{"as_of":"2026-08-13T01:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:58cbd677ef2eec30ac445e6518d14c5fb41c6afc6e07b0d0535eb01b1745cb37","coverage":[{"denominator":183,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T16:26:48.676389Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.13459/citation-record","integrity":"/paper/2411.13459/integrity","json":"/paper/2411.13459/citation-record.json","paper":"/paper/2411.13459"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.581985Z","title":"Chatgpt","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.581985Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:314c78e3427a48c5f88c850fa8345f5f9b70ad4e4c56a119437256f5db736a68","observation_id":"1d17ed6a-3366-4383-8ad2-b54beb828302","resolution":{"observed_at":"2026-08-12T16:26:47.581985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.596405Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.596405Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:ff29e7d348d303a9191ae3dd7cf2f00b6bec4a618d62ca68b6094d5868c51438","observation_id":"7f01b204-8f3b-4f9a-be43-d7e34c5f8bf2","resolution":{"observed_at":"2026-08-12T16:26:47.596405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.603644Z","title":"Copilot","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.603644Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:54162eeff036aa6755560e8231f13d9bd11486360feabbcb387bd1ecc43f3332","observation_id":"2fd8c185-aab8-471a-a86f-60564ed38176","resolution":{"observed_at":"2026-08-12T16:26:47.603644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.612376Z","title":"Autopilot and full self-driving (supervised) — tesla support","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.612376Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:1e4352ad0d1e999c04748c10997f0fe79d1ccb30aa113ec05829e863e72653f6","observation_id":"dad5238a-3b3f-4907-9961-e2e0635d5ab3","resolution":{"observed_at":"2026-08-12T16:26:47.612376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.619694Z","title":"Ocr software, data extraction tool - amazon textract - aws","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.619694Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:8ff838fa4c2e99770764b4428550695b51f2256502ded2a6cac6be19dd106912","observation_id":"ec675b08-ab3d-43c3-9bae-8a305dca1ab7","resolution":{"observed_at":"2026-08-12T16:26:47.619694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.625607Z","title":"Membership inference attacks against machine learning models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.625607Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:03c6f843e934443f0ccb70ee110e935f41b4c59c6cf2775d8705f6f6862225ec","observation_id":"33ffdc73-91a2-4068-a711-b6652d764da9","resolution":{"observed_at":"2026-08-12T16:26:47.625607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.632974Z","title":"Stealing machine learning models via prediction {APIs},","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.632974Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:6dde52d5199b742f73dddc959844230d83fa4013be8255a2e78bcf543a6c1abc","observation_id":"3623de56-1558-4e47-8628-c21f79548049","resolution":{"observed_at":"2026-08-12T16:26:47.632974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.643899Z","title":"Model recon- struction from model explanations,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.643899Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:a94ea45b1cd5f3aea820d873e0b3c2a82c60de775d0560860c09a31908852cd5","observation_id":"37fbd553-7ace-48c2-8922-aee8964aef4d","resolution":{"observed_at":"2026-08-12T16:26:47.643899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.653966Z","title":"A comprehensive survey on poisoning attacks and countermeasures in machine learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.653966Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:4d59243b017fcfba0c824efbe6e69b0e70a4f4b18a85d64d57cad0725279e25d","observation_id":"557c188d-75e8-4192-b5e0-51b8f1138795","resolution":{"observed_at":"2026-08-12T16:26:47.653966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.665966Z","title":"Dnn model theft through trojan side-channel on edge fpga accelerator,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.665966Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:c90ebbc2c46c07df795723851068a073d24e13e4d5e091efd53cb8eceb37aa3a","observation_id":"489d4c49-8f46-4ef2-b7b4-a870bbbaa300","resolution":{"observed_at":"2026-08-12T16:26:47.665966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.06751","last_updated":"2020-07-15T01:29:55Z","snapshot_observed_at":"2026-07-06T09:37:56.943473Z","submitted_at":"2020-07-14T00:59:28Z","title":"SESAME: Software defined Enclaves to Secure Inference Accelerators with Multi-tenant Execution","version":2},"cited_work":{"arxiv_id":"2007.06751","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.06751","snapshot_observed_at":"2026-08-12T16:26:50.174972Z","title":"SESAME: Software defined Enclaves to Secure Inference Accelerators with Multi-tenant Execution","venue":"cs.CR","work_id":"48a1ea75-c8c6-40aa-b54a-fa7de89df95f","year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.674655Z"},"links":{"cited_paper":"/paper/2007.06751","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:0fb96fca82504573f9c9b9063a1d258e5313ea63be35ddee75ffe2d8b73de5f3","observation_id":"204e6b4e-8c75-4c38-b125-6446f16503ae","resolution":{"observed_at":"2026-08-12T16:26:50.185176Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.686525Z","title":"Triton: Software-defined threat model for secure multi-tenant ml inference