{"as_of":"2026-08-09T21:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b6e51ebb79e277013c98850b3b4c1c94816f4039418c0ce3aff8ce68ca7723d7","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T11:41:32.717959Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19855/citation-record","integrity":"/paper/2607.19855/integrity","json":"/paper/2607.19855/citation-record.json","paper":"/paper/2607.19855"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.585404Z","title":"Biggio, I","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.585404Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:51ed563e840a16738716fd9f5608d0b21957a031288f92f1af8f57c70e75af31","observation_id":"a033b3a3-bfa9-4a1a-b35f-6e28d1be1060","resolution":{"observed_at":"2026-08-01T11:41:30.585404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.627138Z","title":"Szegedy, W","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.627138Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:632ad788d1844dd494f3cf7f09f9af24e35a2ae2d9f6e0a70bd6f17febff4d34","observation_id":"52a15094-01cb-4f7a-a42c-7d63e003c14f","resolution":{"observed_at":"2026-08-01T11:41:30.627138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.717543Z","title":"Croce, M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.717543Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:95b9e8517d22aeeea2eb96373f9dfc91afcafaf2d4fbd7e7d2b1a701d726a1d9","observation_id":"ec9353b4-a6b9-4387-a9b7-c0bbcb5ec419","resolution":{"observed_at":"2026-08-01T11:41:30.717543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.774764Z","title":"Croce, M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.774764Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:ad0cc5bd9630c928903c83f624d8cd1f435ab7b048ea60d4d02e3f98668f9df9","observation_id":"57c5adeb-bd20-4dfd-8b17-6504e3f4467a","resolution":{"observed_at":"2026-08-01T11:41:30.774764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.842109Z","title":"Biggio, F","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.842109Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:115ee17dddfd46512f592e57ff281a6993efc6746d9ff79bc3e254a00f9558ee","observation_id":"6eb5f236-219a-44ef-9ec9-7c97b9a6a553","resolution":{"observed_at":"2026-08-01T11:41:30.842109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06705","last_updated":"2019-02-20T17:38:32Z","snapshot_observed_at":"2026-08-02T02:05:14.321072Z","submitted_at":"2019-02-18T18:18:27Z","title":"On Evaluating Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06705","snapshot_observed_at":"2026-08-01T11:41:30.924111Z","title":"Carlini, A","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.924111Z"},"links":{"cited_paper":"/paper/1902.06705","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:44b745924ba94e2c97e8c0f66cff7f9971482d46eb204632416a4ed2e231ed9b","observation_id":"625443bb-8e5c-464c-850b-1cd57b49eeac","resolution":{"observed_at":"2026-08-01T11:41:30.924111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.977759Z","title":"Risse, C","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.977759Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:4f75348277569f42ba3a303e23f2de7e2cf23f5ff01839f2be62bb8e469e38b0","observation_id":"8f2df919-d540-450d-bba0-b92920865e80","resolution":{"observed_at":"2026-08-01T11:41:30.977759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.041705Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.041705Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:a8bf83d46ceafda710efa1a9866394009c83066f9f7e9f76618b73018b731c1a","observation_id":"33f7f071-0ca3-4cc8-a798-612a30034e2a","resolution":{"observed_at":"2026-08-01T11:41:31.041705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.111072Z","title":"Göpfert, J","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.111072Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:75c34f0a4cdfc8c1213c4204d64552158e59ef1547ce2d3c50be2098ef5bdfb4","observation_id":"95007dcb-14da-4140-bfc6-47df63c70c2e","resolution":{"observed_at":"2026-08-01T11:41:31.111072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.178081Z","title":"Croce, M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.178081Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:7d7b77b0736a3e9a6dea0f11917c318d92a8186b03a2702ad98c10d458132b13","observation_id":"2ce7cd96-2a78-423b-b04c-8a1908731ba2","resolution":{"observed_at":"2026-08-01T11:41:31.178081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.226578Z","title":"Pintor, F","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.226578Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:4a159042af94e5df7cf093908e9456f0362ee188db6076c324c30eac8c16661f","observation_id":"f602aee8-6b0d-49b2-a689-a4d4b50895d7","resolution":{"observed_at":"2026-08-01T11:41:31.226578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.276964Z","title":"Addepalli, S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.276964Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:a252ac49a6c8300a44603b36f91cae98933d284ded59bddf2c53d69685617e2c","observation_id":"2408dec9-d27c-4166-b3c0-d7ec2f0ff5f1","resolution":{"observed_at":"2026-08-01T11:41:31.276964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.317353Z","title":"Rade, S.-M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.317353Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:33a557a99e8ae3e89090d79980a43108a15654a06c67d322a1b2408b38aabf53","observation_id":"66f52eb9-5fb0-4c47-a207-976ae1ba56a5","resolution":{"observed_at":"2026-08-01T11:41:31.317353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.401424Z","title":"Chen, C.