{"as_of":"2026-08-10T02:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3704b236a0e2b8b6c7c8eb88b6f64595e823972890a6f6ce25cd74c76b8eca59","coverage":[{"denominator":70,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":70,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T23:49:17.980388Z","state":"measured"},{"denominator":70,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":70,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.15246/citation-record","integrity":"/paper/2607.15246/integrity","json":"/paper/2607.15246/citation-record.json","paper":"/paper/2607.15246"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:11.649263Z","title":"Deepfakes and beyond: A survey of face manipulation and fake detection,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.649263Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:649596b194a982913128686c5a65082c37e0543f2c2dd9722a6409fcfd3548a3","observation_id":"556378e0-a113-4e29-aa34-e2ac47f2e8ef","resolution":{"observed_at":"2026-08-01T23:49:11.649263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:11.733196Z","title":"The creation and detection of deepfakes: A survey,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.733196Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:afed06ae29c0a94b4311de8483a1f8558fbc8621ec405134d8727b082c6f7e09","observation_id":"d0048519-00ab-4382-b7ca-14c5629e0fcf","resolution":{"observed_at":"2026-08-01T23:49:11.733196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:11.835446Z","title":"Deepfake generation and detection: A benchmark and survey,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.835446Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:f53835c4e17c944e2774d8d4ccab9439f8f895a24771fec6c03e0743f554620b","observation_id":"c2ba8053-a9e8-49f4-ac87-4ffef2a25bba","resolution":{"observed_at":"2026-08-01T23:49:11.835446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06965","last_updated":"2025-04-03T07:47:44Z","snapshot_observed_at":"2026-07-06T18:28:38.016649Z","submitted_at":"2024-06-11T05:48:04Z","title":"Evolving from Single-modal to Multi-modal Facial Deepfake Detection: Progress and Challenges","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06965","snapshot_observed_at":"2026-08-01T23:49:11.934526Z","title":"Evolving from single-modal to multi-modal facial deepfake detection: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.934526Z"},"links":{"cited_paper":"/paper/2406.06965","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:00a73d4876a73822fe1ac3929e0d6c56268d259c08b7e1957097f8845472df74","observation_id":"c0d3187a-ff68-4503-95dc-377c0952e553","resolution":{"observed_at":"2026-08-01T23:49:11.934526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.040293Z","title":"Threats and vulnerabilities in artificial intelligence and agentic ai models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.040293Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:ab9734ffbff4579ad315ace68285e15f0aa1b0bbd3edbe14cf5373699bc2e8c5","observation_id":"9d346d2a-a29e-4562-bf51-6928d2ab4765","resolution":{"observed_at":"2026-08-01T23:49:12.040293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.139488Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.139488Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:fd2a4e3353ba48b57a8c6a2f5a8657234fe8847549a458af9e23ba2ba3106560","observation_id":"37e07780-1626-4eda-9c67-0eb9ca18eba5","resolution":{"observed_at":"2026-08-01T23:49:12.139488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.242253Z","title":"Densely connected convolutional networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.242253Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:6bd30d6dc9fe07444d077e49b02e5a07a443c8f247d01406c54eb871bf2b0ede","observation_id":"cbf13927-0342-4e66-a3f3-050930776a16","resolution":{"observed_at":"2026-08-01T23:49:12.242253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.342244Z","title":"EfficientNet: Rethinking model scaling for convolutional neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.342244Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:68b7f537d6345cbc2bb2d96c18bda25010c7c18c086017bd9ce28291402ea602","observation_id":"2bd0a670-d1bd-4c15-87ae-089ce2088c9f","resolution":{"observed_at":"2026-08-01T23:49:12.342244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.443631Z","title":"An image is worth 16x16 words: Trans- formers for image recognition at scale,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.443631Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:1cdd485e4eb84ce4c8f9c263ed572bfc9d78c30b5469059eea987fc655c45fbc","observation_id":"e87e4c1b-0787-4a5f-a4eb-162b499683a9","resolution":{"observed_at":"2026-08-01T23:49:12.443631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.548003Z","title":"Swin Transformer: Hierarchical vision transformer using shifted win- dows,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.548003Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:fd138c56165fa5c8f0e7b873010788bd94f4ca0b753dade4bb3a792d77501902","observation_id":"a19ef547-bfbc-4aa8-abd1-330c6b28a4ed","resolution":{"observed_at":"2026-08-01T23:49:12.548003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.680930Z","title":"Can pretrained face verification models distinguish true identity from deepfakes?