accelerators,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.686525Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:47ef17f7619f5f1baf214d9a61252ec94a29f1721a2169871661f79bc2de18f5","observation_id":"2c803071-fa07-4468-bb83-b674efee5103","resolution":{"observed_at":"2026-08-12T16:26:47.686525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.705494Z","title":"Prada: protecting against dnn model stealing attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.705494Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:9e7c310b10646cf8ccfc6639ce96782e7b4acc43c7929d4ccf58f1c5052d2187","observation_id":"0ca00561-6bfc-4401-80fb-f35653897198","resolution":{"observed_at":"2026-08-12T16:26:47.705494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.726397Z","title":"Machine un- learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.726397Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:7ef8122fbce778e3df49f0d0823db7e77066649ea01fd8c12546554996846539","observation_id":"06f9fe30-71ee-46ce-912f-366bea2cf12d","resolution":{"observed_at":"2026-08-12T16:26:47.726397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.736618Z","title":"Strong data augmenta- tion sanitizes poisoning and backdoor attacks without an accuracy tradeoff,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.736618Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:b5763832c436f604f193cec37f6314e89b325b8e15be1cd15e441f012dd9d88a","observation_id":"a748a3f0-90a9-45c4-a2b9-8bef5c150b0c","resolution":{"observed_at":"2026-08-12T16:26:47.736618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.744887Z","title":"Privacy side channels in machine learning systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.744887Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:973c88023f37a3b171cfaa25dcab0b8f5443fe6126a0fc26ba9cb8bb51757ddb","observation_id":"53e21c43-9069-44a0-b7df-cd9616216253","resolution":{"observed_at":"2026-08-12T16:26:47.744887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.760858Z","title":"The shift from models to compound ai systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.760858Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:7594c5a1ce8ec041ac3d855fc86dc4e18550b1c350fed0a91f8d74de2075a912","observation_id":"2c529706-eb42-4fc0-8b29-2c301376cffb","resolution":{"observed_at":"2026-08-12T16:26:47.760858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.767417Z","title":"Langchain framework","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.767417Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:b30c27c59f25a8c280be558ebd8652f76bc95cc3083808381722f6c17806c6d6","observation_id":"064ee7b0-6077-426c-a3ee-19a2d482a331","resolution":{"observed_at":"2026-08-12T16:26:47.767417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.781561Z","title":"Pytorch","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.781561Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:4ccd1d37c32cf44cb160c1a2867a0f6162d2a6c701a4c0efc1efe7e44f7a0060","observation_id":"972d7a8a-8d79-429b-a41d-f7de21be0416","resolution":{"observed_at":"2026-08-12T16:26:47.781561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.787779Z","title":"Cuda® deep neural network library","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.787779Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:fd774d10404bc76fb871e6ddb3cd3332ca43b0d337b647ccae8473cdfa079ec4","observation_id":"3f9d310a-be17-4adc-9b5b-a82a72a97516","resolution":{"observed_at":"2026-08-12T16:26:47.787779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.796102Z","title":"Rowhammer: A retrospective,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.796102Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:574726b7bbd6bac7476976b3906828177aeb15ed1396812b6f97c09a4db709fc","observation_id":"144b293c-d386-48a3-b195-c7f23c982fbe","resolution":{"observed_at":"2026-08-12T16:26:47.796102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.18362","last_updated":"2023-10-24T14:25:53Z","snapshot_observed_at":"2026-07-06T16:39:40.673808Z","submitted_at":"2023-10-24T14:25:53Z","title":"SoK: Memorization in General-Purpose Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.18362","snapshot_observed_at":"2026-08-12T16:26:47.809417Z","title":"Sok: Memorization in general-purpose large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.809417Z"},"links":{"cited_paper":"/paper/2310.18362","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:923060f3d5daaa9ac514e37f43c2cacfafdec67fb637b5060053c7951a2968f6","observation_id":"fe8ce346-3722-45a3-834f-7ae60d1345cf","resolution":{"observed_at":"2026-08-12T16:26:47.809417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.818771Z","title":"Sok: Security and privacy in machine learning,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.818771Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:8d7a997f3bba5a8c7932ea1a86762270062b96d8325a5541996dac839bc38775","observation_id":"0874ad74-5bd5-4f9c-b943-b7db0774799c","resolution":{"observed_at":"2026-08-12T16:26:47.818771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.825389Z","title":"Sok: Membership inference is harder than previously thought,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.825389Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:612e0a569e3fe84bf57ae7c119dde098d546cd8b96a33f61e8325c9505549d8c","observation_id":"e34c7f6d-42b0-408c-85b7-09a9c1033435","resolution":{"observed_at":"2026-08-12T16:26:47.825389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.834377Z","title":"Sok: Model inversion attack landscape: Taxonomy, challenges, and future roadmap,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.834377Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:1a0cca57858854049e306ba0facbc7c64330883ea95203b819a7baaec0c7f6fd","observation_id":"37c68c4c-db04-40d8-b1e6-8cdc8f5a250e","resolution":{"observed_at":"2026-08-12T16:26:47.834377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.844101Z","title":"Mitre