{"as_of":"2026-08-09T12:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cf989a01c5d1469d9ae7954916a816e5daadda05f0c01ca87ad49c36312005ab","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-10T15:22:10.143336Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.07922/citation-record","integrity":"/paper/2607.07922/integrity","json":"/paper/2607.07922/citation-record.json","paper":"/paper/2607.07922"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.423515Z","title":"Quantifying atten- tion flow in transformers","venue":null,"work_id":"27480348-a041-49ca-a111-234d3b89eda8","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:406e9c4792a9386c2d444fae00292d3e92628db30cd6980f8a8ee15aa42bf6d0","observation_id":"8d1a9d5c-2463-4f28-bd14-8943eba69c58","resolution":{"observed_at":"2026-07-10T15:27:20.424705Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.03734","last_updated":"2021-09-20T11:48:45Z","snapshot_observed_at":"2026-08-08T07:39:46.839094Z","submitted_at":"2021-06-07T15:59:49Z","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","version":2},"cited_work":{"arxiv_id":"2106.03734","doi":null,"metadata_source":"pith","pith_arxiv_id":"2106.03734","snapshot_observed_at":"2026-07-10T15:27:20.182623Z","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","venue":"cs.CV","work_id":"84253d21-88ed-4efb-8d95-c1edcda7907c","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2106.03734","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:2ee98b22bb19d60537df224fdfe98a8c89ce54a516b28b301a2581428e33bc7b","observation_id":"e9682c58-0f3d-402a-bdc4-5761a04a0a42","resolution":{"observed_at":"2026-07-10T15:27:20.183849Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.02797","last_updated":"2021-10-11T14:28:50Z","snapshot_observed_at":"2026-08-06T10:44:23.738492Z","submitted_at":"2021-10-06T14:18:47Z","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","version":2},"cited_work":{"arxiv_id":"2110.02797","doi":null,"metadata_source":"pith","pith_arxiv_id":"2110.02797","snapshot_observed_at":"2026-07-10T15:27:20.180156Z","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","venue":"cs.CV","work_id":"62290013-27ea-435b-9035-481a21587445","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2110.02797","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:e0c1532c6e7fa698981939f94d7aaf2c771a60fe715fbcc194c1d8946aeedcac","observation_id":"425b6722-8c34-43a1-82ef-756de5da4623","resolution":{"observed_at":"2026-07-10T15:27:20.181376Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.429120Z","title":"Under- standing robustness of transformers for image classification","venue":null,"work_id":"938ff8bc-2ad3-43c7-a97a-51454835581d","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:1b237ab16efc1d80585c2da784a0630029225d7ccd27d2468f5dd065451bfe27","observation_id":"d2b5d8fa-c979-4e4b-b7f5-e13f2d65c8f0","resolution":{"observed_at":"2026-07-10T15:27:20.430343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:0317ec0b387652c5c8f023a7db7255238e8fc66e1239db2ce1235bcd4abc41a6","observation_id":"d8c7633f-37e3-4426-bb7a-a3917648b4ae","resolution":{"observed_at":"2026-07-10T15:27:20.186151Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.418039Z","title":"End-to- end object detection with transformers","venue":null,"work_id":"3967f40b-a1ef-44a1-88af-d2bd9e567592","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:941b24abd27a9330d83ee6f2188ae3c34b9e05c32a609b92d83452929846d486","observation_id":"1fcab95a-32bc-4bd3-8481-540ff7b421e9","resolution":{"observed_at":"2026-07-10T15:27:20.419197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.416324Z","title":"Transformer inter- pretability beyond attention visualization","venue":null,"work_id":"b51a6bba-d222-4ac2-8104-c457f986365d","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:c25a130ecf3d62c1362c696674892306aa88cb4c6bec4c9b5f5d2e8c0af76076","observation_id":"de1e4036-1736-4608-900d-a2ff539a9865","resolution":{"observed_at":"2026-07-10T15:27:20.417493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.419772Z","title":"Vision transformers need