{"as_of":"2026-08-13T10:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ef11e2c166e8417ac590008b2d3be345abc250e2a3584a78e6acfaebc9fc4171","coverage":[{"denominator":67,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":67,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T15:57:06.421719Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-23T03:31:58.944729Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T03:32:28.013690Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"cited_work":{"arxiv_id":"2411.15222","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.15222","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Rethinking the intermediate features in adversarial attacks: Misleading robotic models via adver- sarial distillation","venue":null,"work_id":"6793fc94-cf6c-47a7-9358-fcb4eb08dc4b","year":2024},"citing_paper":{"arxiv_id":"2502.03698","last_updated":"2026-04-24T15:18:05Z","snapshot_observed_at":"2026-07-06T20:31:56.011023Z","submitted_at":"2025-02-06T01:17:39Z","title":"How Vulnerable Is My Learned Policy? Universal Adversarial Perturbation Attacks On Modern Behavior Cloning Policies","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-23T03:31:58.944729Z"},"links":{"cited_paper":"/paper/2411.15222","citing_paper":"/paper/2502.03698"},"observation_digest":"sha256:5c328e68b66ff5b198e4173e6231c80511aa722a4c2a14ad7a58bde9d23d1a09","observation_id":"d852392c-1a71-4f30-a9ee-d6b6f11802a5","resolution":{"observed_at":"2026-05-23T03:32:28.016139Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2411.15222/citation-record","integrity":"/paper/2411.15222/integrity","json":"/paper/2411.15222/citation-record.json","paper":"/paper/2411.15222"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.555787Z","title":"Engelmore and A","venue":null,"work_id":"911137cb-3fc6-4a68-81a9-c715241683f1","year":1986},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.795434Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:1afff90ec746619b5be11ef8345c67d6d0a34bd58899fd7466c46f9e6b3fbfc8","observation_id":"efced63b-3513-48e6-bdc4-2a45c7ab29a1","resolution":{"observed_at":"2026-08-12T15:57:09.579599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.517816Z","title":"Communication, Simulation, and Intelligent Agents: Implications of Personal Intelligent Machines for Medical Education,","venue":null,"work_id":"5ca56e97-99ad-449c-92c4-9cda278da8a6","year":1983},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.804054Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:863d4bab48ed8de5c912cd433c961ea5a6597d1d68126720405de126cce27ffa","observation_id":"7dce21de-c185-4656-853c-30e9b832d727","resolution":{"observed_at":"2026-08-12T15:57:09.530599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.467485Z","title":"Classification Problem Solving,","venue":null,"work_id":"0b9d02a0-8db3-4302-987f-17edb5f7f2fe","year":1984},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.813289Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:942bee4c96a0eb6ca36d4818b83111abe801b45a5cd588c632b541858059eadd","observation_id":"66043b8f-2a1d-4a40-b8e9-8c4f34e1f7fb","resolution":{"observed_at":"2026-08-12T15:57:09.480126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.434335Z","title":"New ways to make microcircuits smaller,","venue":null,"work_id":"c30240e4-ec6c-4ecb-a44c-9aedfd7f9321","year":1980},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.822100Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:7dd29ee336d286bdb334686fea2f3a91e29eba8384591e8e8a87e642ce9b528d","observation_id":"96cd7a88-bb5e-4417-b0cb-349f4478e8ff","resolution":{"observed_at":"2026-08-12T15:57:09.442623Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.367457Z","title":"New Ways to Make Microcircuits Smaller—Duplicate Entry,","venue":null,"work_id":"cc4c8e8e-ce5c-43d6-9e96-30659e561761","year":1980},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.835042Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:10b2bf2704c2d1563fdc1e06e42715600c398f97bac468d925713152a1e744c6","observation_id":"bca0ff56-dc40-40d8-8e75-44f0dfa49d54","resolution":{"observed_at":"2026-08-12T15:57:09.412807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.298547Z","title":"Strategic explanations for a diagnostic consultation system,","venue":null,"work_id":"301ea123-655e-46fe-958f-07986247d59d","year":1984},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.849932Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:42ae9c427ceac4b2dd9342a17505b16615256a70b7bc0ea9ac0a92dcd0cf4d74","observation_id":"3edc5f06-09e6-49b0-b901-acc0707ed522","resolution":{"observed_at":"2026-08-12T15:57:09.305769Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.254536Z","title":"Strategic Explanations in Consultation—Duplicate,","venue":null,"work_id":"f47408b6-67e2-4ced-8c92-7a61597aa48b","year":1983},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.865899Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:c44fa8e23cec78ec7778870f930d7e8d84f46549ba805f412bed744c3db65b84","observation_id":"41dce7af-5736-400c-887f-d11f549da76c","resolution":{"observed_at":"2026-08-12T15:57:09.269201Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.214608Z","title":"Poligon: A System for Parallel Problem