{"as_of":"2026-08-04T23:03:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:00924a1b351ee04d15d11af2c4bcd5b928bddce3b54d00db2f607e0d80d47d72","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":21,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":21,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":21,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":21,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T23:52:40.329981Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-10T06:15:00.866473Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2109.13916","last_updated":"2022-06-16T21:12:42Z","snapshot_observed_at":"2026-07-06T11:52:19.105210Z","submitted_at":"2021-09-28T17:59:36Z","title":"Unsolved Problems in ML Safety","version":5},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-16T20:45:27.421909Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2109.13916"},"observation_digest":"sha256:c256717e0d8723bfd3309d7dc73b5198ba7413a84724d8ad449b0e12dc3733e9","observation_id":"41fe5854-3659-4944-9632-a7a5a8c0fb75","resolution":{"observed_at":"2026-05-16T20:45:27.578375Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2309.10348","last_updated":"2023-09-19T06:17:18Z","snapshot_observed_at":"2026-07-31T06:52:42.653031Z","submitted_at":"2023-09-19T06:17:18Z","title":"Language Guided Adversarial Purification","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-24T06:48:54.222879Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2309.10348"},"observation_digest":"sha256:32f1bb181e00cb5d8971e1a2f7dd1977b5302f3cd85187afc20ba33d9d7124d4","observation_id":"3eeffd4e-6a49-4f00-bfc4-678661658901","resolution":{"observed_at":"2026-05-24T06:49:02.031154Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-14T17:11:00.639293Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2310.03684"},"observation_digest":"sha256:c684b7077e2c855a5579ddb86d85a1d5729480802581be273215fc029d3f18f6","observation_id":"06abe48c-bd9b-4ad9-8e05-be2212aad3c2","resolution":{"observed_at":"2026-05-14T17:11:00.836163Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2503.02574","last_updated":"2026-05-18T17:54:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-04T12:55:07Z","title":"LLM-Safety Evaluations Lack Robustness","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-23T01:26:45.402983Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2503.02574"},"observation_digest":"sha256:c8768682664b2eec1f4c32109ed9c5161383c26ca579837b6f015d65cccfb7df","observation_id":"e36b9acd-94d9-4ba4-b31b-9215b7c91db8","resolution":{"observed_at":"2026-05-23T01:27:21.369647Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2505.19607","last_updated":"2026-05-02T04:35:15Z","snapshot_observed_at":"2026-07-06T21:30:23.899598Z","submitted_at":"2025-05-26T07:21:32Z","title":"Contrastive Residual Energy Test-time Adaptation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-19T12:44:47.083086Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2505.19607"},"observation_digest":"sha256:7b57a72585993030ec80a3f2c03d637da5478d297593d12fdc0c4b25e63499a4","observation_id":"d2accc3c-5ebb-447c-8d4e-1e1c4d0280c3","resolution":{"observed_at":"2026-05-19T12:47:17.886500Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2507.01955","last_updated":"2026-05-01T00:57:16Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-02T17:59:07Z","title":"How Well Does GPT-4o Understand Vision? Evaluating Multimodal Foundation Models on Standard Computer Vision Tasks","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-19T05:55:09.188048Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2507.01955"},"observation_digest":"sha256:e60ba601cc16f2056144f7f4783c577a799f04c93b73c922f89da64867eaf8ee","observation_id":"0d4ad231-3973-4dce-ad72-6f8e6e600c80","resolution":{"observed_at":"2026-05-19T05:57:08.095871Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-02T23:52:40.329981Z","title":"emnlp-main.844/","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-03T15:50:26.557526Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":844,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.329981Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:00e9c0b43e9e9b7493d1dbb31f07ecbba2acdebf224e7814bcaa8353b3527983","observation_id":"8c76d597-7b76-4d26-ae18-5bad78f5d46c","resolution":{"observed_at":"2026-08-02T23:52:40.329981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.06954","last_updated":"2026-04-08T11:15:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-08T11:15:45Z","title":"Compression as an Adversarial Amplifier Through Decision Space