{"as_of":"2026-08-10T14:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:002681896b6deafc4be634dd41baafbd90c40b9214c21179ac7568c5e1e33082","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T07:47:37.615548Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2601.19210/citation-record","integrity":"/paper/2601.19210/integrity","json":"/paper/2601.19210/citation-record.json","paper":"/paper/2601.19210"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.615548Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.615548Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:80f648610ecfbbe91f70e65d14f1a0debb7bbc723bec45f6dda45dc542bbbd4d","observation_id":"2ce0579b-5a7b-4051-bf5f-a5102ecf8b0f","resolution":{"observed_at":"2026-08-03T07:47:37.615548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.515585Z","title":"and Hwang, W","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.515585Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:108d4ab149549c675c620adb263e3e2eb334fcc0cf0abeb3e9e9850fcb58c2cf","observation_id":"741b3905-f467-4ee3-b63c-c8ce46d00e42","resolution":{"observed_at":"2026-08-03T07:47:37.515585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.520078Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.520078Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:6ff8d997ad34d7a4ec3c373c67c4f908e5e9e31341cd43279bd284f70c34d371","observation_id":"5cb44098-b36c-427b-b946-47a7c4f127d9","resolution":{"observed_at":"2026-08-03T07:47:37.520078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04913","last_updated":"2023-12-08T09:08:50Z","snapshot_observed_at":"2026-08-07T21:16:58.470052Z","submitted_at":"2023-12-08T09:08:50Z","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04913","snapshot_observed_at":"2026-08-03T07:47:37.524533Z","title":"Sa-attack: Improving adversarial transferability of vision- language pre-training models via self-augmentation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.524533Z"},"links":{"cited_paper":"/paper/2312.04913","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:fa24be53d878186237d2640925dbc2ede2b871d320b8460d9049fb8c88521b32","observation_id":"da6ce663-1381-4da2-a57b-edb21fe0b030","resolution":{"observed_at":"2026-08-03T07:47:37.524533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12693","last_updated":"2024-03-19T12:51:39Z","snapshot_observed_at":"2026-08-10T00:28:35.374929Z","submitted_at":"2024-03-19T12:51:39Z","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12693","snapshot_observed_at":"2026-08-03T07:47:37.529795Z","title":"As firm as their foundations: Can open-sourced foundation mod- els be used to create adversarial examples for downstream tasks?CoRR, abs/2403.12693,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.529795Z"},"links":{"cited_paper":"/paper/2403.12693","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:74edb84d08331757c5f52ffbf8e5c33ac8ecabde80f0172e21cf96bc2a8a5d84","observation_id":"0a46f1f1-a2dc-4ea3-a0ca-6dfd108e6f36","resolution":{"observed_at":"2026-08-03T07:47:37.529795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.538971Z","title":"One prompt word is enough to boost adversarial robustness for pre- trained vision-language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.538971Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:2f69e352674af9d77f437aaa36c5bd28ef1f54130446d6831daa7851dfe74972","observation_id":"fd4757c7-0b33-4dfe-bc5b-9880140fe3ab","resolution":{"observed_at":"2026-08-03T07:47:37.538971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05525","last_updated":"2024-03-11T16:47:41Z","snapshot_observed_at":"2026-08-05T16:51:32.094151Z","submitted_at":"2024-03-08T18:46:00Z","title":"DeepSeek-VL: Towards Real-World Vision-Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05525","snapshot_observed_at":"2026-08-03T07:47:37.543905Z","title":"Deepseek-vl: towards real-world vision-language understanding.arXiv preprint arXiv:2403.05525,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.543905Z"},"links":{"cited_paper":"/paper/2403.05525","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:e9adc07db136e9cca61e8b2fcc6b7e6f2ee5aefedf171bf317d8d0151b32a20b","observation_id":"3a99661e-7213-41d0-afbd-c9fd42ce6490","resolution":{"observed_at":"2026-08-03T07:47:37.543905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-03T07:47:37.549997Z","title":"Safety at scale: A comprehensive survey of large model safety.arXiv preprint arXiv:2502.05206,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.549997Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:0b12ca49d0a75535c94cdede100955f59d07f5185ce44c649a4a6c0e3bed9726","observation_id":"bbe6cccd-ecce-4f2b-98ea-1e28c4c6c256","resolution":{"observed_at":"2026-08-03T07:47:37.549997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-03T07:47:37.554565Z","title":"Towards deep learning