.569199Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.569199Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:a2adf94ff91108b20e9b931afe31c4c585a78a7fe1939ab1380ee760da509044","observation_id":"3a0bf04c-b93e-4df0-bba0-380e9cba953d","resolution":{"observed_at":"2026-08-15T16:35:03.569199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.573605Z","title":"B.; Mironov, I.; Talwar, K.; and Zhang, L","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.573605Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:2df966718ec9dd82de31e76d79e29ec9bd6ee9ee4a75b428e03906237a879e33","observation_id":"3f8caec6-ac0c-4437-bfc2-bcbb285bced3","resolution":{"observed_at":"2026-08-15T16:35:03.573605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.02936","last_updated":"2023-10-05T04:47:52Z","snapshot_observed_at":"2026-08-20T00:07:32.352040Z","submitted_at":"2023-02-06T17:11:09Z","title":"Private GANs, Revisited","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.02936","snapshot_observed_at":"2026-08-15T16:35:03.577815Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.577815Z"},"links":{"cited_paper":"/paper/2302.02936","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:dfed56a7ec91bd0fe5b312e9e3f9643242ae5bfa81748585d78e7147951c8096","observation_id":"e17d2b3c-9d28-4eaa-9e69-0dd92e770c06","resolution":{"observed_at":"2026-08-15T16:35:03.577815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.956550Z","title":null,"venue":null,"work_id":"d507bb72-0748-413e-ad34-19b07c231ea6","year":2002},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.581980Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:6c86767364aefe4c49660375ddddd1f2fd9580962723728b45c781b4a19c10f8","observation_id":"d434ddce-4160-44a7-a3c9-847e7d47e454","resolution":{"observed_at":"2026-08-15T16:35:03.960364Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.586052Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.586052Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:71d9e761ac248267ff3b99d9baa207a0973fad78531b9a520f8a31cb86315e74","observation_id":"1e7f10da-8757-4bfd-944b-f552ccf70300","resolution":{"observed_at":"2026-08-15T16:35:03.586052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.13188","last_updated":"2023-01-30T18:53:09Z","snapshot_observed_at":"2026-08-18T20:48:53.358298Z","submitted_at":"2023-01-30T18:53:09Z","title":"Extracting Training Data from Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.13188","snapshot_observed_at":"2026-08-15T16:35:03.590078Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.590078Z"},"links":{"cited_paper":"/paper/2301.13188","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:70a15498a8b09ccc8b8bfadb6f20d988aefded53da47e5eeaab2aaf1e09e9ec5","observation_id":"af11cc2c-8293-4e03-8836-f1fac746d91b","resolution":{"observed_at":"2026-08-15T16:35:03.590078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.935698Z","title":null,"venue":null,"work_id":"2d42ae07-1bcb-4bb4-a5ce-0a5dcf125a72","year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.594218Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:71541318fa89007517fd123d1d04ecc348cb7915b59fd6f5d1ef7f2ed052cafe","observation_id":"2ca20146-ba94-4d26-9e59-660a56552c90","resolution":{"observed_at":"2026-08-15T16:35:03.939673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.923582Z","title":null,"venue":null,"work_id":"4dc82bfb-f2c0-4a53-b9b4-2571532f59b0","year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.598224Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:5ba92de2590d1a4717555482d9c7db846dd810ac9e45f9612ca5538ae23eaca2","observation_id":"d7ceffcb-f9bc-4721-b08e-b6901509cdc3","resolution":{"observed_at":"2026-08-15T16:35:03.927712Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.912049Z","title":null,"venue":null,"work_id":"0e63e0f1-efd0-4c66-a71a-1b1ee1fcf606","year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.601916Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:276cdf1b9a9a361928e404d316c8747193149fecc2574bf4b58820e36a4bcfee","observation_id":"af8b1502-90b7-4b45-94e1-a2c11e2c1685","resolution":{"observed_at":"2026-08-15T16:35:03.915879Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.900851Z","title":null,"venue":null,"work_id":"aec3a8b3-0a9c-4ce9-b433-0bf4f472daa8","year":2011},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.605555Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:e7d6abf9d6b53d32b51db07f18bc0ce5f70c6f4d516b4be89d8d5ebc92b643fb","observation_id":"a0e5b2d5-79cc-435b-a89b-760db2f9b87a","resolution":{"observed_at":"2026-08-15T16:35:03.904535Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.889035Z","title":null,"venue":null,"work_id":"f8b98ed9-10de-4b97-a510-d48c89b0b007","year":2006},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.609289Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:78c57b780c447a06e1d22eb08992a06760d3946124de739