-R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.401424Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:93449174ded3bdc6e2ed2fa24139be3ca1134a646acec503f59f3d50f5734f46","observation_id":"f83ac5d1-5a07-41e4-a930-dd5db4927143","resolution":{"observed_at":"2026-08-01T11:41:31.401424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.458997Z","title":"Augustin, A","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.458997Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:6a3b924ec82bab0755e1eb8788d55a7830a38d994aebd476daa9be34a03dad26","observation_id":"699e704c-8ae5-464a-8b65-67898ddc03a0","resolution":{"observed_at":"2026-08-01T11:41:31.458997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.01946","last_updated":"2021-10-18T16:55:50Z","snapshot_observed_at":"2026-08-02T21:54:52.288981Z","submitted_at":"2021-03-02T18:58:33Z","title":"Fixing Data Augmentation to Improve Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.01946","snapshot_observed_at":"2026-08-01T11:41:31.507101Z","title":"Rebuffi, S","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.507101Z"},"links":{"cited_paper":"/paper/2103.01946","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:9b23d81dea7046c8a6394fee0dfe9ee5efa0ed73fe5b109320fdf58f50d132fa","observation_id":"d378f8bb-7115-474f-88d6-c5513af9d084","resolution":{"observed_at":"2026-08-01T11:41:31.507101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.564743Z","title":"Debenedetti, V","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.564743Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:ea2507b5c02da413269e38f72cee6d762e604ea882d8898d34c4e3f73d5bf67e","observation_id":"3b69b67a-d093-4bf8-b2bc-1ca7be5d1b63","resolution":{"observed_at":"2026-08-01T11:41:31.564743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.09425","last_updated":"2022-03-03T15:38:12Z","snapshot_observed_at":"2026-08-06T14:04:20.377069Z","submitted_at":"2021-04-19T16:17:12Z","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.09425","snapshot_observed_at":"2026-08-01T11:41:31.621683Z","title":"Sehwag, S","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.621683Z"},"links":{"cited_paper":"/paper/2104.09425","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:459737e39c69a697ffde5d2752e01d5e0c67b9741042661858a0fefb92a715da","observation_id":"b3e4c437-9187-400f-abc8-4f71cec9ebf6","resolution":{"observed_at":"2026-08-01T11:41:31.621683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.660244Z","title":"Rodríguez-Muñoz, T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.660244Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:a7fa43b20af03de1268d8f733c144d4eb96da8fe0187161ba113d0f76b3fc1ed","observation_id":"3ff83206-a062-4161-8e67-0d0f113a66c7","resolution":{"observed_at":"2026-08-01T11:41:31.660244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.715932Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.715932Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:ea969efa0fe4d43ef29b6830d33b08d702bb079425a53555b70b0664f39cab58","observation_id":"d306f4c2-d0c3-460a-b875-cdb7e162b3e8","resolution":{"observed_at":"2026-08-01T11:41:31.715932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.764783Z","title":"Stutz, M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.764783Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:0ba8e46ba82654de01b166581ef955fef6f4b895d384496eaa222c04e1e5cdd9","observation_id":"4370d861-38d4-4408-a30d-c73308dd55c6","resolution":{"observed_at":"2026-08-01T11:41:31.764783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.823721Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.823721Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:176d8cfa34c116bef394f396e5114c6d0219bc1320295369dbe66a07de081bb0","observation_id":"9d8fa90e-fa1d-499d-99e1-0e966d7da75c","resolution":{"observed_at":"2026-08-01T11:41:31.823721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.885651Z","title":"Zhong, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.885651Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:773ce8aa8a2311ee567673e1689b9f6a283e0f27c9cb250e7963256ff4611b67","observation_id":"1c125d09-2da1-40dc-931d-85931956455f","resolution":{"observed_at":"2026-08-01T11:41:31.885651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2001.03994","last_updated":"2020-01-12T20:30:22Z","snapshot_observed_at":"2026-07-06T08:49:58.983987Z","submitted_at":"2020-01-12T20:30:22Z","title":"Fast is better than free: Revisiting adversarial training","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.03994","snapshot_observed_at":"2026-08-01T11:41:31.935163Z","title":null,"venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.935163Z"},"links":{"cited_paper":"/paper/2001.03994","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:ab1046f2f1e651e36acd1c19be0a8f633a0a701a79092e1cd69277e734012eb0","observation_id":"3acc324e-d91b-47a5-967a-4ea1038f9535","resolution":{"observed_at":"2026-08-01T11:41:31.935163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.994310Z","title":"Gowal, S.