{"as_of":"2026-08-10T23:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2a47d7edfd262c6fb5101b1d3ad5e17bb67243143741c1c47e232f2483921f2c","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-12T03:11:45.903819Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.03337/citation-record","integrity":"/paper/2607.03337/integrity","json":"/paper/2607.03337/citation-record.json","paper":"/paper/2607.03337"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Analysis of crosstalk in NISQ devices and security implications in multi-programming regime","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:22b2d9b29e6db2147f607d1f253ea69a819c9891956c65229b52af3acf5b21b7","observation_id":"30150a0e-003e-4150-83c2-0bc532c6fcbc","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Training robust and generalizable quantum models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:1a3a44ab3aede08f4368f41192702ab7643abe19cb4cb03136832d0bd87d9327","observation_id":"c6ccba6c-05bd-443f-863a-09b4687c1b57","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10507","last_updated":"2024-12-13T19:00:21Z","snapshot_observed_at":"2026-08-10T13:29:30.029988Z","submitted_at":"2024-12-13T19:00:21Z","title":"Crosstalk-induced Side Channel Threats in Multi-Tenant NISQ Computers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10507","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Crosstalk-induced Side Channel Threats in Multi-Tenant NISQ Computers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2412.10507","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:618430d496ca3815119a4ed8e3299d7e562c2614e8a579369c6261d8a2b880ef","observation_id":"00df9a23-8b86-4eac-a36b-1a965d8d215f","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-10T13:27:56.076928Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.08623","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2507.08623","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:edcca5497e794503d72cdd073d52e8686bf9f16a2457e6bf38882d42e62799c4","observation_id":"a04bb184-0570-4c28-a421-2752d9aefd3d","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Quantum noise protects quantum classifiers against adversaries","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:4b3f00cfcc43f9f852be5ddee109b08643b5d6d931dc3640f06a8eb260846eb9","observation_id":"ef1a6e85-8d96-496b-8614-038f16872ad1","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Quantum Circuit Reconstruction from Power Side-Channel Attacks on Quantum Computer Con- trollers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:5950cb1ba91158b19b98afbc86095d194f2b4a3132cd79a394ed03ec489ba112","observation_id":"b99fd1e8-3b0e-48d1-a090-1336a92e6bd7","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:06c87d3b900985839fa4079eada19107cd2a5073ba1a897c3cf4f2fca32ea7ff","observation_id":"c400d5c6-6933-4f47-9efc-ab9588350da3","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Crosstalk At- tack Resilient RNS Quantum Addition","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:d7179b7d5797768e7ec96a2cc52d3d4c162eaffde6e71a8e2f16e522e5aa4a25","observation_id":"2d76fa71-ca98-481b-8940-90c6048647e1","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Explaining and Harnessing Adversarial Ex- amples","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:5654a1bebfff5a1c290a9dd0da110b2ff0e9b2ab2839ca3cb1a8e0a609bca1de","observation_id":"2c31c0ed-0b0d-4140-96ba-34b4580e05d5","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02753","last_updated":"2025-09-01T07:26:51Z","snapshot_observed_at":"2026-08-04T10:23:52.016741Z","submitted_at":"2024-02-05T06:17:26Z","title":"Crosstalk Attacks and Defence in a Shared Quantum Computing Environment","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02753","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Crosstalk Attacks and Defence in a Shared Quantum Computing Environment","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2402.02753","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:5847a692c20a06c0782d23434e313ac2fe7819ccb7fc32a73064b9abcb898924","observation_id":"86e38640-399e-4abe-b305-2463ba869515","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.14103","last_updated":"2023-03-24T16:11:28Z","snapshot_observed_at":"2026-07-06T15:07:41.634914Z","submitted_at":"2023-03-24T16:11:28Z","title":"Characterizing crosstalk of superconducting transmon processors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.14103","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Characterizing Crosstalk of Superconducting Transmon Processors","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2303.14103","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:1e1488346d9088805ff92f759b613ad47ba15469fae918edc845c6e6e4a6deed","observation_id":"fa8787b6-8d36-4ac8-a774-e816e0bb8391","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10115","last_updated":"2025-02-14T12:25:08Z","snapshot_observed_at":"2026-08-10T13:27:33.755771Z","submitted_at":"2025-02-14T12:25:08Z","title":"SWAP Attack: Stealthy Side-Channel Attack on Multi-Tenant Quantum Cloud System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.10115","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"SW AP Attack: Stealthy Side-Channel Attack on Multi-Tenant Quan- tum Cloud System","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2502.10115","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:04a959a9dd4fc192c3382df43b36d271e721296a2ebf365be52a3fd915c203da","observation_id":"cf222e6d-ef7f-40d2-a95f-df9d84fbf950","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Vulnerability