Reduction","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T18:12:45.350958Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.06954"},"observation_digest":"sha256:fc9fc063d5d4aee95656fbc31a49e60598bf5e224233704b6087fb8452707df1","observation_id":"9a42c8e5-74e7-4dac-979f-0efc016d0f15","resolution":{"observed_at":"2026-05-11T05:20:57.730572Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.08404","last_updated":"2026-04-20T18:01:41Z","snapshot_observed_at":"2026-07-06T22:57:31.046146Z","submitted_at":"2026-04-09T16:02:07Z","title":"Adversarial Label Invariant Graph Data Augmentations for Out-of-Distribution Generalization","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T17:00:51.046061Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.08404"},"observation_digest":"sha256:c9bcb2c97846b12d74fc7d9e03bfbd90de7631725c3ba2d642a89c077a21f0c2","observation_id":"6d1d6b2e-1a12-4eee-adba-82ce6c24af38","resolution":{"observed_at":"2026-05-11T07:41:01.640268Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.11590","last_updated":"2026-04-13T15:05:21Z","snapshot_observed_at":"2026-08-02T05:25:19.434546Z","submitted_at":"2026-04-13T15:05:21Z","title":"Learning Robustness at Test-Time from a Non-Robust Teacher","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T15:37:47.605547Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.11590"},"observation_digest":"sha256:358167eea77801dd16a18ce60acb2673b3525566ca41095f576ed6e7d2289d38","observation_id":"29d9badd-04f7-4783-96cd-7303ad32f154","resolution":{"observed_at":"2026-05-11T10:11:01.138711Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.16532","last_updated":"2026-04-16T18:34:57Z","snapshot_observed_at":"2026-07-06T23:03:48.168078Z","submitted_at":"2026-04-16T18:34:57Z","title":"Beyond Attack Success Rate: A Multi-Metric Evaluation of Adversarial Transferability in Medical Imaging Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-10T11:02:39.587803Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.16532"},"observation_digest":"sha256:54ea766daad7b5d16e2fe07b41aa2f6012672ab53011e48822a56a67fae35977","observation_id":"17b27464-2b81-456d-aaeb-8b87d73c75bf","resolution":{"observed_at":"2026-05-10T11:05:08.741111Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.24661","last_updated":"2026-05-08T02:03:01Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:24:40Z","title":"Agent-Centric Observation Adaptation for Robust Visual Control under Dynamic Perturbations","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T02:53:39.060764Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.24661"},"observation_digest":"sha256:b6b32f004a61370733c2248cbb98166b35b125dbccaa857d00439e08a09f94ff","observation_id":"36246950-974b-4a9c-b44b-eb8dcddef312","resolution":{"observed_at":"2026-05-11T22:21:49.775695Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2604.24661","last_updated":"2026-05-08T02:03:01Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:24:40Z","title":"Agent-Centric Observation Adaptation for Robust Visual Control under Dynamic Perturbations","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-11T00:48:43.992238Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2604.24661"},"observation_digest":"sha256:f320ca897042ea0421e3fd1dd4230908f849ee624eff2da7d2eef298b605f649","observation_id":"5bf49dc7-9ce0-4e08-9cc4-03dca570b9f2","resolution":{"observed_at":"2026-05-11T00:50:49.859450Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2605.02109","last_updated":"2026-05-04T00:08:05Z","snapshot_observed_at":"2026-07-06T23:15:11.601042Z","submitted_at":"2026-05-04T00:08:05Z","title":"Detecting Adversarial Data via Provable Adversarial Noise Amplification","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-09T17:08:02.038221Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2605.02109"},"observation_digest":"sha256:bc6d7e264fbd6a6d09d5ab576380e20d5cc3e358c8aecbbbd7818aed24b45e70","observation_id":"51c0e61f-8208-4b7d-b001-9ee71946dd63","resolution":{"observed_at":"2026-05-11T16:26:06.039115Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2605.09075","last_updated":"2026-07-29T05:15:07Z","snapshot_observed_at":"2026-08-02T14:37:10.672414Z","submitted_at":"2026-05-09T17:37:06Z","title":"Optimality of Sub-network Laplace Approximations: New Results and Methods","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-05-12T02:25:28.186490Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2605.09075"},"observation_digest":"sha256:075cb699434ff63a15440ed88220c15f9d675819ba2ef83d4529695eaea7005f","observation_id":"f42ba1c9-f7cf-41cf-8efa-1e4467afbd22","resolution":{"observed_at":"2026-05-12T07:37:16.357130Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.01746","last_updated":"2026-06-01T06:09:19Z","snapshot_observed_at":"2026-08-02T04:53:59.797464Z","submitted_at":"2026-06-01T06:09:19Z","title":"Sensitivity