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.680930Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:80597a2b77465e385d9f265fc4d90098ea09099dbe04957d8da8ead6e262cd35","observation_id":"60b56041-0318-40e9-a3b7-89c0524ddf98","resolution":{"observed_at":"2026-08-01T23:49:12.680930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.750124Z","title":"FaceForensics++: Learning to detect manipulated facial images,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.750124Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:3834a889c01ef0ba6bf3902174602283a117f83aa1f3bce95c5dd4ce8c2cb946","observation_id":"fa3ec7b8-daeb-4e2b-b4f7-b3f2b83770df","resolution":{"observed_at":"2026-08-01T23:49:12.750124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.825831Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.825831Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e9cd44b3d488d514d060bd1cdf5e6bf59432b336aa0a0e809813cdf85cd421ac","observation_id":"cbe5741e-b620-4b00-a5ca-3d3428405384","resolution":{"observed_at":"2026-08-01T23:49:12.825831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.879918Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.879918Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:f0518b951e2559a0279b5261ab2ec15707b8ea5553b507fb2b9765673c7e5d9b","observation_id":"988627d3-6732-4ab9-aa9d-62cf5ede2637","resolution":{"observed_at":"2026-08-01T23:49:12.879918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.935621Z","title":"Threat of adversarial attacks on deep learning in computer vision: A survey,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.935621Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:8bb1357008aa431c08949e1cbbb187771b569a35fc17f4252454f4aaba2fa437","observation_id":"0ffdd397-e71f-4d3f-b707-c6a048d9c308","resolution":{"observed_at":"2026-08-01T23:49:12.935621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.007250Z","title":"Revisiting transferable adversarial images: Systemization, evaluation, and new insights,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.007250Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:c97fa3abe2959be182495e921c8724c7950b4ff8b3e922a75ad0c9e2c4c9b26d","observation_id":"83e396b8-989b-49f5-840c-70883fbd3a3e","resolution":{"observed_at":"2026-08-01T23:49:13.007250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.083914Z","title":"Boosting ad- versarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.083914Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:d8a9b8fa80d5bffa77f5c68a23f20ea2630cff7034ee219886c7e8147817596c","observation_id":"b988f4c8-1972-4702-b777-1bc8c3ebdf5b","resolution":{"observed_at":"2026-08-01T23:49:13.083914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.136619Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.136619Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:30d5aa7e0b62bcb1ad600316955f8dec77934768b2598a2b2e647b4d5913154d","observation_id":"9e935b92-eea5-458c-8f1a-2a64c2c93db2","resolution":{"observed_at":"2026-08-01T23:49:13.136619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.191439Z","title":"Evading defenses to trans- ferable adversarial examples by translation-invariant attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.191439Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e8af115323070851c80ba1cf24eaac986434f51c1451ee8de6dfd2cd683b3d98","observation_id":"3e0df747-ceac-44b5-8cec-3b434cfd1910","resolution":{"observed_at":"2026-08-01T23:49:13.191439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.240124Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.240124Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:afa38430d7bd6e2a4c10231d0a7ab2e84af22671c70ec118520f4a7b9e2d9d9f","observation_id":"83b67a7f-bf67-4b93-b22b-4db660852c64","resolution":{"observed_at":"2026-08-01T23:49:13.240124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.313787Z","title":"Square At- tack: A query-efficient black-box adversarial attack via random search,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.313787Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:ce54e2863eee8eb1725e812335abe76f237809849475feeaba7ef21dfa3527dd","observation_id":"554b6b14-aea5-448f-a541-ae7b9c40cab3","resolution":{"observed_at":"2026-08-01T23:49:13.313787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.368002Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.368002Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:6084a219304b8faf4730f625f0d4065d6dc2671fb692d82b3d515eccc5b56c1d","observation_id":"81a03461-d535-4819-9c65-92287becb9a8","resolution":{"observed_at":"2026-08-01T23:49:13.368002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.01734","last_updated":"2026-06-03T19:03:24Z","snapshot_observed_at":"2026-08-07T17:33:03.325581Z","submitted_at":"2025-03-03T16:54:03Z","title":"Adversarial Agents: Black-Box Evasion Attacks with Reinforcement Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.01734","snapshot_observed_at":"2026-08-01T23:49:13.388861Z","title":"Adversarial agents: Black-box evasion attacks with reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.388861Z"},"links":{"cited_paper":"/paper/2503.01734","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e9bc0ee3dd469f9b1a8f7a952fe5e19193c2243d9e728bda7d9d95dd2e8bbd53","observation_id":"23539877-58cd-4bbe-b13d-bdf560e9bfd4","resolution":{"observed_at":"2026-08-01T23:49:13.388861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.392891Z","title":"CNN- generated images are surprisingly easy to spot... for now,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.392891Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:3dd019bf4dcdf4fc41df69987743077021c94c1516fe34c0d5d4a4761322ccfd","observation_id":"8c12bbfe-adac-47a9-9070-2ef8e26347b8","resolution":{"observed_at":"2026-08-01T23:49:13.392891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.409123Z","title":"Thinking in frequency: Face forgery detection by mining frequency-aware clues,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.409123Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:9aa2d8b2d2a91ab69840c4aceb4d1379f4a7182cfda45bff69b72930761a4953","observation_id":"096e2cf9-a174-46a0-924b-104d0481b126","resolution":{"observed_at":"2026-08-01T23:49:13.409123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.492152Z","title":"Intriguing properties of vision transformers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.492152Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:5bcccad55ab6e393a3e950ee7db49a1e771997679d9102c5badd40d143d4fe31","observation_id":"837568c8-76d0-4deb-a701-c90cbb63fc0f","resolution":{"observed_at":"2026-08-01T23:49:13.492152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.596700Z","title":"Towards transferable adversarial attacks on vision transformers,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.596700Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e6ba51896f9a9d445cbba505ed3f024a910d8e94c59c0cd4fbb479f36655715b","observation_id":"996d64e9-105b-41dd-93ba-7fdbcdb59926","resolution":{"observed_at":"2026-08-01T23:49:13.596700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.717189Z","title":"Frequency domain model augmentation for adversarial attack,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.717189Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:341ad3abcdf0f78dc6096e7ab84b9c98ee1b38982f2b3d3ca3c2807676faeba1","observation_id":"65f6467d-087f-41a8-b75b-0bcfa9cc3432","resolution":{"observed_at":"2026-08-01T23:49:13.717189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.814732Z","title":"Boosting adversarial transferability by block shuffle and rotation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.814732Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:59db358d2c05645912769868fbae34f8147ea597730e8a5481eb55c6381dbf22","observation_id":"599153a9-028d-4bde-9d1e-7dadd9a9584a","resolution":{"observed_at":"2026-08-01T23:49:13.814732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.884888Z","title":"ARMOR: Agentic reasoning for methods orchestration and reparameterization for robust adversarial attacks,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.884888Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:f4981e9af7bf559b625c9e661dbe38947286c8b89ee17dfff3531b688d00dce4","observation_id":"2ab415d2-6436-438a-ac95-3ebcb7d3b779","resolution":{"observed_at":"2026-08-01T23:49:13.884888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.974429Z","title":"Agentic AI: Autonomous intelligence for complex goals — a comprehensive survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.974429Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:7db83b17f4d942ab30c4a4d44523be6f1ea3d326a5dbb42f241e52158cdb3e10","observation_id":"58dc9a06-905d-4f34-9379-d55c1ec7509e","resolution":{"observed_at":"2026-08-01T23:49:13.974429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.06322","last_updated":"2025-01-10T19:56:50Z","snapshot_observed_at":"2026-07-30T22:07:13.869232Z","submitted_at":"2025-01-10T19:56:50Z","title":"Multi-Agent Collaboration Mechanisms: A Survey of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.06322","snapshot_observed_at":"2026-08-01T23:49:14.060856Z","title":"Multi-agent collaboration mechanisms: A survey of LLMs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.060856Z"},"links":{"cited_paper":"/paper/2501.06322","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:fb6e6322ce2a5c7146a1f043b23bf0f8f21069861e5b6e3cf8635c97facc2746","observation_id":"6ebf2fce-2271-490a-9f5c-ae9d4642d488","resolution":{"observed_at":"2026-08-01T23:49:14.060856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.177548Z","title":"Agentic AI: A com- prehensive survey of architectures, applications, and future directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.177548Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:2c0ab39bad22a40da9098ed4fbf837b704961f3c6203d9909db7e43620cdebb4","observation_id":"09576b84-01fc-4397-94fb-444722b7b118","resolution":{"observed_at":"2026-08-01T23:49:14.177548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-01T23:49:14.252395Z","title":"Qwen2.5-VL technical report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.252395Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:93db02971cb0dc9503e6c98df71b026f7c80a9e342cc01eea92fd7a7ee39f858","observation_id":"4b945bdd-d76e-4b12-aa54-d30a11283aee","resolution":{"observed_at":"2026-08-01T23:49:14.252395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-08-01T23:49:14.347193Z","title":"Qwen3 