registers","venue":null,"work_id":"92c38957-665c-4888-bb03-300180a1fd05","year":2024},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:36d4a21f07c23c567f5f1b1c163f89112bb6a0b386339b54613740214d7962ae","observation_id":"0483a99a-67af-428a-b2b3-753cc44ac255","resolution":{"observed_at":"2026-07-10T15:27:20.420936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.410840Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"5a7d3082-ba95-41d2-9426-3c9b9e31f3f6","year":2009},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:609ffafb79b6b98e15da1284a34e98352c813a6c4602fa4843f0f8e573cee3b5","observation_id":"d7bc2a45-8bd8-40ed-a02a-8109befa1319","resolution":{"observed_at":"2026-07-10T15:27:20.412047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":"2010.11929","doi":"10.1175/jcli-d-22-0357.1","metadata_source":"pith","pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","venue":"cs.CV","work_id":"e96730e3-129b-4db6-b981-15ab7932e297","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:d07ab1606fdd8de3af17f71a6cb83fa6a8590684d4649149a03d41406208cd13","observation_id":"9c7f05e7-8f98-4765-b2a9-7412772b557f","resolution":{"observed_at":"2026-07-10T15:27:20.176380Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.421666Z","title":"Pruning one more token is enough: Leveraging latency- workload non-linearities for vision transformers on the edge","venue":null,"work_id":"5b405f44-1865-4fee-bffe-5bb65993479a","year":2025},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:120000e97781ae458e1b27ed35aaa7b4db17d8915225baf9b151b90407180310","observation_id":"54aa7663-d460-4cc9-b3e2-e75313e9c4cc","resolution":{"observed_at":"2026-07-10T15:27:20.422918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.427223Z","title":"Patch-fool: Are vision transformers always robust against adversarial perturbations? InTenth In- ternational Conference on Learning Representations (ICLR 2022), 2022","venue":null,"work_id":"22299b57-2b8b-4de5-a6c3-4973ed8fc95d","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:e52cb7a2f4bc22d92621c2150aabeca2390163cc9f903a3418a9344feefd61ad","observation_id":"de4d9fef-3609-41c9-8c87-965a590ddc4e","resolution":{"observed_at":"2026-07-10T15:27:20.428533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.432669Z","title":"Are vision trans- formers robust to patch perturbations? InEuropean Con- ference on Computer Vision, pages 404–421","venue":null,"work_id":"da25b14c-0987-4515-a780-34974fd3acdd","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:41d2faa7cb2f17d78a3a3bc4c265a9dbd0b835d54578b5b33ec784918b9bd8b2","observation_id":"fbfc4c1a-0b07-411c-80f7-49774fef8d7b","resolution":{"observed_at":"2026-07-10T15:27:20.433917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.405336Z","title":"Vision transformers don’t need trained regis- ters.Advances in neural information processing systems, 38: 56557–56595, 2026","venue":null,"work_id":"fe6622f5-b893-49b3-aae2-af0803518bc4","year":2026},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:f0d72ef081c2af7bd954a1b4b0bf31cefc3ba4d12b3dec3a2e4548c2190ed3ee","observation_id":"7f69509a-526b-41eb-82b3-3a69e9edb973","resolution":{"observed_at":"2026-07-10T15:27:20.406599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.414387Z","title":"Seeing isn’t believing: Context-aware adversarial patch synthesis via conditional gan","venue":null,"work_id":"9219fa07-884c-4a68-aefd-8f60cfdcb135","year":2026},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:f0c54a89273c8cc041619ab4db0faf6bfab261e8163f6b6af73ffc511a37fa02","observation_id":"0e6ab187-ad9a-4935-9d74-2e1e1772a66f","resolution":{"observed_at":"2026-07-10T15:27:20.415581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.14397","last_updated":"2024-12-30T00:12:51Z","snapshot_observed_at":"2026-08-04T15:14:42.793540Z","submitted_at":"2022-12-29T18:07:56Z","title":"AttEntropy: On the Generalization Ability of Supervised Semantic Segmentation Transformers to New Objects in New Domains","version":3},"cited_work":{"arxiv_id":"2212.14397","doi":null,"metadata_source":"pith","pith_arxiv_id":"2212.14397","snapshot_observed_at":"2026-07-10T15:27:20.177697Z","title":"AttEntropy: On the Generalization Ability of Supervised Semantic Segmentation Transformers to New Objects in New Domains","venue":"cs.CV","work_id":"3a9078d8-44b6-4101-b124-fa9d2ee4333a","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2212.14397","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:37e4534166312538384072b06681cfae3f7dc9c32f0f9c0c8b77500712a7000c","observation_id":"5d813680-2fdf-4db5-be28-831bfa53f774","resolution":{"observed_at":"2026-07-10T15:27:20.178950Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.434487Z","title":"Under- standing