attack framework","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.844101Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:b66e43630499e036f83b0e57074ca67d183f7397dda1945ff3b7b026ba6043b8","observation_id":"18ceb25b-385e-4548-8858-cd1694413110","resolution":{"observed_at":"2026-08-12T16:26:47.844101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.852528Z","title":"In-datacenter performance analysis of a tensor processing unit,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.852528Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:54ae16019d3a86b859db7c98ae37412b37a18739e5e4e2de74102119c7f36625","observation_id":"a2676bbf-b45d-4303-9a01-018f52ee0a50","resolution":{"observed_at":"2026-08-12T16:26:47.852528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.865812Z","title":"Github copilot","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.865812Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:24ee4f9c5d47bbe8e119846d61713defa580e40ee01189fe099c14644f642029","observation_id":"0d5effc0-21c5-464e-8b7b-b807ed32fd6d","resolution":{"observed_at":"2026-08-12T16:26:47.865812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.873335Z","title":"Amazon q developer","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.873335Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:bcbd1d6be2c2ff86550e2dc782acd3be3e8fcdbedceaaca644bffbbdeb5f17fb","observation_id":"ab437fca-2a7e-42c4-b9ed-6d5ff5885adb","resolution":{"observed_at":"2026-08-12T16:26:47.873335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.881012Z","title":"Mistral ai","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.881012Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:97339c31a8daa7f7722f3319661d5ab0013638ef30e3b98e969c759e1b81a119","observation_id":"ebafccad-0762-4dec-a490-eb53f707e950","resolution":{"observed_at":"2026-08-12T16:26:47.881012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.889436Z","title":"Clip-decoder: Zeroshot multilabel classifica- tion using multimodal clip aligned representations,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.889436Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:f146407de1935572066b5bd0246648843fdad0bdea40944e38ddcd8ee2a94bf0","observation_id":"e4e203ee-f4c4-4588-ab65-ad1fd0c3bdea","resolution":{"observed_at":"2026-08-12T16:26:47.889436Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.898630Z","title":"Mitre att&ck: Design and philosophy,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.898630Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:206be04a4a1149bac8eaa40ac72e049dce93db810c7132381de1c733337a5a0a","observation_id":"014c581d-3965-463e-8c94-74954065ef5c","resolution":{"observed_at":"2026-08-12T16:26:47.898630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.906894Z","title":"Ev- erywhere all at once: Co-location attacks on public cloud faas,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.906894Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:875a25b3ac29e9fb334813147e0c3154de445814117e213b83b394d5d855aabe","observation_id":"40188ab7-adae-4237-98cb-048d710e886b","resolution":{"observed_at":"2026-08-12T16:26:47.906894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.915125Z","title":"Theory and practice of finding eviction sets,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.915125Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:a1daecd2c5365ad3dceb46c8d084e37ea7dcf8db6fd295adb434d4b0ac5bd94c","observation_id":"1885305f-dbab-4dea-ad1e-20cca475a317","resolution":{"observed_at":"2026-08-12T16:26:47.915125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.925723Z","title":"Flush+ reload: A high resolution, low noise, l3 cache side-channel attack,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.925723Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:dba9289dcf1d1594c10f0588a5da0b0d1b53ec05491e4a73bfae60294f7db82a","observation_id":"5baa0dc4-8fbb-49d6-9411-86d725c74980","resolution":{"observed_at":"2026-08-12T16:26:47.925723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.933726Z","title":"Cache missing for fun and profit,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.933726Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:96a5d264b4e491b0e15cf733e508a19cee9895d577891dd329004e0f5ee754da","observation_id":"42911aa2-2358-4345-9d07-06e8d604d882","resolution":{"observed_at":"2026-08-12T16:26:47.933726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.941360Z","title":"Confusedpilot: Confused deputy risks in rag-based llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.941360Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:a5739cc44c96ca83b448f672427cbadc3f33ba56377b93ce23b34140cd344978","observation_id":"d5ce4d8b-fac2-49fa-93b0-34f971675527","resolution":{"observed_at":"2026-08-12T16:26:47.941360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.955842Z","title":"Cache telepathy: Lever- aging shared resource attacks to learn dnn architectures,","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.955842Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:f6b6b0dbad5f1a36ffef8d7486be5199f09680f345e321d64ecc38dcaa492b5b","observation_id":"24309597-0288-42a2-ba3c-62f72bca1b5d","resolution":{"observed_at":"2026-08-12T16:26:47.955842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.966062Z","title":"Hugging face","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.966062Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:5d1d432e8079efc68da0ab7f874c96f835734d77e6e5237a7a6728d6f0a48c7f","observation_id":"d2895b32-7b18-46dc-95a7-5ff23235f0f7","resolution":{"observed_at":"2026-08-12T16:26:47.966062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.975725Z","title":"Google