technical report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.347193Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:d0f72fbe5947a3dfade1c9f06d44774d41036b53ce1e799d6819b6ccc0327d71","observation_id":"07ed48e3-032b-49e9-bea6-7d3a4a41ea43","resolution":{"observed_at":"2026-08-01T23:49:14.347193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.436567Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.436567Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:006184065f7d5f177f20f3eb96372a23cd375eefc015d3ded7dbc5eb0da68a52","observation_id":"b72c8f02-a649-4ac9-be7b-6a81700c49a7","resolution":{"observed_at":"2026-08-01T23:49:14.436567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.497975Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.497975Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:14dc3885ffeb8c89ad29e8ffb8584e22ca12c1772e9eb22b40d5a32eaa245e8d","observation_id":"b0d81842-cd6b-4c6e-8078-4f4082b9294f","resolution":{"observed_at":"2026-08-01T23:49:14.497975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.575133Z","title":"Spatially transformed adversarial examples,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.575133Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:07a3d257270816a72fcc68ff760e7ee464de7019b909bfe7c29027b668c2fb9c","observation_id":"8b7e3c6f-6f0b-475f-8540-70761a7f727c","resolution":{"observed_at":"2026-08-01T23:49:14.575133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.672312Z","title":"Adversarial attacks on deepfake detec- tors: A challenge in the era of AI-generated media (AADD-2025),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.672312Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:fd84e01bed7dfadadd7848eec763902afe44dc29db679afbac186a87fe32c76e","observation_id":"16f7bc03-1cf5-483a-9206-709cb339d9d0","resolution":{"observed_at":"2026-08-01T23:49:14.672312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.08854","last_updated":"2019-10-23T18:47:35Z","snapshot_observed_at":"2026-08-06T07:27:19.098848Z","submitted_at":"2019-10-19T22:35:52Z","title":"The Deepfake Detection Challenge (DFDC) Preview Dataset","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.08854","snapshot_observed_at":"2026-08-01T23:49:14.784031Z","title":"The deepfake detection challenge (DFDC) preview dataset,","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.784031Z"},"links":{"cited_paper":"/paper/1910.08854","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:659d2fdedfdd803af39697bb798677b9465e1303be032df6aa70051103f08108","observation_id":"5eb21e76-d898-45ca-aeb7-3d518c2afee2","resolution":{"observed_at":"2026-08-01T23:49:14.784031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.883748Z","title":"Multi- attentional deepfake detection,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.883748Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e7522950a9892065d99b4484987b84333614eedb2bf9553bd98a23e26b480e29","observation_id":"7a3b43f8-e162-4e0e-b65d-d934b0bad757","resolution":{"observed_at":"2026-08-01T23:49:14.883748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.976061Z","title":"Detecting deepfakes with self-blended images,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.976061Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:1fbddfaffb7347caedf40338c057de5cea5b9d5fa5e854e6752dde6cf5d37320","observation_id":"8223f427-546c-4c0f-a5b9-59bfe602da8f","resolution":{"observed_at":"2026-08-01T23:49:14.976061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.140147Z","title":"DeepfakeBench: A comprehensive benchmark of deepfake detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.140147Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:180919c226076776a539d6219d26d0987a9d464227ae12e7f965146b3721decc","observation_id":"7f9409d9-038c-4114-a80d-126ba34d9896","resolution":{"observed_at":"2026-08-01T23:49:15.140147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.247702Z","title":"Zero-shot detection of AI-generated images,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.247702Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:5bd1fd45ead424c87152d28bd15865eb7e6f7ace6bf4850291624ab2fc601fe5","observation_id":"b7353f6b-7289-430c-85d7-6e930c25df5f","resolution":{"observed_at":"2026-08-01T23:49:15.247702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.338744Z","title":"Evading deepfake-image detectors with white- and black-box attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.338744Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:ace14262df3cbf8b0559f693d5b0946084bb20b8005543ddbe8264639d0863ab","observation_id":"0a394d77-988a-464c-8e1d-40c5eaa3cd80","resolution":{"observed_at":"2026-08-01T23:49:15.338744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.482615Z","title":"Adversarial perturbations fool deepfake detec- tors,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.482615Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:bcf7fbd346af34add9aa144306fe40462ca036c4131ecd78ebc119a8fecbf320","observation_id":"1b4f4d38-7d8f-4879-8d15-096ceb002771","resolution":{"observed_at":"2026-08-01T23:49:15.482615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.592519Z","title":"Adversarial