as a Double-Edged Sword: A Trade-off Between Discriminability and Adversarial Robustness","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T15:47:32.681589Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.01746"},"observation_digest":"sha256:2243a451a050da6095881a468f2fed8f29784c7b612fb7543a19021c1d408a6d","observation_id":"b4ff976b-192c-40c3-a385-a13ac790f130","resolution":{"observed_at":"2026-07-01T22:06:16.368482Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.02267","last_updated":"2026-06-01T13:53:39Z","snapshot_observed_at":"2026-08-03T00:00:48.739392Z","submitted_at":"2026-06-01T13:53:39Z","title":"A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T15:23:26.461740Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.02267"},"observation_digest":"sha256:ad4b787d330c8e668db91f7aebd1f142d00764ca59fc4d3642f5a380d7140716","observation_id":"8aec5943-683b-4844-a2a6-8034b9a48061","resolution":{"observed_at":"2026-07-01T22:26:17.777832Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.09881","last_updated":"2026-06-03T05:44:29Z","snapshot_observed_at":"2026-07-06T23:49:08.412079Z","submitted_at":"2026-06-03T05:44:29Z","title":"Toward Calibrated, Fair, and accurate Deepfake Detection","version":1},"reference_index":277,"source":"arxiv_source","source_observed_at":"2026-06-28T07:05:18.026601Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.09881"},"observation_digest":"sha256:81d6efedd3a5e5b5a2fd8a5d0aece8aaadce706054f696e3a0a611324cf9377b","observation_id":"8889156c-edfe-43ca-b355-3d4c593012ab","resolution":{"observed_at":"2026-06-28T07:11:45.356052Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-12T14:06:47.857777Z","title":"Robustbench: a standardized adversarial robustness benchmark,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2606.14427","last_updated":"2026-06-12T13:05:34Z","snapshot_observed_at":"2026-08-04T19:13:08.620726Z","submitted_at":"2026-06-12T13:05:34Z","title":"Breaking TinyML: Why Quantized Neural Networks Need Domain-Specific Security Analysis","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-12T14:06:47.857777Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.14427"},"observation_digest":"sha256:b575ea568214da8fea6d0bb126d155dc7c2541e5c50923196ed3e3fb5aff1757","observation_id":"b6f084ff-dac2-4ac7-8c52-5cc71819e445","resolution":{"observed_at":"2026-07-12T14:06:47.857777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":"2010.09670","doi":"10.48550/arxiv.2010.09670","metadata_source":"arxiv_reference","pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robustbench: a stan- dardized adversarial robustness benchmark","venue":null,"work_id":"8ae4b2b2-a2da-4900-9021-ad64ae1b860f","year":2010},"citing_paper":{"arxiv_id":"2606.29867","last_updated":"2026-06-29T07:03:45Z","snapshot_observed_at":"2026-07-07T00:03:45.783349Z","submitted_at":"2026-06-29T07:03:45Z","title":"RoAd-RL: A Unified Library and Benchmark for Robust Adversarial Reinforcement Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-30T07:01:04.860047Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2606.29867"},"observation_digest":"sha256:574c8b8847dedb0455d914771eb34a7f866e547e75b5e54a3b516365d7985757","observation_id":"30d7d64a-3568-430d-a612-fa09d189d1b0","resolution":{"observed_at":"2026-06-30T07:04:21.098034Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-01T12:50:14.253730Z","title":"Robustbench: a standardized adversarial robustness benchmark,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.19318","last_updated":"2026-07-21T17:38:52Z","snapshot_observed_at":"2026-08-01T12:50:12.697186Z","submitted_at":"2026-07-21T17:38:52Z","title":"SoK: Adversarial Robustness of the Variational Quantum Eigensolver via Red-Teaming","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T12:50:14.253730Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2607.19318"},"observation_digest":"sha256:d07cb30c89dfba809a4f07af4b1b7f2a3dcf03d870affefacfad156bfab8bde7","observation_id":"bd659a74-5ea1-4918-9be2-ce6a6da2b041","resolution":{"observed_at":"2026-08-01T12:50:14.253730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2010.09670/citation-record","integrity":"/paper/2010.09670/integrity","json":"/paper/2010.09670/citation-record.json","paper":"/paper/2010.09670"},"outbound":[],"paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 21 inbound Pith citation observations for arXiv:2010.09670."}