models resistant to adversarial attacks.arXiv preprint arXiv:1706.06083,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.554565Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:17024517aadd2d7647786cb222181889cf171c8c7040bfef00a3fd0f6b8f4953","observation_id":"40761b31-ed6c-49cf-ab3a-d6e4f190b99e","resolution":{"observed_at":"2026-08-03T07:47:37.554565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.577260Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.577260Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:c9142c2090f8c74cced7425391ebb156c9666726682368ac623fde8b2fb212e1","observation_id":"72af6f2a-8df6-46ce-a2a2-b384347b99aa","resolution":{"observed_at":"2026-08-03T07:47:37.577260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.19287","last_updated":"2024-11-12T10:48:21Z","snapshot_observed_at":"2026-07-06T18:07:27.432252Z","submitted_at":"2024-04-30T06:34:21Z","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.19287","snapshot_observed_at":"2026-08-03T07:47:37.588939Z","title":"P., Zhao, Q., and Chen, B","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.588939Z"},"links":{"cited_paper":"/paper/2404.19287","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:2e6ffb93731eff3523392003c7e25faaf10f308cc18b7ec18c9df713a08567b7","observation_id":"25df41f2-ed47-49fe-b0ad-c51c755b6b34","resolution":{"observed_at":"2026-08-03T07:47:37.588939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.594145Z","title":"14 Section BTheoretical Analysis of Gradient Conflict","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.594145Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:2cb77438972f1f36347bfd0786f1efce977dda90358087493458a4d64600ba39","observation_id":"c70b264c-adf3-44c8-80dd-48a65e7ff2e2","resolution":{"observed_at":"2026-08-03T07:47:37.594145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.600013Z","title":"To ad- dress black-box transferability, recent works predominantly leverage augmentation and cross-modal priors","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.600013Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:d54c82df6a4777505bbf6c3241de921702c5fbfcc74d773c108c94b4ab8253f9","observation_id":"09335bfb-4d08-4a9d-bfef-ff00d7be1f6a","resolution":{"observed_at":"2026-08-03T07:47:37.600013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.606536Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.606536Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:2ed7c340f9a62e5a5b46f0106fa37f99f0a1e6cd2572f0e35531d3796f924923","observation_id":"d2a956d4-5893-41e4-a2b3-5a9c62e84298","resolution":{"observed_at":"2026-08-03T07:47:37.606536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.10480","last_updated":"2021-03-18T18:56:51Z","snapshot_observed_at":"2026-08-06T04:44:42.269861Z","submitted_at":"2021-03-18T18:56:51Z","title":"Reading Isn't Believing: Adversarial Attacks On Multi-Modal Neurons","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.10480","snapshot_observed_at":"2026-08-03T07:47:37.568234Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2008,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.568234Z"},"links":{"cited_paper":"/paper/2103.10480","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:2285a28f6551cd76958d6d5152c76bf7c32754fcd6fc43ed2fb1beb4f4bbc1e6","observation_id":"9dfa01e3-937b-4eda-93cc-9c243cc4e1fc","resolution":{"observed_at":"2026-08-03T07:47:37.568234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.496209Z","title":"Fpt-noise: Dy- namic scene-aware counterattack for test-time adversar- ial defense in vision-language models.arXiv preprint arXiv:2510.20856,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.496209Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:e76085d4114e664e1cda90b7514fe84bf3c33557732366979bed45347e05afa3","observation_id":"e7e2bcf1-0caa-42a9-88a9-9b7d190564b3","resolution":{"observed_at":"2026-08-03T07:47:37.496209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.506205Z","title":"One perturbation is enough: On generating uni- versal adversarial perturbations against vision-language pre-training models.CoRR, abs/2406.05491,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2010,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.506205Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:4edad32ecdec411dd37aca61f65a88b32149e3e05d0293d537e3f0ecf8dcfdb9","observation_id":"4a9dc4c0-3c85-4a97-9877-90a4169b9c4e","resolution":{"observed_at":"2026-08-03T07:47:37.506205Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1306.5151","last_updated":"2013-06-21T14:31:57Z","snapshot_observed_at":"2026-07-06T03:16:28.287173Z","submitted_at":"2013-06-21T14:31:57Z","title":"Fine-Grained Visual Classification of Aircraft","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1306.5151","snapshot_observed_at":"2026-08-03T07:47:37.559175Z","title":"Fine-grained