attack on deepfake detection using RL-based texture patches,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.592519Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:9bcfbdbc98c423c582fdf62ae3cc27388f1302dfe5928dc4acccea704c11f994","observation_id":"42f2dff8-7cf7-4df0-b0de-16977f81607a","resolution":{"observed_at":"2026-08-01T23:49:15.592519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.714904Z","title":"2D-Malafide: Adversarial attacks against face deepfake detection systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.714904Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:fa2ffd2d93e7a2f494552629e759c4867a9e8ef5a2b8d8568d1a06a2c6f7464f","observation_id":"34d5b80a-3b07-4569-b74b-9acbcf556246","resolution":{"observed_at":"2026-08-01T23:49:15.714904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.802580Z","title":"MIG-COW: Transferable adversarial attacks on deepfake detectors via gradient decomposition,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.802580Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:dfe8d75382a97311002e9ece9fb2af89c46da9ab9c06cd67caba1d6f5f5457bf","observation_id":"eea5ca9c-5107-4316-88ef-a48a0ca9a68e","resolution":{"observed_at":"2026-08-01T23:49:15.802580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.958376Z","title":"MS-GAGA: Metric-selective guided adversarial generation attack,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.958376Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:524d5b6c7b5cef37db02dec678eb0be783791779a83f056a2dc66d89634e4b45","observation_id":"51425b62-c7a3-4255-aac4-780587b566ef","resolution":{"observed_at":"2026-08-01T23:49:15.958376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.120345Z","title":"Delving into transferable adversarial examples and black-box attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.120345Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:fab93728197ba61019f73545d684eb31ad50f28148c8ac6a5efa2ae3afc830f3","observation_id":"34236ede-a0b0-4b19-ba9b-39df2814f93b","resolution":{"observed_at":"2026-08-01T23:49:16.120345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.253851Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.253851Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:47e328d13a36bcedafc21ca280bd3fcb06e94f3fb0945c566a9f7550f03609f4","observation_id":"33f9f9eb-3f1c-41db-b690-bd5deeb208ed","resolution":{"observed_at":"2026-08-01T23:49:16.253851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.378563Z","title":"Simple black-box adversarial attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.378563Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:03c69736d1052ce45dd492906a9c71a87c29ee1adc3e264ff00106fa330c6dee","observation_id":"5bd683ef-faee-42b6-8352-2074c25fc12d","resolution":{"observed_at":"2026-08-01T23:49:16.378563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.469494Z","title":"Efficient black-box adversarial attacks via bayesian optimization guided by a function prior,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.469494Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:ac960b391c549c94445eb182ac4612c3db8e3f158faa79b1ce62f20abfeaf7a0","observation_id":"5ce10af3-644a-4f0f-92d1-24d04aac5f8b","resolution":{"observed_at":"2026-08-01T23:49:16.469494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.581874Z","title":"Feature importance-aware transferable adversarial attacks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.581874Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:7a9d120dc87af81bb1943717c37218f17e4eec92159fe6539963310f624dbf73","observation_id":"8620ef02-f307-49d1-a808-7c3f9abb3008","resolution":{"observed_at":"2026-08-01T23:49:16.581874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.691249Z","title":"AnyAttack: Towards large-scale self-supervised adversarial attacks on vision-language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.691249Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:31b7213d107d3ed842ac27fd6e55e8e363c5e85e3665daab962d67d442c3dfcf","observation_id":"511a90be-f108-4f14-a522-da4b65be0eff","resolution":{"observed_at":"2026-08-01T23:49:16.691249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.813345Z","title":"Semantic-aligned adversarial evolution triangle for high- transferability vision-language attack,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.813345Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:0662e7830663095f1a209ca2c81716761e43fc79b5bc9737e48175333e21abb1","observation_id":"9c3f8dd3-b9ae-4278-b278-9bd9f2590982","resolution":{"observed_at":"2026-08-01T23:49:16.813345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.905745Z","title":"Adversarial attacks against closed-source MLLMs via feature optimal alignment,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.905745Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:0e3e7d6d902a85b8b2da838bb7b1d5eba3dcdc0852ae366849dba4e7e714c79c","observation_id":"27a8c3cc-4f11-4db4-8d02-6b907b76d107","resolution":{"observed_at":"2026-08-01T23:49:16.905745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.018301Z","title":"AutoGen: Enabling next-gen LLM applications