{"as_of":"2026-08-17T17:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8aa2c42d62d271938a4899c4a398ed8c0e62fabea8cc746f89f447372bade6aa","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":3,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":3,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T00:32:37.384146Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T15:09:54.606460Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2203.08725","last_updated":"2022-03-16T16:17:18Z","snapshot_observed_at":"2026-08-17T12:56:51.685590Z","submitted_at":"2022-03-16T16:17:18Z","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","version":1},"cited_work":{"arxiv_id":"2203.08725","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2203.08725","snapshot_observed_at":"2026-07-04T15:09:54.606460Z","title":null,"venue":null,"work_id":"fe9500d6-5de7-4654-961b-d47e0df74f0c","year":2022},"citing_paper":{"arxiv_id":"2606.26199","last_updated":"2026-06-26T02:47:28Z","snapshot_observed_at":"2026-08-13T00:33:15.607177Z","submitted_at":"2026-06-24T16:23:10Z","title":"MIRAGE: Protecting against Malicious Image Editing via False Moderation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-26T01:52:12.291420Z"},"links":{"cited_paper":"/paper/2203.08725","citing_paper":"/paper/2606.26199"},"observation_digest":"sha256:7ebccb256b2e74f4889f561982914274dd3a5c448a15bb606e71272d61a158ac","observation_id":"f8708d0a-15cf-44ef-9707-03619fb8cb01","resolution":{"observed_at":"2026-07-04T15:09:54.607851Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08725","last_updated":"2022-03-16T16:17:18Z","snapshot_observed_at":"2026-08-17T12:56:51.685590Z","submitted_at":"2022-03-16T16:17:18Z","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","version":1},"cited_work":{"arxiv_id":"2203.08725","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2203.08725","snapshot_observed_at":"2026-07-04T15:09:54.606460Z","title":null,"venue":null,"work_id":"fe9500d6-5de7-4654-961b-d47e0df74f0c","year":2022},"citing_paper":{"arxiv_id":"2606.26199","last_updated":"2026-06-26T02:47:28Z","snapshot_observed_at":"2026-08-13T00:33:15.607177Z","submitted_at":"2026-06-24T16:23:10Z","title":"MIRAGE: Protecting against Malicious Image Editing via False Moderation","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-29T04:46:56.552601Z"},"links":{"cited_paper":"/paper/2203.08725","citing_paper":"/paper/2606.26199"},"observation_digest":"sha256:4aea6f825f00ef47f04417b043b37ee00da7ac0a59306971928176008f2d0f74","observation_id":"19ee457c-c491-4dbb-9b86-98f4a18ecdd8","resolution":{"observed_at":"2026-06-29T19:13:53.512582Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08725","last_updated":"2022-03-16T16:17:18Z","snapshot_observed_at":"2026-08-17T12:56:51.685590Z","submitted_at":"2022-03-16T16:17:18Z","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.08725","snapshot_observed_at":"2026-08-16T00:32:37.384146Z","title":"arXiv preprint arXiv:2203.08725 (2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.11815","last_updated":"2026-08-12T08:58:22Z","snapshot_observed_at":"2026-08-16T03:16:32.162073Z","submitted_at":"2026-08-12T08:58:22Z","title":"Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-16T00:32:37.384146Z"},"links":{"cited_paper":"/paper/2203.08725","citing_paper":"/paper/2608.11815"},"observation_digest":"sha256:e03c63e8b918d6e99ab71799c88d32e89e3d13f7a32db2b09f848f9ba792ad95","observation_id":"55874820-0d63-451a-aa04-068faecfc6f4","resolution":{"observed_at":"2026-08-16T00:32:37.384146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2203.08725/citation-record","integrity":"/paper/2203.08725/integrity","json":"/paper/2203.08725/citation-record.json","paper":"/paper/2203.08725"},"outbound":[],"paper":{"arxiv_id":"2203.08725","last_updated":"2022-03-16T16:17:18Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-17T12:56:51.685590Z","submitted_at":"2022-03-16T16:17:18Z","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 3 inbound Pith citation observations for arXiv:2203.08725."}