visual classification of aircraft.arXiv preprint arXiv:1306.5151,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.559175Z"},"links":{"cited_paper":"/paper/1306.5151","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:1c7b16fc11c9a45ad2c827f3834df281021a1d4a7361f91c4710421c10494a16","observation_id":"ab002be8-da6f-4a85-8bb6-475697dfdfe0","resolution":{"observed_at":"2026-08-03T07:47:37.559175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.04938","last_updated":"2021-06-09T09:31:10Z","snapshot_observed_at":"2026-08-10T01:24:34.101653Z","submitted_at":"2021-06-09T09:31:10Z","title":"Attacking Adversarial Attacks as A Defense","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.04938","snapshot_observed_at":"2026-08-03T07:47:37.583619Z","title":"Transferable multimodal attack on vision-language pre-training models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.583619Z"},"links":{"cited_paper":"/paper/2106.04938","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:17da7fc60d62aa0a6cf8397efc5d4baa95dfd125b8bfce3e5371d151600b7506","observation_id":"0f929eb6-de4a-4e55-aee0-c83866fa4197","resolution":{"observed_at":"2026-08-03T07:47:37.583619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.21494","last_updated":"2025-05-27T17:56:57Z","snapshot_observed_at":"2026-08-07T21:17:47.870634Z","submitted_at":"2025-05-27T17:56:57Z","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.21494","snapshot_observed_at":"2026-08-03T07:47:37.534486Z","title":"Adversarial attacks against closed-source mllms via feature optimal alignment.arXiv preprint arXiv:2505.21494,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.534486Z"},"links":{"cited_paper":"/paper/2505.21494","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:d4c24d3a265d536551a2eff0d63c77a8bb7277add4c98ed553028dea7eb09028","observation_id":"49bd0555-2734-4236-a374-51874690cb3c","resolution":{"observed_at":"2026-08-03T07:47:37.534486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.563725Z","title":"V- attack: Targeting disentangled value features for con- trollable adversarial attacks on lvlms.arXiv preprint arXiv:2511.20223,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.563725Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:5659e6aff63559016468f57ca65c7514d38e9aad4edc7c0f8a104ac732fecb4f","observation_id":"2ec108bf-327e-4c1d-bf5a-317418b13b3d","resolution":{"observed_at":"2026-08-03T07:47:37.563725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.17362","snapshot_observed_at":"2026-08-03T07:47:37.572696Z","title":"and Balogh, A","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.572696Z"},"links":{"cited_paper":"/paper/2511.17362","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:3289e03e79b75ae222b3c51a9a2e8b046ba88ef94d8c860de563f55db9a75718","observation_id":"bf1b213c-57f8-43b4-912b-151de05a8023","resolution":{"observed_at":"2026-08-03T07:47:37.572696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-10T05:12:13.391312Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-03T07:47:37.500987Z","title":"N., and Fink, O","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.500987Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:fcbb0201ccdf71340c51cdea54c6e87f323c2243dbfe7addb86a12ab2ef59a46","observation_id":"b1d7631d-f54d-427d-a6df-e24c31f22c16","resolution":{"observed_at":"2026-08-03T07:47:37.500987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T07:47:37.510994Z","title":"Learning generative visual models from few training examples: An incremen- tal bayesian approach tested on 101 object categories","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.510994Z"},"links":{"citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:30139b4cc7943871b09173f0db0d91d52ed263b0baaf97e7624e355d77ab635b","observation_id":"7ffc59e0-12e5-4569-b6da-4a24c8690804","resolution":{"observed_at":"2026-08-03T07:47:37.510994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12966","last_updated":"2023-10-13T02:41:28Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-08-24T17:59:17Z","title":"Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyond","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12966","snapshot_observed_at":"2026-08-03T07:47:37.490305Z","title":"Qwen-vl: A versatile vision- language model for understanding, localization, text read- ing, and beyond.arXiv preprint arXiv:2308.12966,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.490305Z"},"links":{"cited_paper":"/paper/2308.12966","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:7b0d88e77ba3a4e2a099a3781e72964cf1244a70efee276fd631108cf071c5c0","observation_id":"6feb0573-6c44-4cc8-84e6-a6bbe97e1899","resolution":{"observed_at":"2026-08-03T07:47:37.490305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":25,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2601.19210."}