121eb0bbf4344567d","observation_id":"e967d961-8806-4b11-8731-08d86b1716bd","resolution":{"observed_at":"2026-08-15T16:35:03.893176Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.877598Z","title":null,"venue":null,"work_id":"2fb62fe2-042f-4ee7-939b-aa3ddf28907b","year":2014},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.612769Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:5e33e816b574cea90ef01cd0df59444d468cb83fde13880e290f449ecb7f403e","observation_id":"2854b922-e776-4a69-9a64-ecb6527cb064","resolution":{"observed_at":"2026-08-15T16:35:03.881155Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13861","last_updated":"2023-02-27T15:02:04Z","snapshot_observed_at":"2026-08-18T00:43:39.442285Z","submitted_at":"2023-02-27T15:02:04Z","title":"Differentially Private Diffusion Models Generate Useful Synthetic Images","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13861","snapshot_observed_at":"2026-08-15T16:35:03.616287Z","title":"L.; Wiles, O.; and Balle, B","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.616287Z"},"links":{"cited_paper":"/paper/2302.13861","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:bbd400c616b657661d26e9f4e0a86a76a4d781fbd133a697e0278b123566d595","observation_id":"2ce6dd73-fee1-4e96-a348-bdd92117a5a9","resolution":{"observed_at":"2026-08-15T16:35:03.616287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1406.2661","last_updated":"2014-06-10T18:58:17Z","snapshot_observed_at":"2026-08-16T11:06:16.881602Z","submitted_at":"2014-06-10T18:58:17Z","title":"Generative Adversarial Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1406.2661","snapshot_observed_at":"2026-08-15T16:35:03.620298Z","title":"J.; Pouget-Abadie, J.; Mirza, M.; Xu, B.; Warde-Farley, D.; Ozair, S.; Courville, A.; and Bengio, Y","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.620298Z"},"links":{"cited_paper":"/paper/1406.2661","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:bd5014cd36fc713a834751d1d5d78364c7073d3c643de18dba0cf5a694f46809","observation_id":"b6007e00-5196-4f36-ad6a-fc0f5c9f41ed","resolution":{"observed_at":"2026-08-15T16:35:03.620298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1509.01240","last_updated":"2016-02-07T17:06:58Z","snapshot_observed_at":"2026-08-14T22:33:52.090275Z","submitted_at":"2015-09-03T19:53:40Z","title":"Train faster, generalize better: Stability of stochastic gradient descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1509.01240","snapshot_observed_at":"2026-08-15T16:35:03.624093Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.624093Z"},"links":{"cited_paper":"/paper/1509.01240","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:8c910c0a1b7b08e4f147240f7db22d9b101485e810dc5378fd92f192756693cd","observation_id":"17e236c0-0b17-4ed2-8354-fe0d3908001d","resolution":{"observed_at":"2026-08-15T16:35:03.624093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.08500","last_updated":"2018-01-12T14:05:44Z","snapshot_observed_at":"2026-08-22T05:12:22.477450Z","submitted_at":"2017-06-26T17:45:23Z","title":"GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.08500","snapshot_observed_at":"2026-08-15T16:35:03.627962Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.627962Z"},"links":{"cited_paper":"/paper/1706.08500","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:3cc94ba3731544de0957354a7a708af3608da5438b2bbb0a68426c9d2a722b0d","observation_id":"f007c484-c87e-411f-957f-01fad27dab06","resolution":{"observed_at":"2026-08-15T16:35:03.627962Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.11239","last_updated":"2020-12-16T21:15:05Z","snapshot_observed_at":"2026-08-10T05:21:27.485481Z","submitted_at":"2020-06-19T17:24:44Z","title":"Denoising Diffusion Probabilistic Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.11239","snapshot_observed_at":"2026-08-15T16:35:03.631975Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.631975Z"},"links":{"cited_paper":"/paper/2006.11239","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:4b04b0b84497a6d4a656a8a53657e7665ebf5e699270803d89be1b5deb1878ed","observation_id":"8d5a529a-9807-4479-8b5b-163ccb746660","resolution":{"observed_at":"2026-08-15T16:35:03.631975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.00364","last_updated":"2022-10-11T13:20:30Z","snapshot_observed_at":"2026-07-06T13:16:16.926712Z","submitted_at":"2022-06-01T10:03:24Z","title":"Elucidating the Design Space of