tensorflow","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.975725Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:debc9236b17760d07ea0db8aa0d655366f9d4bd28da74a3e599f714477b397f1","observation_id":"32ac1193-7b6c-47b2-a125-e360f9d160c3","resolution":{"observed_at":"2026-08-12T16:26:47.975725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.986096Z","title":"Apache spark","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.986096Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:b58d59ba8e23a309b01425ec516ff1ee18662c583c56bb355ef76640727449e3","observation_id":"fb37b1fc-7cc8-4dd4-b43c-df96d2a920d0","resolution":{"observed_at":"2026-08-12T16:26:47.986096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:47.995572Z","title":"Apache hadoop","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:47.995572Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:5420e033be8ff80e0f30f2cada3276c6d3337a9617a8419756feb2d5b8646812","observation_id":"0356afa5-d899-42e0-9c49-e0015a0aeadf","resolution":{"observed_at":"2026-08-12T16:26:47.995572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.013314Z","title":"Snowflake","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.013314Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:364668aaf1098ed17710e505cacaceb634c40a87bf978497fe72cd4a1cd386bd","observation_id":"e588a361-37a6-492e-a618-2d27f79f663f","resolution":{"observed_at":"2026-08-12T16:26:48.013314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.023455Z","title":"Bentoml","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.023455Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:4f95144bd19039061b61274fdd80b54ae19e60049ec9c3c6188ec290d9e93661","observation_id":"54555caf-c53d-4313-8758-7a3e6df3b886","resolution":{"observed_at":"2026-08-12T16:26:48.023455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.032674Z","title":"Kubernetes","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.032674Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:1f4957f5f79f11ea33f95f9b8839895820d53df2b8546359dcf9f7bf009a52ae","observation_id":"35a17ec1-9088-49a0-9e98-0a7a4e1ab88e","resolution":{"observed_at":"2026-08-12T16:26:48.032674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.046154Z","title":"Pyyaml package","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.046154Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:468b2219c4913fc5dc5a0213c90ffe7326f673f152f1bc2b9fd5ee7a464cc655","observation_id":"3287ac1d-c9d4-47db-9723-13a9a293099c","resolution":{"observed_at":"2026-08-12T16:26:48.046154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.061961Z","title":"Cve-2023-31035","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.061961Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:bed71582dbea8be0bf2b5e8fb7d13c2390fa887b4775a60e8cc897d764c18bc7","observation_id":"eaae5611-df31-4694-8a1c-cb10e3df3a4a","resolution":{"observed_at":"2026-08-12T16:26:48.061961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.070697Z","title":"Cve-2024-3095","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.070697Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:e4316cc2569f16c020510cea45253d6496897c7a84d71c1bc89735919e1af35e","observation_id":"05c08627-4426-42c2-bcae-3c2d86394343","resolution":{"observed_at":"2026-08-12T16:26:48.070697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.079021Z","title":"Formal verification methods,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.079021Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:bb3e891cc2f29139de5508a2fdf626d9929656a3fc8a4713107cce9a4aa7be0d","observation_id":"8f73ffd2-41be-4715-9135-217dcd657ac6","resolution":{"observed_at":"2026-08-12T16:26:48.079021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.088486Z","title":"Hfl: Hybrid fuzzing on the linux kernel.,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.088486Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:0e520b9c941a28af910d7eebe17510277637b55eb3071fda73d5631d718b14fe","observation_id":"aaff326a-2956-43c9-86c0-f3811c7b3d37","resolution":{"observed_at":"2026-08-12T16:26:48.088486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.104839Z","title":"Sok: A defense- oriented evaluation of software supply chain security,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.104839Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:7b3011fbc1a1f35343ef8b139da4372d17efd7ea27bae1cca0561b5c247558c1","observation_id":"108975ce-905a-432a-b103-abebdc116bed","resolution":{"observed_at":"2026-08-12T16:26:48.104839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.112052Z","title":"Sok: Taxonomy of attacks on open-source software supply chains,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.112052Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:9614ec5ea2c23335314050d4fb812b1161bd52ed8dd032c3965becedf8e7fd79","observation_id":"25808180-b641-4818-bf05-fe54c4d28a44","resolution":{"observed_at":"2026-08-12T16:26:48.112052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.124818Z","title":"Practical automated detection of ma- licious npm packages,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.124818Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:da47197c3efb8cccef227de76f5790c0f3e806a8fd9f6ce32783ac167a53bf93","observation_id":"4bbe68ab-0217-45a0-853d-70ec7a482aa2","resolution":{"observed_at":"2026-08-12T16:26:48.124818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.137544Z","title":"Immutability and encapsulation for sound oo information flow control,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.137544Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:409c414267cf27766ef0ee7061abbec4bf4411ba8ff6600a981aeca6a978fe5a","observation_id":"96743c1a-c479-4ad3-a59f-5e6260240558","resolution":{"observed_at":"2026-08-12T16:26:48.137544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.145655Z","title":"Raksha: a flexible information flow architecture for software security,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.145655Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:ff81bbe21a009430a5b4dcb4f1feaa5056f3d5b07f55061b6e4f850f1c4e4137","observation_id":"4d9060f9-dd1e-48f5-b94e-b86921103dbc","resolution":{"observed_at":"2026-08-12T16:26:48.145655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.153034Z","title":"Mod- ular information flow through ownership,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.153034Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:a2be2f1bdae6ad0be484a16e6bb00dd7a3b3073cd82dbbdec2c63f9fb3c73e8e","observation_id":"ce1b3b7d-370c-4d1e-8df3-dd89c5b0159a","resolution":{"observed_at":"2026-08-12T16:26:48.153034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.162293Z","title":"Rethinking privacy in machine learning pipelines from an information flow control perspective,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.162293Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:860d895aed92552eac565ed5adf0229604b3092f50bc8a6cfbad4b3fad9ca51f","observation_id":"3f44c7c0-ecc2-4cd4-a42f-100b5103c820","resolution":{"observed_at":"2026-08-12T16:26:48.162293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.180114Z","title":"Rust ai engine","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.180114Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:6c3d08debb84422bd4ee5726f6becf7da4effb178cc1d9a6e2f0e79f44bd9434","observation_id":"9dc92f20-9424-4a27-a16d-0b2a8d49beca","resolution":{"observed_at":"2026-08-12T16:26:48.180114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.18431","last_updated":"2024-09-06T18:42:43Z","snapshot_observed_at":"2026-08-12T23:14:29.916038Z","submitted_at":"2024-07-25T23:46:27Z","title":"Rusty Linux: Advances in Rust for Linux Kernel Development","version":2},"cited_work":{"arxiv_id":"2407.18431","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.18431","snapshot_observed_at":"2026-08-12T16:26:50.091306Z","title":"Rusty Linux: Advances in Rust for Linux Kernel Development","venue":"cs.SE","work_id":"33813e79-bf7f-4862-a6d8-1ed2efe495ac","year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.195016Z"},"links":{"cited_paper":"/paper/2407.18431","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:9e09b6d34b3524611080cd1d317413eb3f20ac717dac05fbcff986401c3fe742","observation_id":"550f4880-d673-4bb2-a2b7-bc3dd0588a72","resolution":{"observed_at":"2026-08-12T16:26:50.101572Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.210597Z","title":"Erim: Secure, efficient in-process isolation with memory protection keys,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.210597Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:83568f722f27caf06e1664e0081a54f26342dd57608bf45ea135f4ba0c042865","observation_id":"399c3b4f-0cb8-4282-ba98-7ffcbdc5185f","resolution":{"observed_at":"2026-08-12T16:26:48.210597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.221388Z","title":"Securecells: A secure compartmentalized architecture,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.221388Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:3d3ddb11e11976fb7e8ddf69b96e35928df9c8b608da706182ac49a306a72b8e","observation_id":"b2b57b35-95be-4e5b-ab0b-2cafff4f3ab9","resolution":{"observed_at":"2026-08-12T16:26:48.221388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.228685Z","title":"Retrofitting fine grain isola- tion in the firefox renderer,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.228685Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:aa0cfcbb80d53f91a0a6513fbbfec43318e253b184327bc1e3b9f10c2d0f95b4","observation_id":"d87f32df-493c-4e33-a896-fd520c9027b9","resolution":{"observed_at":"2026-08-12T16:26:48.228685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.234534Z","title":"Going beyond the limits of sfi: Flexible and secure hardware-assisted in-process isolation with hfi,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.234534Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:56145f3ba2c1b2327b1ded4c365b06408eb17c683b793af2dd5702c86bc77ec6","observation_id":"190ae8d1-6aaf-46cd-8bd7-a596ccddf4f8","resolution":{"observed_at":"2026-08-12T16:26:48.234534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.244590Z","title":"Cheri: A hybrid capability-system architecture for scalable software compart- mentalization,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.244590Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:061169d4c6de079a88d030d3070bbef5b2c74f17115c408315e1c5472d0c395d","observation_id":"721c84b2-d2fd-4705-8a9f-547fdc9def69","resolution":{"observed_at":"2026-08-12T16:26:48.244590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.255468Z","title":"Morpheus: A vulnerability-tolerant secure architecture based on ensembles of moving target defenses with churn,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.255468Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:edd4b9f0a60ba4e79784b97ffbb7febc1a16c5cfe6427b626a8b5b165b46f00e","observation_id":"b6683080-c406-4bc5-bdde-41b386c686f3","resolution":{"observed_at":"2026-08-12T16:26:48.255468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.266704Z","title":"Boosting microservice resilience: An evaluation of istio’s impact on kubernetes clusters under chaos,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.266704Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:0a4bde7bc2eda5d51c7752b07731ad18be664e02fafa6589a866df5f2bd3ca11","observation_id":"8476dd99-55c6-43cf-8774-b9ebdf5b0f71","resolution":{"observed_at":"2026-08-12T16:26:48.266704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.273959Z","title":"Rethinking system audit architectures for high event coverage