and defending patched-based adversarial attacks for vision transformer","venue":null,"work_id":"62aa20f7-6485-4869-910f-e817a3fcbef9","year":2023},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:8fdaa059c3c60a0fe00b9540fdc8888cae1222e4bb7376a15898d99dd79be268","observation_id":"baeab121-b174-47b5-81c5-8d0f0170d1e1","resolution":{"observed_at":"2026-07-10T15:27:20.435712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.430919Z","title":"Give me your attention: Dot-product attention considered harmful for adversarial patch robustness","venue":null,"work_id":"2fa8e91d-a168-4f81-812b-991fac1b23ad","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:1923676a30d5475c771009a941e9c3198f43e10b6546adb6a2bf4500c3bb3106","observation_id":"e2b32caa-1369-42d3-a340-e00dcde33fcb","resolution":{"observed_at":"2026-07-10T15:27:20.432112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.403598Z","title":"Understanding the effective receptive field in deep convolu- tional neural networks","venue":null,"work_id":"6bc5c735-f153-4085-9b02-b414d93b6dee","year":2016},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:c5eca47ced85f36a18d0359b7773800ce68238e6bf82e160fca9a7b92280958a","observation_id":"7a727965-f7c9-49c9-ba4e-18497d3c42da","resolution":{"observed_at":"2026-07-10T15:27:20.404807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.401877Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":"bf564611-d5a7-47db-a5a4-766112c48ee3","year":2018},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:6825e82ebaace9f4c9d3e9284d93b734b29911e8a6590b33de84da96c927387c","observation_id":"17cbabe0-cc11-4de9-8d9e-30dfe8263679","resolution":{"observed_at":"2026-07-10T15:27:20.403058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.407157Z","title":"Defending against adversar- ial patches with robust self-attention","venue":null,"work_id":"40589603-d772-4c93-b7d6-e4b66f88e7f3","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:b664025c4bddcd6e7cdf7b788aa75e7b6e12a1864e78d4d504f7514b4f29ceb8","observation_id":"dac19eb4-6100-4081-b757-9e6f7d8fc00c","resolution":{"observed_at":"2026-07-10T15:27:20.408339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.398287Z","title":"Intriguing properties of vision transform- ers.Advances in Neural Information Processing Systems, 34: 23296–23308, 2021","venue":null,"work_id":"95409a3a-9a54-408e-a319-55d2f11f22d5","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:ca7ce54686895c933de6a2bdb2fa9696bee7cb02652d955a16d0ff9d8a449d7a","observation_id":"f6617190-1743-4c2d-aa70-3a1b0a343fad","resolution":{"observed_at":"2026-07-10T15:27:20.399568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.412618Z","title":"Dinov2: Learning robust visual features without supervision","venue":null,"work_id":"29b28a03-85be-4385-9d88-51ca7feb2e45","year":2024},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:9aef4d70cfdacf78e7cb3c9d88b4b423aea1d2819ce865f4f3de7d428cdb5194","observation_id":"d79a12c0-2131-476a-9648-153abb7e7991","resolution":{"observed_at":"2026-07-10T15:27:20.413805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.394583Z","title":"Vision transformers are robust learners","venue":null,"work_id":"5a4668a9-5c40-459f-acb0-42f134a2ca01","year":2071},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:508f2a11d8391ad88fc4f24608a9b1708893d5591ce59451f6a904f71c18af99","observation_id":"1663c546-5666-49ef-8a0d-a7a47ef5e6df","resolution":{"observed_at":"2026-07-10T15:27:20.395777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.396321Z","title":"Benchmarking the spatial ro- bustness of dnns via natural and adversarial localized corrup- tions.Pattern Recognition, page 112412, 2025","venue":null,"work_id":"b823476d-1c0a-4a3f-b630-901ac9479b5d","year":2025},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:1166112be9f29bdf96f5c0317b2556bb468c4b037ac0fa3e315dd49e722ce3c9","observation_id":"e2f31529-108e-46fb-a413-cafd6182152e","resolution":{"observed_at":"2026-07-10T15:27:20.397584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.391100Z","title":"Defending from physically- realizable adversarial attacks through internal over-activation 9 