Diffusion-Based Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.00364","snapshot_observed_at":"2026-08-15T16:35:03.635964Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.635964Z"},"links":{"cited_paper":"/paper/2206.00364","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:7f2d0c768944766f8a437afbd9927f8dcb2cb208d878e0b167529b2af6f30015","observation_id":"7c11e36a-8c93-404a-95bd-0f1b9d118ccf","resolution":{"observed_at":"2026-08-15T16:35:03.635964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.640918Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.640918Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:61943f664a51ab5780f2601d04ecd1e44155079d163c39ba2ef1b82907bda334","observation_id":"4ea70845-4730-4d7c-80ff-284d9c39df8f","resolution":{"observed_at":"2026-08-15T16:35:03.640918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.859572Z","title":null,"venue":null,"work_id":"81323918-6597-4ce0-9bf3-13453eac2095","year":2021},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.644738Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:a4a9f0e207177d2bba0b18a08a8e30cd436451922eafe6731bf0acf799b58c43","observation_id":"a9b99062-7d98-4ed6-a42c-7cf8e0047d31","resolution":{"observed_at":"2026-08-15T16:35:03.863559Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.846542Z","title":null,"venue":null,"work_id":"9d78eea1-b4a0-4711-b4cb-f0f24272d50b","year":2019},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.648493Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:9c97014fad401033ce62b2dcd832f7e156bfbebfb293f28af71d440e55513cb2","observation_id":"3c263ea8-a928-43c0-92ff-dcfeb8a5a940","resolution":{"observed_at":"2026-08-15T16:35:03.851471Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.652136Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.652136Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:e06927f768c68dd4d19f9d3af6e1eaa32021d0c0aaa7f7cf4469c3376a8713c2","observation_id":"c54489bb-94d4-4ba3-a13e-4ba1f40683ac","resolution":{"observed_at":"2026-08-15T16:35:03.652136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1907.05600","last_updated":"2020-10-10T07:46:19Z","snapshot_observed_at":"2026-08-01T16:44:46.833530Z","submitted_at":"2019-07-12T07:37:26Z","title":"Generative Modeling by Estimating Gradients of the Data Distribution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.05600","snapshot_observed_at":"2026-08-15T16:35:03.655584Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.655584Z"},"links":{"cited_paper":"/paper/1907.05600","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:5980f9f88cc5dc10c1e45dc63b8c83b54d91ac0c9e988e480fbb7f34435d01a9","observation_id":"0f8ce13f-1995-414a-8274-4fc94afc5810","resolution":{"observed_at":"2026-08-15T16:35:03.655584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-08-15T16:35:03.659258Z","title":"P.; Kumar, A.; Ermon, S.; and Poole, B","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.659258Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:93a7b16dbe70cf3590984972de5a92c5464039532c3a70a23fd9ca5c32ae8a6f","observation_id":"2f809d73-8fdb-4d81-ac3c-441717705cef","resolution":{"observed_at":"2026-08-15T16:35:03.659258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06739","last_updated":"2018-02-19T18:05:33Z","snapshot_observed_at":"2026-08-14T19:44:27.939621Z","submitted_at":"2018-02-19T18:05:33Z","title":"Differentially Private Generative Adversarial Network","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.06739","snapshot_observed_at":"2026-08-15T16:35:03.663029Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.663029Z"},"links":{"cited_paper":"/paper/1802.06739","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:6a6704bffc9db5ebfa43cfc984e45f4114c83521c0b2f3d731f369cc1568220d","observation_id":"43ae8c77-b9cc-4262-9368-06b0dba68112","resolution":{"observed_at":"2026-08-15T16:35:03.663029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1709.01604","last_updated":"2018-05-04T22:43:43Z","snapshot_observed_at":"2026-08-15T02:51:03.472866Z","submitted_at":"2017-09-05T21:56:24Z","title":"Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1709.01604","snapshot_observed_at":"2026-08-15T16:35:03.666736Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.666736Z"},"links":{"cited_paper":"/paper/1709.01604","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:a94d2ff7ca6317d4207d24eb74b68304cc93a8d940477cd76b89178bbedd2cd9","observation_id":"47093cd7-9c59-42c3-a678-a92c9a3ef823","resolution":{"observed_at":"2026-08-15T16:35:03.666736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2109.12298","last_updated":"2022-08-22T20:24:50Z","snapshot_observed_at":"2026-08-19T03:28:59.817992Z","submitted_at":"2021-09-25T07:10:54Z","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.12298","snapshot_observed_at":"2026-08-15T16:35:03.671430Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.671430Z"},"links":{"cited_paper":"/paper/2109.12298","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:c7873cad304643e4ff698b67748960539d96b3655bb551488d7b07f36630e8c2","observation_id":"04c0a7ec-340d-40c9-8205-668454718ef8","resolution":{"observed_at":"2026-08-15T16:35:03.671430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-22T01:50:18.484266Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":28,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2509.03341."}