{"as_of":"2026-08-09T17:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:11875e68a7d63b320cc7ae3fa02ac06284b9b89dad4388fc9dfa2e06eb13e8f3","coverage":[{"denominator":88,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":88,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T17:47:05.924739Z","state":"measured"},{"denominator":88,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":88,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.17550/citation-record","integrity":"/paper/2607.17550/integrity","json":"/paper/2607.17550/citation-record.json","paper":"/paper/2607.17550"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-01T17:46:54.011976Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.011976Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:fe63163cf0c7b65b3d029cbad361349bd071f0572ea2f5d0dc80af7c6622b01e","observation_id":"4f2b20db-b619-4a1b-9aa5-71ab50609409","resolution":{"observed_at":"2026-08-01T17:46:54.011976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:54.104752Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.104752Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:d807620679dfc91a88b4f09e74e22935dc25ac7b2ab1a8a8e49ca108604e4bb9","observation_id":"27bbd47f-f22a-4237-ad67-5531d32c1f47","resolution":{"observed_at":"2026-08-01T17:46:54.104752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:54.194726Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.194726Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:dadc7b69500a6ecbf5f2a1f9d1a75e1842f51305be621967b6ea1255af6cc4a6","observation_id":"572cd24b-5e00-4a43-9995-286b51db4046","resolution":{"observed_at":"2026-08-01T17:46:54.194726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:54.289452Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.289452Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:3fbb92869671e176a88056f5081a6289232a3ba5e9b0449cd63e18f37f3ab9ac","observation_id":"90c56d7c-6f56-4b7e-a38a-9519905ee57a","resolution":{"observed_at":"2026-08-01T17:46:54.289452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:54.367648Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.367648Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:f311796556d842fcf58da9a6e255c23dc3554de699767e3f5bc8e83088532d9a","observation_id":"d9dc4d97-786a-4e28-919b-cf10b150c24f","resolution":{"observed_at":"2026-08-01T17:46:54.367648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:54.459730Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.459730Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:c4c07829837fb4602ceb097056f511d913ad100addd8d07d11e329b48847c962","observation_id":"e29c07e1-a882-4ea4-8714-cc1e094abb09","resolution":{"observed_at":"2026-08-01T17:46:54.459730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:54.604749Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.604749Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:6e3128aa1f655f39c11e44e8bc5cca0d6548d7c804694471a320d824af741cd9","observation_id":"aec5e67c-ec8a-4ce0-aa5b-6e29b7b3eb75","resolution":{"observed_at":"2026-08-01T17:46:54.604749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:54.757356Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:54.757356Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:dedb58d4035ecc20a60c8aeb90aff4865300e96b3b39b8ff4b7fff93e1c51155","observation_id":"a90daffc-51ee-4f37-95ab-bbb1f0485af6","resolution":{"observed_at":"2026-08-01T17:46:54.757356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:55.001260Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:55.001260Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:e505699e77f46e4e56cd82d8c2dccbbdc166c539a2700feda7f5f398d0c5a760","observation_id":"654246f1-0e00-465e-a414-db154b5f606f","resolution":{"observed_at":"2026-08-01T17:46:55.001260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:55.154871Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:55.154871Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:b8528e34c1a8ac9ed8aad78632b2b4612f5c8960d8d3bb76d7ee45b9ff693cab","observation_id":"c0b0c5e8-d71c-4e33-abd6-c17290aa8cd6","resolution":{"observed_at":"2026-08-01T17:46:55.154871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:55.254734Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:55.254734Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:11720f011c99e0198462bc60a16d4e86222e75a532f218f394e838337daa23b8","observation_id":"e6874508-b490-414b-8357-78a702d3bae7","resolution":{"observed_at":"2026-08-01T17:46:55.254734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:55