and synchronous log availability,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.273959Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:1ade1dbca77726d827c44abfbd32b1394919c05d4a3e54fcb834c799912a89f2","observation_id":"ceaf804e-5ea7-41c5-b86e-53977a75c8fe","resolution":{"observed_at":"2026-08-12T16:26:48.273959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.289561Z","title":"Nvidia bluefield dpu","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.289561Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:6f440fbae9c63ff130c46730b7e2a6317e8caa1f39ea0973fcdb8d7f77bec6c8","observation_id":"58efcf24-36ff-4e47-9516-d195d20c03fa","resolution":{"observed_at":"2026-08-12T16:26:48.289561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.304275Z","title":"Practical cold boot attack on iot device-case study on raspberry pi,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.304275Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:8df3c0e94f1b473689b781c64b067171daf3738ded9ab55e0a98b69f2a130664","observation_id":"f5f881b3-bd28-41a3-ab63-c7f2553d0516","resolution":{"observed_at":"2026-08-12T16:26:48.304275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.314754Z","title":"Warm-boot attack on modern drams,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.314754Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:56e3ccababba3be8ad3efc2851cf4236997ffb75e74ddaf7571803a2d537bd4a","observation_id":"263d8b64-888d-43a9-8239-0266fc06f838","resolution":{"observed_at":"2026-08-12T16:26:48.314754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.324764Z","title":"Drama: Exploiting dram addressing for cross-cpu attacks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.324764Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:dbc010d47052f44dd5c7ee82d4d8812e9ca45668c2b164944805a61bf5cf09fb","observation_id":"c9c62902-f948-41f2-a033-660fd34ce7fa","resolution":{"observed_at":"2026-08-12T16:26:48.324764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.336675Z","title":"Dramaqueen: Revisiting side channels in dram,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.336675Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:0310c4622afade9b6424982e9f6f8bd26fcb8a12cc8a7c40d1dfc9245488bb10","observation_id":"7f30e256-67bb-4793-8b14-eb6d76ae4b5e","resolution":{"observed_at":"2026-08-12T16:26:48.336675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.346882Z","title":"Nvleak:off-chip side-channel attacks via non-volatile mem- ory systems,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.346882Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:965713048fa1f80abf33ef402c06a1cee6a3487b63d5f7054864065553333616","observation_id":"211e7a6c-cbdc-4b01-a0b4-28c5541d576b","resolution":{"observed_at":"2026-08-12T16:26:48.346882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.357176Z","title":"Deephammer: Depleting the intelligence of deep neural networks through targeted chain of bit flips,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.357176Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:f9d7b4ca128911f68ac99765c15ee7ab9d847d720698a77d42c6a84bc8600b84","observation_id":"d157c122-07c4-4ec7-a926-7567ffbecda3","resolution":{"observed_at":"2026-08-12T16:26:48.357176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.367051Z","title":"Yes, one-bit-flip matters! universal dnn model inference depletion with runtime code fault injection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.367051Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:be7f53369994d76d81f7fd47a25d986eee9034a73febda175c4a44fd5dfb5fee","observation_id":"5ae70405-4990-4f42-95e3-8ff737f8dab4","resolution":{"observed_at":"2026-08-12T16:26:48.367051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.376861Z","title":"Bit-flip attack: Crushing neural net- work with progressive bit search,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.376861Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:509a21b0557507ae2117ff1ad57152a6326157a68ba99973f70f0f0b8974bc2a","observation_id":"6963e044-0169-4e9f-9ee9-60817fa4a450","resolution":{"observed_at":"2026-08-12T16:26:48.376861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.387698Z","title":"Rambleed: Reading bits in memory without accessing them,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.387698Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:afeb82779eae21ed7a83f9c3db801d0bcc12748698b37eeda344fba18e2b7081","observation_id":"f8a59798-f740-44a7-8bbb-6a9e4f71bc19","resolution":{"observed_at":"2026-08-12T16:26:48.387698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.394925Z","title":"Deepsteal: Advanced model extractions leveraging efficient weight stealing in memories,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.394925Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:251a8b78c833bc06b7b2da6852886e09e93c07ad96578acddb547679c366717d","observation_id":"da900df5-04ce-4da4-a5a1-d492bb3524e5","resolution":{"observed_at":"2026-08-12T16:26:48.394925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.407936Z","title":"Side- channel attack analysis on in-memory computing architectures,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.407936Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:44ee9d1ebc3df5b27afdc8f8542e68468c00b53145a4c3d6a29164910f73226d","observation_id":"fb71c962-833f-4c25-8d26-99ef05fc38f0","resolution":{"observed_at":"2026-08-12T16:26:48.407936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.421874Z","title":"Powergan: A machine learning approach for power side-channel attack on compute-in-memory