via multi- agent conversation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.018301Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:093ad45eeddc7d499eca61044f75c2fa3fee4d76fa0b9e3823c3b6ddaaf634bf","observation_id":"800a6abd-fbcf-4309-8716-a34040082900","resolution":{"observed_at":"2026-08-01T23:49:17.018301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.124241Z","title":"Generative agents: Interactive simulacra of human behavior,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.124241Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:17e46f632f5447f442d39f52d9d21b117892c428f040d9c9c4b7b8bcd3dbad8b","observation_id":"1e864c2e-3c06-4c7e-9a07-999f4e9c9c3f","resolution":{"observed_at":"2026-08-01T23:49:17.124241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.203457Z","title":"The rise and potential of large language model based agents: A survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.203457Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:209627dc4dc448b59c3514b2a99228ef4b9ea4a8bbd0567b56d2515a4c71eee4","observation_id":"8a773500-1ff7-4b03-ab89-bd2a259e2db2","resolution":{"observed_at":"2026-08-01T23:49:17.203457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.312571Z","title":"Large language models as optimizers,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.312571Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:bceeea61f0568c4a0de398e02ce050933878e9a517f1a7eff95c60b10dd8b200","observation_id":"123b2c44-767c-44cf-a40b-6b2e38926fdf","resolution":{"observed_at":"2026-08-01T23:49:17.312571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.399511Z","title":"AgentHPO: Large language model agent for hyper-parameter optimization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.399511Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:8062af810ce110677c086a532817fa31be5c85716ebd11f24fcaf172ad6e303f","observation_id":"f146a8dd-7a91-4f34-8d72-9bc9f31c6b32","resolution":{"observed_at":"2026-08-01T23:49:17.399511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.473100Z","title":"AutoDA: Automated decision-based iterative adversarial attacks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.473100Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:0ee689c112afcfef3f19ae975b8f1ee0e84e5a83cb83741b8ac416a535ee5692","observation_id":"a57b8858-4fa3-4481-a11e-05b8572a5b72","resolution":{"observed_at":"2026-08-01T23:49:17.473100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.553122Z","title":"L-AutoDA: Large language models for automatically evolving decision-based adversarial attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.553122Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:91ebd6c7ef8cdd4bedf377b0ed642dd5aaae229c833171d4b69126022a8c885e","observation_id":"4143cc4b-a9fa-4186-ab33-260e892f0d17","resolution":{"observed_at":"2026-08-01T23:49:17.553122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.627809Z","title":"Red-teaming LLM multi-agent systems via communication attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.627809Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:c5d0ff0b0c5147f3ba18357b8e0a0beff6a16981d738e7aea966c201260950a5","observation_id":"064ae00d-5c67-4034-b468-821d97cefaf1","resolution":{"observed_at":"2026-08-01T23:49:17.627809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.705381Z","title":"Image quality assessment: From error visibility to structural similarity,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.705381Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:8b62fed595468978abdd034e2038bb7871ec5a9878a5372c969609059682e52c","observation_id":"b2a46116-8d91-4c52-bbac-ffb11feaef6b","resolution":{"observed_at":"2026-08-01T23:49:17.705381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.801984Z","title":"Probable inference, the law of succession, and statistical inference,","venue":null,"work_id":null,"year":1927},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.801984Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:658a74251fa6ecefa50ceb14f405ce320675c543534f9bf8a82985698fe749be","observation_id":"367754c0-6147-4034-9330-90e07884e9d8","resolution":{"observed_at":"2026-08-01T23:49:17.801984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.870113Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.870113Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:66209e67e7c2d6ddcdd24e31b93df16051132a416462aba87c978b7e336c3e05","observation_id":"2399c185-5a84-407d-a0db-91b96e2a064b","resolution":{"observed_at":"2026-08-01T23:49:17.870113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.980388Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.980388Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:b19e9263ee02dcc19bd539baefbecf2ea2cc5a339252980f44b57ecd11302d31","observation_id":"6c169e95-910e-48c9-b8b2-b5ab6228c057","resolution":{"observed_at":"2026-08-01T23:49:17.980388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T18:21:38.948666Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors"},"reference_resolution":{"displayed":70,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":70,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":70},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2607.15246."}