.574757Z","title":null,"venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:55.574757Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:0b84be76656d0ea23161bdfc2e25b3abcf0ca0d85d43ea9061e6de825c99cd29","observation_id":"3f2c33b8-5fa4-41df-aed3-e858a105a1a1","resolution":{"observed_at":"2026-08-01T17:46:55.574757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-01T17:46:55.755703Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:55.755703Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:cf1b52738fa94794b2a8d671fbf2524c6fa7cf5633da5aa013ec0882ec3124b1","observation_id":"7e90fc6b-0c62-4b2b-9928-d09b0f21cecc","resolution":{"observed_at":"2026-08-01T17:46:55.755703Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:55.934869Z","title":"Vijay Rao","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:55.934869Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:3de4ca8afb916a552b32dac7cfc3fdd6c6cdd4ccaeaa46d02819843b637a36ca","observation_id":"741e92a1-709d-48ed-a87d-00e3a31e5782","resolution":{"observed_at":"2026-08-01T17:46:55.934869Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.13751","last_updated":"2025-03-17T22:18:24Z","snapshot_observed_at":"2026-08-09T14:15:19.240051Z","submitted_at":"2025-03-17T22:18:24Z","title":"Optimizing ML Training with Metagradient Descent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.13751","snapshot_observed_at":"2026-08-01T17:46:56.130355Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:56.130355Z"},"links":{"cited_paper":"/paper/2503.13751","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:53ac391c99c721be4f8ac0eeaf4af05b805071f4e2141693cdd9035acb6b3abf","observation_id":"afb53d47-211d-446b-8a47-8809ce7e5e90","resolution":{"observed_at":"2026-08-01T17:46:56.130355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.07408","last_updated":"2026-04-16T05:52:12Z","snapshot_observed_at":"2026-08-08T08:18:06.804727Z","submitted_at":"2025-02-11T09:40:45Z","title":"Maximal Brain Damage Without Data or Optimization: Disrupting Neural Networks via Sign-Bit Flips","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.07408","snapshot_observed_at":"2026-08-01T17:46:56.264828Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:56.264828Z"},"links":{"cited_paper":"/paper/2502.07408","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:d4395ea0c38b38412ec1a3c4cccc7facfdef6aa1e3e37a17b48b5493d916518d","observation_id":"49b6ffd5-5bc8-4301-b069-288bccfa2400","resolution":{"observed_at":"2026-08-01T17:46:56.264828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:56.425422Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:56.425422Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:b11d6f8fc2ce3369fd97fe8bd3f49681580ad9ad2d242eb745a0785f1b930803","observation_id":"2b205740-cdca-40bc-ba0b-9f24d10c774e","resolution":{"observed_at":"2026-08-01T17:46:56.425422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:56.594601Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:56.594601Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:1c8f4ed367c619257a1acfc171194434f342251a86ee7ef962414cc461f8b089","observation_id":"3e781734-8500-47bc-a847-abd5b716a3d3","resolution":{"observed_at":"2026-08-01T17:46:56.594601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:56.854832Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:56.854832Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:04c04a3fb5daf3531bd33b5a85b29e7d444cc71b0a6315ae04834e3992ce95be","observation_id":"e2627d1b-bdd8-4967-bc91-8742ae8507fc","resolution":{"observed_at":"2026-08-01T17:46:56.854832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-01T17:46:56.995594Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:56.995594Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:ec4a776301f6a8cc6e158359e9518a9a9309d88ae16adca61722001cd79cbc07","observation_id":"179d59aa-169f-42e8-a93b-70451a47ff08","resolution":{"observed_at":"2026-08-01T17:46:56.995594Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:57.154750Z","title":null,"venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:57.154750Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:03fd92a83a3e719cae729f785499de4d50d2bbe37c3b5f58ba6dd489567880c3","observation_id":"ceaf7e47-7ca3-48ae-88a2-3d8578fdc60a","resolution":{"observed_at":"2026-08-01T17:46:57.154750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.11315","last_updated":"2021-04-22T20:49:40Z","snapshot_observed_at":"2026-07-06T11:02:52.792351Z","submitted_at":"2021-04-22T20:49:40Z","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