accelerators,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.421874Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:2bd6c816cca9936f6b69b86ac9983f81a249e4ed1c5e4b3f0e4fd027ae320412","observation_id":"a2b2078d-11ca-4c38-9a96-f01240882ae7","resolution":{"observed_at":"2026-08-12T16:26:48.421874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11284","last_updated":"2025-06-12T20:38:42Z","snapshot_observed_at":"2026-08-13T00:28:20.033119Z","submitted_at":"2024-04-17T11:48:14Z","title":"Revisiting Main Memory-Based Covert and Side Channel Attacks in the Context of Processing-in-Memory","version":4},"cited_work":{"arxiv_id":"2404.11284","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.11284","snapshot_observed_at":"2026-08-12T16:26:50.045059Z","title":"Revisiting Main Memory-Based Covert and Side Channel Attacks in the Context of Processing-in-Memory","venue":"cs.CR","work_id":"1d9e59b2-bec1-4f40-9acf-8018c591f33e","year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.431795Z"},"links":{"cited_paper":"/paper/2404.11284","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:dca2d477aea4f325436efddc5ee2b40cd9b7d43b0e29c85c0dcb1bb5dbf19138","observation_id":"61710016-9e82-44dd-87de-56999f9268f7","resolution":{"observed_at":"2026-08-12T16:26:50.057257Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.463811Z","title":"Understanding error propagation in deep learning neural network (dnn) accelerators and applications,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.463811Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:f632189a7f37a3fa26441208ec65af0a5edff083a52edfa627a07abaa2fed3b7","observation_id":"e51fb4c3-a8e1-4683-be93-36b6ece115db","resolution":{"observed_at":"2026-08-12T16:26:48.463811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.474049Z","title":"Fault injection for tensorflow applications,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.474049Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:3763acbdc7d782b2fda9da97e41ae555e249bad9025fcd1bd82d1cf281a224f7","observation_id":"7d534396-8608-40df-be87-d2cee68c26e6","resolution":{"observed_at":"2026-08-12T16:26:48.474049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.482747Z","title":"pcileech","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.482747Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:c79c03eae2c70f3438d9a9bb3272cf2fe3ab68f096cd5ae42a789b7568b00390","observation_id":"bbf05e1c-e2b6-41a5-9dbe-3c91e0af95fb","resolution":{"observed_at":"2026-08-12T16:26:48.482747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.490863Z","title":"Thunderclap: Exploring vulnerabilities in operating system iommu protection via dma from untrustworthy peripherals,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.490863Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:321601ced5e8dd97b85100b440343aed7e2d0b3752cc29831621c93e58f6828a","observation_id":"5d129d9f-d4e8-46c8-99fb-2388081e48db","resolution":{"observed_at":"2026-08-12T16:26:48.490863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.09739","last_updated":"2020-03-21T19:58:14Z","snapshot_observed_at":"2026-07-06T09:06:25.585949Z","submitted_at":"2020-03-21T19:58:14Z","title":"New Security Challenges on Machine Learning Inference Engine: Chip Cloning and Model Reverse Engineering","version":1},"cited_work":{"arxiv_id":"2003.09739","doi":null,"metadata_source":"pith","pith_arxiv_id":"2003.09739","snapshot_observed_at":"2026-08-12T16:26:49.988481Z","title":"New Security Challenges on Machine Learning Inference Engine: Chip Cloning and Model Reverse Engineering","venue":"eess.SP","work_id":"85329a91-a04e-4da9-813a-4b7d38408c5b","year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.505660Z"},"links":{"cited_paper":"/paper/2003.09739","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:bb28f890d043782f05c0d5b56afaf398eabfaf7782b64aada34b3e4c3acd6dc6","observation_id":"8a99724b-4896-4c5c-9be6-de8f01817929","resolution":{"observed_at":"2026-08-12T16:26:49.998463Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.519842Z","title":"Reverse engineering convo- lutional neural networks through side-channel information leaks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.519842Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:33d3cc564bd2821a72b0e779279cbcd84181e176aff68582db9a4482a9d21563","observation_id":"f0672432-354f-4c0a-91ba-ee28e83f3817","resolution":{"observed_at":"2026-08-12T16:26:48.519842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.07157","last_updated":"2021-10-14T05:08:39Z","snapshot_observed_at":"2026-08-04T03:54:47.762533Z","submitted_at":"2021-10-14T05:08:39Z","title":"Bandwidth Utilization Side-Channel on ML Inference Accelerators","version":1},"cited_work":{"arxiv_id":"2110.07157","doi":null,"metadata_source":"pith","pith_arxiv_id":"2110.07157","snapshot_observed_at":"2026-08-12T16:26:49.945793Z","title":"Bandwidth Utilization Side-Channel on ML Inference Accelerators","venue":"cs.CR","work_id":"8399aceb-d15b-46bd-98e8-8d4c08b25aa5","year":2021},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.527391Z"},"links":{"cited_paper":"/paper/2110.07157","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:262551303ab1cff64bb06a73ec8726abd0ea32bb07897a3a67500c2e3166ac62","observation_id":"53bcbfe3-0b18-40b4-8699-c7a40666cf95","resolution":{"observed_at":"2026-08-12T16:26:49.955457Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.536725Z","title":"Chen, “Hmtt.” https://asg.ict.ac.cn/hmtt/, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.536725Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:a5a7b4d2cb7bc8b960f4c3098f6ccea9ec35016cc44abe6b0efb4d224e95bb94","observation_id":"c3ca3481-d1d6-4c0e-9e25-2fe542debe1d","resolution":{"observed_at":"2026-08-12T16:26:48.536725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.548406Z","title":"Hermes attack: Steal dnn models with lossless inference