analysis","venue":null,"work_id":"974f8d3e-7091-4c75-94f0-6b4821259eeb","year":2023},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:267214007e4d8f5fa823d5c5483dae19beec3f8bbd1eb4c0c7b3d2f2ef206444","observation_id":"7932d79b-edef-4e5f-9dd8-81ab8da5ccb8","resolution":{"observed_at":"2026-07-10T15:27:20.392235Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.389371Z","title":"On the adversarial robustness of vision trans- formers","venue":null,"work_id":"da1f9f7d-51e7-4dc6-a711-2ec1c48aba0d","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:48b5da1b8e895bacfa15a83b287e3ee3560f82e34117db13f3f280f0d8845542","observation_id":"5ded3ad5-8e1f-4480-b47f-5934d82078c7","resolution":{"observed_at":"2026-07-10T15:27:20.390556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.400160Z","title":"Attacking attention of foundation models disrupts downstream tasks","venue":null,"work_id":"2126445c-665f-472e-80cd-efc2367b4ff6","year":2025},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:fc2ca82a976e8513bf8fc03ddba73770a5c5d2671705db08a532fe4897cbeb83","observation_id":"08074ba9-da57-456c-aea4-ec43fb1155e5","resolution":{"observed_at":"2026-07-10T15:27:20.401341Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.387650Z","title":"Localizing objects with self-supervised transformers and no labels","venue":null,"work_id":"fb934ed2-f59a-41c6-a1f3-c14bae0e8d80","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:52188f3146786cb971d488451170d6d82f3463f9c620b634e12bd8be31461d9d","observation_id":"a1ee95f1-37b0-4c64-8ea9-b805b4a18ebb","resolution":{"observed_at":"2026-07-10T15:27:20.388832Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.425249Z","title":"Segmenter: Transformer for semantic segmenta- tion","venue":null,"work_id":"fd3cc148-6978-4f53-9dce-a5b9ba879e3a","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:1221307567303b0e0f372843392057a3430b14c460e35308f39c12f8d851ea36","observation_id":"32f650f9-7add-43d0-a89b-1b4c5d18c3d6","resolution":{"observed_at":"2026-07-10T15:27:20.426428Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.385757Z","title":"Training data-efficient image transformers & distillation through at- tention","venue":null,"work_id":"5415aec4-fe6b-4a28-9de1-819910e93345","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:6c4cb07cb7867f1c7728ce4e1e58ec1629bfd6e30a184a693eb37799c2c001fa","observation_id":"38969bc3-4d76-4d72-aee0-72e803af1f37","resolution":{"observed_at":"2026-07-10T15:27:20.386967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.392773Z","title":"Attention is all you need","venue":null,"work_id":"f4f211f6-7f43-42a0-ae0b-df15f7ece604","year":null},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:fffe146ef8fce7861a8aacd048d72d528a760e705b8dfdf4faa64fe47389aa91","observation_id":"0a8629d7-08c5-434b-a095-ab7272eb64af","resolution":{"observed_at":"2026-07-10T15:27:20.394019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.408877Z","title":"Patch ranking: Token pruning as ranking prediction for efficient clip","venue":null,"work_id":"2c37ec01-3290-495d-82f7-9bd1e048c1a4","year":null},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:ca88b462e48d2382bbe27f4a18fb7b2eaad091d92d3a120f730650e5028cb84c","observation_id":"075c3767-3c98-4186-bcd4-9b88c70c2bfd","resolution":{"observed_at":"2026-07-10T15:27:20.410280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.384011Z","title":"Adversarial t-shirt! evading person detectors in a physical world","venue":null,"work_id":"18c2b291-cc3a-4393-8e30-0c5aad515f62","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:977e99e37075f3a8dd0786faebbca12f79eb0851c7a57705acdf7d6a5ccf18fb","observation_id":"919b240b-068d-4f8f-aaea-75f14d8c09a8","resolution":{"observed_at":"2026-07-10T15:27:20.385186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.382066Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","venue":null,"work_id":"b60beef0-6502-4bd0-b07b-54c104776ad2","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:12b3ea0ccb64fafbcbd31171788c95bb750ff00709341459d8fc306b548dd7ed","observation_id":"6f9ceb83-ff91-4379-9f0a-667c2b174746","resolution":{"observed_at":"2026-07-10T15:27:20.383382Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":5,"verified_fuzzy":29},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 0 inbound Pith citation observations for arXiv:2607.07922."}