.11315","snapshot_observed_at":"2026-08-01T17:46:57.265055Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:57.265055Z"},"links":{"cited_paper":"/paper/2104.11315","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:c875874e24d8dac377faf368a83bf23d56ab1ec2e52a675845eb26f9d9158cf0","observation_id":"80710527-9311-4cdb-b773-8fd1a95668cb","resolution":{"observed_at":"2026-08-01T17:46:57.265055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:57.394955Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:57.394955Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:65c3df46da69bf1c5e5b7f4a62733f83c7bc22c4c70edfe14d6a508fffdbc3ba","observation_id":"40c8422e-be26-414e-8875-0930a8d637fb","resolution":{"observed_at":"2026-08-01T17:46:57.394955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:57.514821Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:57.514821Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:6870aedfc4a1ca5c91eb6d892b848551cb26a7c6c0114fc221d05ea81ca472d0","observation_id":"1d0abf06-9c5d-4999-80ff-9b5cdc293017","resolution":{"observed_at":"2026-08-01T17:46:57.514821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:57.698249Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:57.698249Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:d6d74da01f743884bc03839a7aca2b639af361e51f4db5c1e1605eb68c5d9deb","observation_id":"07e8d993-b6ae-4ca7-a4af-d0d6b009ea98","resolution":{"observed_at":"2026-08-01T17:46:57.698249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:57.837082Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:57.837082Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:b209450cb4636069251b1943e06b6d020490a7a6b48f0c9c7bc7f7f3a0fa8644","observation_id":"a9dec8d6-7dc4-4163-8e21-218f2562acef","resolution":{"observed_at":"2026-08-01T17:46:57.837082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:57.944743Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:57.944743Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:2207494d3b6c9b77ffeff37dd69b4b61fcce9349e47afd521c89f32178a33367","observation_id":"c863892d-2c32-4527-b3ea-cdc527daffba","resolution":{"observed_at":"2026-08-01T17:46:57.944743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12186","last_updated":"2024-11-12T13:24:25Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-18T17:57:57Z","title":"Qwen2.5-Coder Technical Report","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12186","snapshot_observed_at":"2026-08-01T17:46:58.047962Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.047962Z"},"links":{"cited_paper":"/paper/2409.12186","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:8d3984cf82a012a6b9f73cc6ae6bee39619d6b9896cb91eafd57238896dc75e6","observation_id":"b51de2db-f1d9-4205-90df-58b38aa58188","resolution":{"observed_at":"2026-08-01T17:46:58.047962Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.143222Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.143222Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:abb2b6222d48dcc65f9f3be4b1abecff03b857672410d34dfa54b1371e990271","observation_id":"b6ef00ab-bb4b-4a80-b457-f233a19902b1","resolution":{"observed_at":"2026-08-01T17:46:58.143222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.254739Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.254739Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:f63c5a232416ccfd796c0b1a099d88f523bc84d92fdeb87e5cc8d3bad3a6a60d","observation_id":"d38fce5b-4991-4dd8-a658-9df9622e2420","resolution":{"observed_at":"2026-08-01T17:46:58.254739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.356032Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.356032Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:942e82dc2f1ff269af87da34ae6f8a629f1df5cc10a1c0d07b1ef4967eb665aa","observation_id":"e5b034d5-c417-48dc-8d44-050e62a42cea","resolution":{"observed_at":"2026-08-01T17:46:58.356032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.444985Z","title":null,"venue":null,"work_id":null,"year":1977},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.444985Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:b2a831d7319e4d4e920de710bae002d8e404244018da964ce1f723a8b08ff5c4","observation_id":"9a826d3c-2642-4f48-a323-d15bb138ec40","resolution":{"observed_at":"2026-08-01T17:46:58.444985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.514745Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.514745Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:9050d28413c551aae2f0f21f915cda6b3d7a990a92fde601df1988c353faff8c","observation_id":"0655288a-3f96-4a10-a319-b7c508de1066","resolution":{"observed_at":"2026-08-01T17:46:58.514745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.610389Z","title":"2009.Learning