accuracy,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.548406Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:ed7d6bedad062b3e33d5d7d57037e2f6382503e81a45f891b12e2e05339a0a55","observation_id":"3868178d-67b2-431a-a1b9-ccd362399909","resolution":{"observed_at":"2026-08-12T16:26:48.548406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.557915Z","title":"Deepsniffer: A dnn model extraction framework based on learning architectural hints,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.557915Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:e64ec6c00ea2639d05d2aea07e7054c5a2bd68a16e762147c2b2d54d3481b920","observation_id":"a7d94e91-e12f-42ad-9d1d-303fe9e97597","resolution":{"observed_at":"2026-08-12T16:26:48.557915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.565738Z","title":"Rendered insecure: Gpu side channel attacks are practical,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.565738Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:e048f52c4c0c736d342aa9c57bb5598a1df03643815c2094d7b69fdd38cdabab","observation_id":"5abedf82-125e-468f-a382-743827a267ee","resolution":{"observed_at":"2026-08-12T16:26:48.565738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.574870Z","title":"Leaky dnn: Stealing deep-learning model secret with gpu context-switching side-channel,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.574870Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:1a23d56590638d5b7d8fc8388b728218916d7350e7df87b63aa304e4939f886a","observation_id":"ed03dd3c-df11-452b-b4d0-a6b0dfda7548","resolution":{"observed_at":"2026-08-12T16:26:48.574870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.586349Z","title":"Huffduff: Stealing pruned dnns from sparse accelerators,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.586349Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:19083afc96649162cb6bda3e297441771584e29432f8f0137f2bf9cf06935ca6","observation_id":"68b595f5-31e1-405a-99cb-af3984fb2cbc","resolution":{"observed_at":"2026-08-12T16:26:48.586349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.600677Z","title":"Sparsity turns adver- sarial: Energy and latency attacks on deep neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.600677Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:d74e0014ae0a8a90b2ee2d93753e1b80f7eab31c0560fc83acadcfe9b7775bba","observation_id":"3978d5cf-f87e-45a7-a3c4-6528d4d6e55c","resolution":{"observed_at":"2026-08-12T16:26:48.600677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.03877","last_updated":"2024-05-02T05:35:36Z","snapshot_observed_at":"2026-08-13T00:37:19.686489Z","submitted_at":"2024-04-05T03:57:38Z","title":"Beyond the Bridge: Contention-Based Covert and Side Channel Attacks on Multi-GPU Interconnect","version":2},"cited_work":{"arxiv_id":"2404.03877","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.03877","snapshot_observed_at":"2026-08-12T16:26:49.887524Z","title":"Beyond the Bridge: Contention-Based Covert and Side Channel Attacks on Multi-GPU Interconnect","venue":"cs.CR","work_id":"657e0d21-4e67-4684-bb1d-93d2d4587f52","year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.617488Z"},"links":{"cited_paper":"/paper/2404.03877","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:a9d2ac5686732ee05105cf370de44e9213e286a1496aee67a99e522d27b15548","observation_id":"c244e5e0-6157-400c-83e3-fbfdb18d94d2","resolution":{"observed_at":"2026-08-12T16:26:49.898729Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.630679Z","title":"Invisible probe: Timing attacks with pcie congestion side-channel,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.630679Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:36cdc3873fda82d8fb7cd1a9998108e8b2a98b477dee1c3ad3f2ee2e92ea32d8","observation_id":"0a97080f-1d13-4473-96a5-7a6d4b080585","resolution":{"observed_at":"2026-08-12T16:26:48.630679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.11720","last_updated":"2019-07-08T07:31:01Z","snapshot_observed_at":"2026-08-09T01:24:01.635034Z","submitted_at":"2018-12-31T08:19:26Z","title":"Stealing Neural Networks via Timing Side Channels","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.11720","snapshot_observed_at":"2026-08-12T16:26:48.647912Z","title":"Steal- ing neural networks via timing side channels,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.647912Z"},"links":{"cited_paper":"/paper/1812.11720","citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:4e95d2f280993a885c970244c6e9421423feb1bd1585b207e9fb1d0130886d53","observation_id":"9f0f7c9c-80b9-4384-90c8-fbd16c6373b0","resolution":{"observed_at":"2026-08-12T16:26:48.647912Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.658083Z","title":"Layer sequence extraction of optimized dnns using side-channel information leaks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.658083Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:4caedcb824de967efd439d57e49fe8a97c0a61f9c966fe5371d368581a89e5b9","observation_id":"1e6eccc7-381f-4f0d-b662-98717b445e92","resolution":{"observed_at":"2026-08-12T16:26:48.658083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T16:26:48.676389Z","title":"Practical attacks on deep neural networks by memory trojaning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-12T16:26:48.676389Z"},"links":{"citing_paper":"/paper/2411.13459"},"observation_digest":"sha256:ea19210b9f3cbf48af2df53741ce1a8a7ecbfce2718dce1e9e2891d8ac54db83","observation_id":"970cae3d-372a-4c83-933b-495f7cf64523","resolution":{"observed_at":"2026-08-12T16:26:48.676389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T16:20:55.989449Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":94,"verified_exact":6,"verified_fuzzy":0},"total_outbound_references":183},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 100 of 183 outbound references and 0 inbound Pith citation observations for arXiv:2411.13459."}