-A","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.994310Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:d6187fc98024589488d05222cdc6b9fd3fd8119e1dc6f793ab1e360f38d6cd13","observation_id":"a41f1a9f-2a2e-44e2-9202-9e56dda83676","resolution":{"observed_at":"2026-08-01T11:41:31.994310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.040877Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.040877Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:e0c3eb410fc2fa83bd17d1fff8a1e81714146729e069605af9aa6f3ae57a45f9","observation_id":"8222c5ea-7f28-47ad-9606-1fd441fb33a0","resolution":{"observed_at":"2026-08-01T11:41:32.040877Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.091514Z","title":"Salman, A","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.091514Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:a7735350bdc301e3249971519f1786b372976525eb598f7b69a95e397b4a7877","observation_id":"5b23bb6e-8b1f-4c59-82a9-bff3ba8a6bee","resolution":{"observed_at":"2026-08-01T11:41:32.091514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.148289Z","title":"Jiang, C","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.148289Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:aeca5f141a51b6620a63f0399edadfad6b3dba22620f1b52808c98f8ee3c03d6","observation_id":"f9049c78-9cef-46a5-ac0c-b70793a7fecb","resolution":{"observed_at":"2026-08-01T11:41:32.148289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.214171Z","title":"Maini, E","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.214171Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:143e138f22bd4c393f6bf09d7a84ab8322a1a09b19a3ead62e84f0fe36829958","observation_id":"7b80dc46-0c7e-43fe-8c19-6cbadd4cdfb9","resolution":{"observed_at":"2026-08-01T11:41:32.214171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.267633Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.267633Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:8108489cd9a185e14f4dca8404ae2795688a92f2f7350fc2c9d4fe9e94b26513","observation_id":"f6d2234c-0a10-41c6-97ad-ec670e43a872","resolution":{"observed_at":"2026-08-01T11:41:32.267633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03015","last_updated":"2023-04-15T21:18:41Z","snapshot_observed_at":"2026-08-04T15:12:35.783973Z","submitted_at":"2023-02-06T18:54:58Z","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03015","snapshot_observed_at":"2026-08-01T11:41:32.325664Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.325664Z"},"links":{"cited_paper":"/paper/2302.03015","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:af380b5a8dd3636bf02954ae0f147956b1a613f2c8bbe2b75ba329d831348a0f","observation_id":"4734b313-e6a1-49bd-b351-a6bb08a7ca00","resolution":{"observed_at":"2026-08-01T11:41:32.325664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.01538","last_updated":"2021-06-03T01:45:48Z","snapshot_observed_at":"2026-07-06T11:15:26.915483Z","submitted_at":"2021-06-03T01:45:48Z","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.01538","snapshot_observed_at":"2026-08-01T11:41:32.360839Z","title":"Matyasko, L.-P","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.360839Z"},"links":{"cited_paper":"/paper/2106.01538","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:96be30eb7f4a5ceee1ed10fba195cf84549da2e31849422bee20fa5c8bad1c30","observation_id":"72b7c908-72f7-4f04-b9fb-fb6dbd8f1b0c","resolution":{"observed_at":"2026-08-01T11:41:32.360839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.419625Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.419625Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:a957d6d04634734a1f1fc10fe7d83dc44f16769878096b234fb6a802e22b8eb7","observation_id":"e57068f6-b4cd-4edb-94ea-7c9467315665","resolution":{"observed_at":"2026-08-01T11:41:32.419625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.486021Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.486021Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:2973b2d0f98cbe41aee6eb8995d1e3754e3ea4db367fdfae33f7d72342471fbc","observation_id":"54a48fd8-9d98-41a3-8eed-c4794764e51a","resolution":{"observed_at":"2026-08-01T11:41:32.486021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.541333Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.541333Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:018e63f17c66b9fab31489c65606d78ac3d2c9b89ba3a5057b6b087580d0da75","observation_id":"7e08121c-1a1f-4663-b63a-8f07a805e9d9","resolution":{"observed_at":"2026-08-01T11:41:32.541333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.601689Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.601689Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:355c58948207d38a374ef9c692c1626ca03808aa08721a9fdc0dbaba35a06832","observation_id":"e182e76c-99f1-4f9a-8e98-0378c9ea8089","resolution":{"observed_at":"2026-08-01T11:41:32.601689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.658766Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.658766Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:c95293a6c23be9ba82e5a16e7c9a483926fec29f419419efa336e5ecde23205d","observation_id":"c65f7b03-62fa-4956-a62f-f8379aaaaaf3","resolution":{"observed_at":"2026-08-01T11:41:32.658766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.717959Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.717959Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:261f9d019e7154b6781d36ded3d801044a8fa145873d4e1cfa6f2e068c6e0a37","observation_id":"8176965f-0dff-479c-9117-f3373094cffd","resolution":{"observed_at":"2026-08-01T11:41:32.717959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-09T10:50:42.704918Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2607.19855."}