Multiple Layers of Features from Tiny Images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.610389Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:41dec901beee818c55a5cf031e4f18ed1ee4ecc0eeb91e7e3b697f134c827727","observation_id":"bb9f9a7b-c879-4609-8045-ca59a074491c","resolution":{"observed_at":"2026-08-01T17:46:58.610389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.765904Z","title":"2009.Learning Multiple Layers of Features from Tiny Images (CIFAR-100 dataset)","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.765904Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:305112732265c487c6249d41b4fcf22ae35d9eb1cc074b8fddb62904f80db776","observation_id":"01e11394-d5c9-4c64-835e-88b0d33139dc","resolution":{"observed_at":"2026-08-01T17:46:58.765904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:58.884747Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:58.884747Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:fcdb7f497140d07554256338d256dffa0b2e15a276c0c888e16bce02fed6cd6c","observation_id":"bd41a3ae-9809-409d-aa4d-a1c46427ca79","resolution":{"observed_at":"2026-08-01T17:46:58.884747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:59.074851Z","title":null,"venue":null,"work_id":null,"year":1989},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:59.074851Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:9d0c815ca1d3a11f77d210c70d560f855f2d4340cd5766d62288b102b2444e63","observation_id":"7a7b89da-58a0-4d91-bc8e-d35bdd65733f","resolution":{"observed_at":"2026-08-01T17:46:59.074851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13355","last_updated":"2024-03-20T07:34:18Z","snapshot_observed_at":"2026-08-07T22:23:06.111813Z","submitted_at":"2024-03-20T07:34:18Z","title":"BadEdit: Backdooring large language models by model editing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13355","snapshot_observed_at":"2026-08-01T17:46:59.257502Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:59.257502Z"},"links":{"cited_paper":"/paper/2403.13355","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:b8fa98e99ccd0fe65eddf4c5d67ad2b47155c14bab12c8fc3b9c239ec65782d9","observation_id":"ece453c4-638c-4244-aa96-d628575fb100","resolution":{"observed_at":"2026-08-01T17:46:59.257502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:59.368780Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:59.368780Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:933e5f2be1abb3c92af46200fdf79a3288958c5d117cdf6942a2b31572ec36a3","observation_id":"8ef4b1a1-1b52-493b-9c4d-2b138f653d9b","resolution":{"observed_at":"2026-08-01T17:46:59.368780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:59.468558Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:59.468558Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:d7407950986b1c765d259f14cb6384514fd0af48cee508175b3f8587c5c9c155","observation_id":"c64acb07-b7ae-4da0-989e-eb2e023ef739","resolution":{"observed_at":"2026-08-01T17:46:59.468558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:59.615717Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:59.615717Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:cdf5bd52319d24bf7b5d06ce7da6ce48090cfa44578027f95a8897ec052d5f97","observation_id":"6cdf44bd-0eda-4ef0-aaa2-97b2d657a03e","resolution":{"observed_at":"2026-08-01T17:46:59.615717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:59.734737Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:59.734737Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:1a9d79cb052f6bf2b62308393696a594f6e4f5c9028be0309b8f0843da1417b6","observation_id":"6cca98d6-3fc6-442e-b423-54a1f06df9f9","resolution":{"observed_at":"2026-08-01T17:46:59.734737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:46:59.927658Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T17:46:59.927658Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:9e26fe370c259704f5c327094c0cb9d5cfa0de3cf7e6b9e50165182c4a2f8b70","observation_id":"4e14733e-6ca8-46ce-b1eb-adac60103472","resolution":{"observed_at":"2026-08-01T17:46:59.927658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1609.07843","last_updated":"2016-09-26T04:06:13Z","snapshot_observed_at":"2026-07-06T05:12:10.387914Z","submitted_at":"2016-09-26T04:06:13Z","title":"Pointer Sentinel