of quantum classification to adversarial perturbations","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:4ee9af51177c329f69593307edbb6cd2662d7319382af61b7171491078c52b9e","observation_id":"8ada7d14-39ab-423e-a9fb-7bc2eb206b68","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01521","last_updated":"2024-01-03T03:14:46Z","snapshot_observed_at":"2026-08-05T17:49:56.947555Z","submitted_at":"2024-01-03T03:14:46Z","title":"Quantum Leak: Timing Side-Channel Attacks on Cloud-Based Quantum Services","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.01521","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Quantum Leak: Timing Side-Channel Attacks on Cloud-Based Quantum Services","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2401.01521","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:486627801e1529431a5f3070a782c8b5cfb7384ac29a732d1aff601941cf9bee","observation_id":"4fd76163-901a-4e8d-adb2-fe10a6f8f1e3","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Quan- tum adversarial machine learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:3167a448c539a593e597e60946f5689899000288aa4fe702a9d7dbd6f66dcdb1","observation_id":"2dc93318-0191-4edb-a6a8-bad018101c9f","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Towards Deep Learning Models Resistant to Adversarial At- tacks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:4aab07d3d13a00f684333b2a225bcafa3c0a2a8557d3ed55a6c4194bc4cef0b4","observation_id":"19428333-a40d-4fd9-b374-0c2cf0d2e9a6","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2001.02826","last_updated":"2020-01-09T04:00:03Z","snapshot_observed_at":"2026-07-06T08:49:24.425974Z","submitted_at":"2020-01-09T04:00:03Z","title":"Software Mitigation of Crosstalk on Noisy Intermediate-Scale Quantum Computers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.02826","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Software Mitigation of Crosstalk on Noisy Intermediate-Scale Quantum Com- puters","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2001.02826","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:65f6d685019cd7096f72befaefdc7e89cb9ed62ca99de8576f4115647a8a46c7","observation_id":"14a8bc76-5ffa-47fc-bd86-70b20c844e53","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Data re-uploading for a universal quantum classifier","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:de784dc8d5967fbe41ba04bb253e9532c9565c147c3239757b0218d72e90dad9","observation_id":"65d17972-e940-4e4e-934a-d56a0b0de8d0","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Quantum Machine Learning: Exploring the Role of Data Encoding Techniques, Challenges, and Future Di- rections","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:2f26e2f9d3d339a946f7c80686bb9cde59cd875358969b6cfb1ccbd11fa31101","observation_id":"d0584782-0b71-4409-9438-4263737f9627","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Experimental quantum adversarial learning with programmable superconducting qubits","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:7288e732b1c4266a144225da58b66e48d72b0200a89e3f0ef3392e5d63355ba1","observation_id":"9409a10a-7ecd-48e0-8720-82db3a8a265c","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.01486","last_updated":"2025-02-03T16:21:16Z","snapshot_observed_at":"2026-08-09T15:05:34.149238Z","submitted_at":"2025-02-03T16:21:16Z","title":"Quantum Quandaries: Unraveling Encoding Vulnerabilities in Quantum Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.01486","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Quan- tum Quandaries: Unraveling Encoding Vulnerabili- ties in Quantum Neural Networks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2502.01486","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:e7fce224ec075c454b0809f2a9011cbf1eb9a4dd5a1f53a346e61669e61dcc07","observation_id":"dd5cbd55-8dce-4765-ab9d-7ffc3abc2122","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16154","last_updated":"2024-04-24T19:20:15Z","snapshot_observed_at":"2026-07-06T18:05:11.700127Z","submitted_at":"2024-04-24T19:20:15Z","title":"A Comparative Analysis of Adversarial Robustness for Quantum and Classical Machine Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16154","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"A Comparative Analysis of Adversarial Ro- bustness for Quantum and Classical Machine Learning Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2404.16154","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:307e2a8529e168536ae028ccca8a54d563657dac808ddca0ed70236e3f5153b4","observation_id":"4783ee27-d4a4-4d89-95fc-aa9c8ca32f19","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Benchmarking adversarially robust quantum machine learning at scale","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:d41f737dc4c4420fc3a9e52ddee9d21ebf6ac4ef5951e84edde604089f6a304f","observation_id":"cdfc5da2-9d8e-4de0-ae48-a89305e607a0","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Explo- ration of Power Side-Channel Vulnerabilities in Quan- tum Computer Controllers","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:5d3ad2108cb6d541e4056e352d88966cf6032ba9348422928befbb5d9b0de7da","observation_id":"2efe8999-55b7-45bc-9812-662cea477770","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","latest_version":1,"primary_category":"quant-ph","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2607.03337."}