Mixture Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1609.07843","snapshot_observed_at":"2026-08-01T17:47:00.023579Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:00.023579Z"},"links":{"cited_paper":"/paper/1609.07843","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:e33c156a6b8719e9f8761c2cb4d5262db5bb276ad88a61e910aa53db2f3e51e4","observation_id":"cddd5c3b-8396-4d48-a8b9-2e6e9fdebb08","resolution":{"observed_at":"2026-08-01T17:47:00.023579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:00.137377Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:00.137377Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:455d8fadd0543300c644432838b7b457b97de8c7fc17a4e11765ad092e9dc729","observation_id":"a7d3df2d-6df4-4f77-a7c3-c886b138416e","resolution":{"observed_at":"2026-08-01T17:47:00.137377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02673","last_updated":"2023-12-05T11:29:12Z","snapshot_observed_at":"2026-07-06T16:57:05.781222Z","submitted_at":"2023-12-05T11:29:12Z","title":"Robust Backdoor Detection for Deep Learning via Topological Evolution Dynamics","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02673","snapshot_observed_at":"2026-08-01T17:47:00.228386Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:00.228386Z"},"links":{"cited_paper":"/paper/2312.02673","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:5969d9cf8d75aace3ca6123d29f5583ccbcd4bd5391d02dd0fac2f48f7e13232","observation_id":"0a8eec04-62eb-4f68-a37d-593634a74185","resolution":{"observed_at":"2026-08-01T17:47:00.228386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:00.320342Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:00.320342Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:9178b10c3bf4bb61438a64a4ad0e91883953a9b63add8c87b02518acef025196","observation_id":"b7a7bfd7-39df-44d9-84fb-cd47fee5ad31","resolution":{"observed_at":"2026-08-01T17:47:00.320342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:00.474001Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:00.474001Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:8a5c2bf6783aed681af825f1d5dc413584831bbe2e1822776adc434da5a9214e","observation_id":"8fb56cc1-9abd-417f-bab3-8d0eee2c2856","resolution":{"observed_at":"2026-08-01T17:47:00.474001Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:00.622168Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:00.622168Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:ddac5cc83e5db7af47cce06ee53ddc2190af3044578faf51838726107f75aef4","observation_id":"ef51f935-67dc-46ee-9ef6-25f03fc7cff7","resolution":{"observed_at":"2026-08-01T17:47:00.622168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:00.856298Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:00.856298Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:2ca3852996e8d0ac35b0042636ae5df9b00ff0d9ecdf8078ea3b5d7a5c825d59","observation_id":"4832a6d5-0fe4-42ff-acf4-3e7dd7142738","resolution":{"observed_at":"2026-08-01T17:47:00.856298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:01.020520Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:01.020520Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:a740e6907fb4e68b4136ea4d61d666b9f8c90b634e83398c7d5da6617db3000d","observation_id":"b8ce7104-4529-489d-ace4-1fb4aaef199c","resolution":{"observed_at":"2026-08-01T17:47:01.020520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:01.185965Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:01.185965Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:a3f27915675fca457e5064cf81be5e483df1aa06d7087d69a61007d23f65df3e","observation_id":"372c3f10-1e1a-46ee-9c0b-cf21e51a5ccf","resolution":{"observed_at":"2026-08-01T17:47:01.185965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:01.317386Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:01.317386Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:02e80a18ec6c773225e4e95ed9748dfda1bfdd90772fe752f4f277cac49ccae5","observation_id":"1f1ddc7d-d686-44b6-b110-c10a657d24c9","resolution":{"observed_at":"2026-08-01T17:47:01.317386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:01.428733Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:01.428733Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:93e520b9cb7afd4954ffd8d23b084dfcc62ad65a592cc091372780d68f1292b8","observation_id":"3b2a1917-be04-458a-abaa-80ef799dbbf1","resolution":{"observed_at":"2026-08-01T17:47:01.428733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:01.573136Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:01.573136Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:6693505bf3a58e25b0b116f22f3002e19954e971334c75d99ddc02be1146ec6f","observation_id":"0e0e45ac-da7d-4afe-b232-045c07e1a8ab","resolution":{"observed_at":"2026-08-01T17:47:01.573136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:01.688189Z","title":null,"venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:01.688189Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:907c77ac8ac78634a558daf5213f7f7b050219942283a5fcde8b586697dbe263","observation_id":"b93d78f7-40df-4910-99a6-eb8796d33d45","resolution":{"observed_at":"2026-08-01T17:47:01.688189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:01.790121Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:01.790121Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:0fcbab640779c16bdad032c6a564619adfae289343e167f5ebfa633f05341823","observation_id":"97d58590-3180-4bb7-9274-3b5003b81652","resolution":{"observed_at":"2026-08-01T17:47:01.790121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.011433Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.011433Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:69c6b44c3d37f64f0c33ed1c0a37ad4b8c3ef76cdff9c7d81df47f46442b739b","observation_id":"e91952c3-d5e5-48e3-b34e-416ee7a577e9","resolution":{"observed_at":"2026-08-01T17:47:02.011433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.067967Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.067967Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:392120aa033aab26dfa7873f1494c66d06e15fb71ea0ae57341e95abb32165ba","observation_id":"47f736ed-cca0-4947-a9c5-511c156734fe","resolution":{"observed_at":"2026-08-01T17:47:02.067967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.160195Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.160195Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:c772344a9467663f3fddad19464d9f2b31b0f9b4a4eea69dbd31b802f887c305","observation_id":"bfffd9f0-8d40-49e0-8cd5-f8113d9cfca7","resolution":{"observed_at":"2026-08-01T17:47:02.160195Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.314752Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.314752Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:5e6ed1d54f8f5b368c29bf9858121c840d2b4aba20a2321053b841e3edfb705c","observation_id":"05907961-817e-4afc-b26a-8e997dc02ddd","resolution":{"observed_at":"2026-08-01T17:47:02.314752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.510100Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.510100Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:846ca2a2fd0ded3f5d40f2184afa5fa13a4bf6c41bde4a8666ac97c209025b55","observation_id":"06980113-a480-4084-bd7e-962cc321dd42","resolution":{"observed_at":"2026-08-01T17:47:02.510100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.642864Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.642864Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:b5d541a010a9ef4d5c745b25810a90c0f48b51d36f94437127a9d5b546281ef2","observation_id":"2c62eceb-4b13-41a7-82c0-22d2ed23b5b8","resolution":{"observed_at":"2026-08-01T17:47:02.642864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.784286Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.784286Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:2eefbbf318538824d369ebd41039945a39e9266367683894221f708e0b846cc6","observation_id":"6963aab7-021a-42c1-a0ca-58c4730aa139","resolution":{"observed_at":"2026-08-01T17:47:02.784286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:02.874915Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:02.874915Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:dd180685d6af734f7a8b17c47a828052c35b97f8a37bb85319d8a683435e1349","observation_id":"c24d42c0-89f5-4674-8f1b-871e1d7ac76d","resolution":{"observed_at":"2026-08-01T17:47:02.874915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:03.016197Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.016197Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:60fc4aa26c3f55e7fd25576ede0cf1738e4bda2150bd18b223721bf5cd44841d","observation_id":"76bbebec-18fd-49b0-9146-3802426f4787","resolution":{"observed_at":"2026-08-01T17:47:03.016197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.5281/zenodo.5854961","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Zenodo (CERN European Organization for Nuclear Research)","work_id":"cec316c0-2672-44ec-91f0-e5477c5c4577","year":2022},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.149542Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:80d82e918a3790707799678a7fff05fcf89ed60c25ec8035febf094dec26cc54","observation_id":"6e10e5e4-7af1-46c4-a2a0-68fe767081e8","resolution":{"observed_at":"2026-08-01T17:48:22.574754Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:03.225699Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.225699Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:c647c7fb547e03579aefa7989e43d3078c525044dbe74e797aaf803fb4840f57","observation_id":"e43fda72-b01c-4e12-a604-55510cbcf007","resolution":{"observed_at":"2026-08-01T17:47:03.225699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:03.484134Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.484134Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:0e0c70c85b74cbc50dd27ef2ce2c3b9a88db19baa17fa8c33b5c7bd5e39e1c52","observation_id":"5d57407e-c626-4f03-aa2e-01b697565fb1","resolution":{"observed_at":"2026-08-01T17:47:03.484134Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-01T17:47:03.587126Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.587126Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:cadcd4cb09485054b1610c30df01e45ebf5c280d380126dca35ce674e9785454","observation_id":"eb3a0782-c771-4760-892a-d32d4993eb6e","resolution":{"observed_at":"2026-08-01T17:47:03.587126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.01440","last_updated":"2025-09-01T12:50:30Z","snapshot_observed_at":"2026-08-05T12:35:34.767594Z","submitted_at":"2025-09-01T12:50:30Z","title":"Benchmarking Optimizers for Large Language Model Pretraining","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.01440","snapshot_observed_at":"2026-08-01T17:47:03.790519Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.790519Z"},"links":{"cited_paper":"/paper/2509.01440","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:09a4a8d9497200bfc8e524b3b2374c6089fe4f57935e3bb386b693bda0e740c9","observation_id":"d3b04c17-064f-4229-9c1d-ccc1dcc9f23c","resolution":{"observed_at":"2026-08-01T17:47:03.790519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:03.857755Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.857755Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:6047eedd2e7b7c37c13fdf1fba632e9955aefa6c8af9e03694f0c8f62aeac35b","observation_id":"82cce451-e89c-4816-83de-7a36f847e55d","resolution":{"observed_at":"2026-08-01T17:47:03.857755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:04.074738Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.074738Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:d9c069f2755eb32fe58bd449933b46e397fef38f4cb7679ded6216efb5548611","observation_id":"3e298794-490c-426b-80cc-b505f7bc1679","resolution":{"observed_at":"2026-08-01T17:47:04.074738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-01T17:47:04.174926Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.174926Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:87ba2f62b9b09b472bb7b2119708e6942bd346d9355b4e60d996fa868234c2eb","observation_id":"27f0e49b-72a2-414b-9a22-691590812f12","resolution":{"observed_at":"2026-08-01T17:47:04.174926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:04.314756Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.314756Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:b0049cf166dc25035bf80cc41a940811c420cc600e726be1e9adf48791a252d1","observation_id":"b688dd17-399a-4814-8300-abde538435d4","resolution":{"observed_at":"2026-08-01T17:47:04.314756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:04.384743Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.384743Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:5c1a8cf12a2ba2da680a204e5cd5f21937a4f11902fc9bdc7bb5d94bbe1321f0","observation_id":"52ace437-775a-4a23-8da3-30f1ff459058","resolution":{"observed_at":"2026-08-01T17:47:04.384743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:04.479166Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.479166Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:2051df91d1ef45fd23b6ef8f2133ddc5eea5d0d512815f9d128f3f60a309af5a","observation_id":"9b43863d-92b6-4245-b2ec-0f2f8d7d81f8","resolution":{"observed_at":"2026-08-01T17:47:04.479166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-01T17:47:04.644743Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.644743Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:681afa70d7fe3fcea02235717292b7800b45571cfc53b1e175d913ef26bfe974","observation_id":"01e3ed16-8151-4d66-aa93-ea98c3bc8975","resolution":{"observed_at":"2026-08-01T17:47:04.644743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-01T17:47:04.785868Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.785868Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:d1de5c527003485c354cce1da229dc9ad5f6a1c4618f23fb88622ebdf8380fd4","observation_id":"3f4cd019-3ae2-48a9-a5ea-4fa5ac36f369","resolution":{"observed_at":"2026-08-01T17:47:04.785868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:04.906930Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:04.906930Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:2ff8f6489af29dbe9ccaac0bdd628e7ccf7230dbcf03888253cd26b617423bca","observation_id":"5c6a8578-3023-40e0-b3cd-168015e061fe","resolution":{"observed_at":"2026-08-01T17:47:04.906930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:05.067604Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:05.067604Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:52ecb8ad498ee46a09dece3cf1263f51fc6222cc77b8ee9e794bad021632bf64","observation_id":"d8430fa7-7cf7-4ab6-8f41-9f4ac273cf78","resolution":{"observed_at":"2026-08-01T17:47:05.067604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:05.183265Z","title":"2020.{DeepHammer}: Depleting the intelligence of deep neural networks through targeted chain of bit flips","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:05.183265Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:13d3866ed38245004d19ff0253e2b86682b74fdd6ccf69b0ecba6710a3747992","observation_id":"e77ed51e-3784-4d70-80c4-9158482777a4","resolution":{"observed_at":"2026-08-01T17:47:05.183265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:05.356675Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:05.356675Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:c64c2642a1183d64a2b7d28948220d8c23ae1bcd8e0ce5e912f01d9f6db4e0cf","observation_id":"62337dbc-882d-4b34-b529-9c03935d4e07","resolution":{"observed_at":"2026-08-01T17:47:05.356675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:05.526250Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:05.526250Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:de9923b1798717ba08a5e6028b36ad1d4a5e3830b7cb6243f8a1690186848a77","observation_id":"f2284dd1-4d1e-4203-9028-90b862d38fbf","resolution":{"observed_at":"2026-08-01T17:47:05.526250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.01068","last_updated":"2022-06-21T17:04:40Z","snapshot_observed_at":"2026-08-06T03:13:37.403059Z","submitted_at":"2022-05-02T17:49:50Z","title":"OPT: Open Pre-trained Transformer Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.01068","snapshot_observed_at":"2026-08-01T17:47:05.644741Z","title":"bad hyperparameters","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:05.644741Z"},"links":{"cited_paper":"/paper/2205.01068","citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:6829563f3b5b07432510f5a0ea47ec2601117d858363bb8ba0375d40d46853f0","observation_id":"382430ea-21fd-4f1b-bb79-3fb1f63e21ab","resolution":{"observed_at":"2026-08-01T17:47:05.644741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:05.762177Z","title":"clean model, dirty system","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:05.762177Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:c0c95a23137f18a22a7d2069f6e10c4375f4b79c405744d331affc062ec84896","observation_id":"d70568bf-bcc9-4f4f-97c9-d40743adf9ee","resolution":{"observed_at":"2026-08-01T17:47:05.762177Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:05.924739Z","title":"The attack latches at epoch 6 and remains permanently active for 21,114 batches thereafter","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:05.924739Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:7aa62b7ccc2501655c8285b7ff28a27b7fc4916b4cd089ac08c88d358faa5438","observation_id":"00f397f3-d721-4c12-be34-3ba796844e5a","resolution":{"observed_at":"2026-08-01T17:47:05.924739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:47:03.354757Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","version":1},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:03.354757Z"},"links":{"citing_paper":"/paper/2607.17550"},"observation_digest":"sha256:fc1845d2b350296e450ed7186176886afca83220893ba16221c684a7356886c2","observation_id":"55f1a299-170b-4015-be59-650bdd64c5a3","resolution":{"observed_at":"2026-08-01T17:47:03.354757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.17550","last_updated":"2026-07-20T04:51:20Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T23:53:28.729572Z","submitted_at":"2026-07-20T04:51:20Z","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure"},"reference_resolution":{"displayed":88,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":86,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":88},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 88 of 88 outbound references and 0 inbound Pith citation observations for arXiv:2607.17550."}