Solving,","venue":null,"work_id":"58c0b775-a99a-4edc-919d-d9df2c589580","year":1986},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.877324Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:42837af6f0c940de01c8c191aaef9699c6187833be25c8a1ead8eb54bb54189c","observation_id":"cfc70159-49a9-4419-a889-ef3b4776040b","resolution":{"observed_at":"2026-08-12T15:57:09.219731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.176701Z","title":"Transfer of Rule-Based Expertise through a Tutorial Dialogue,","venue":null,"work_id":"ca0afa69-2d26-4a43-b162-93eaefe7fcf1","year":1979},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.891321Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:ea46af5fc4749e1a81b6fdc34f0a88855f93be8b9b1b2eb39bffdf392e5bef56","observation_id":"634eb83f-f011-45e8-990a-c330206b18df","resolution":{"observed_at":"2026-08-12T15:57:09.192865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.147279Z","title":"The Engineering of Qualitative Models,","venue":null,"work_id":"8db6c5d5-3106-4428-8c6d-432cdf2a20c4","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.897614Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:9a4a524f61603bcdb305a323c2e078ce9af067cf192e0063f8c2fa693f720b3f","observation_id":"ab7904a7-aa33-4297-8cf3-641304e5d900","resolution":{"observed_at":"2026-08-12T15:57:09.156680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:05.908207Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.908207Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:d5296483ccb24a8218a69e2ddf98f3b6e550542acac02dcd7bedcfacb11f999a","observation_id":"dbed94ce-5f12-4c6c-8abd-017ed3c4736b","resolution":{"observed_at":"2026-08-12T15:57:05.908207Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.070089Z","title":"Pluto: The ’other’ red planet,","venue":null,"work_id":"f49bb7fd-74f6-4aa7-ad92-e403f78b9f03","year":2015},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.914758Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:36818849b1c3f03fc84720c1ad2bf4d937bb6cff02804ea110f25161e05fe0f0","observation_id":"f311b8ee-5b7d-46cf-8bfa-e65e9537d6af","resolution":{"observed_at":"2026-08-12T15:57:09.087116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:09.035571Z","title":"Vima: General robot manipula- tion with multimodal prompts,","venue":null,"work_id":"33893c0b-5f3a-42de-a6ce-b771464abda0","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.918870Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:e136ba23a39f1d7c89e765b362e1613cb209697bff97af5cc93f2b74ca1a9677","observation_id":"d8254027-4756-4818-a143-77434af16993","resolution":{"observed_at":"2026-08-12T15:57:09.054153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19424","last_updated":"2024-05-29T18:06:25Z","snapshot_observed_at":"2026-08-12T23:54:51.708513Z","submitted_at":"2024-05-29T18:06:25Z","title":"Diffusion Policy Attacker: Crafting Adversarial Attacks for Diffusion-based Policies","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19424","snapshot_observed_at":"2026-08-12T15:57:05.927677Z","title":"Diffusion policy attacker: Craft- ing adversarial attacks for diffusion-based policies,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.927677Z"},"links":{"cited_paper":"/paper/2405.19424","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:eb7b32afaab1f932fa3c091d5a7bf7b5f3f066f5a1a6cd5d10d4874f5686122f","observation_id":"a151e780-f3fe-40f3-9dc9-9f4dc04bc86a","resolution":{"observed_at":"2026-08-12T15:57:05.927677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.04137","last_updated":"2024-03-14T04:36:31Z","snapshot_observed_at":"2026-08-08T17:26:38.829859Z","submitted_at":"2023-03-07T18:50:03Z","title":"Diffusion Policy: Visuomotor Policy Learning via Action Diffusion","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.04137","snapshot_observed_at":"2026-08-12T15:57:05.951223Z","title":"Diffusion policy: Visuomotor policy learning via action diffusion,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.951223Z"},"links":{"cited_paper":"/paper/2303.04137","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:20caaa9c240dfcf1c829ce45f2248f9d324e73379d3774d5cdf52c513aebe74a","observation_id":"ac3051a3-2d55-41a0-aec2-411f076defd8","resolution":{"observed_at":"2026-08-12T15:57:05.951223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-12T15:57:05.956494Z","title":"Universal and trans- ferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.956494Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:96f730881443aa06fbc1700caa71fb7a800f51e517a57aec03dd574f70a214b9","observation_id":"549430ec-b36f-4a8f-a4ca-90dc049a6932","resolution":{"observed_at":"2026-08-12T15:57:05.956494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T15:57:05.968821Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.968821Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:d6f21f0b7c2398e46949ddded8f2550b688e1cd6583414665a4e0083a4d2f121","observation_id":"ef2f0b32-4b69-4ef6-808f-72850371a16e","resolution":{"observed_at":"2026-08-12T15:57:05.968821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:05.984172Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.984172Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:e2a31939573e033cad6b23103538e4d831ad1eecdc5006e2aba253ccbdcfe27c","observation_id":"6f98d910-91ad-4d6f-8fe9-8bf39e9b3f4e","resolution":{"observed_at":"2026-08-12T15:57:05.984172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.928607Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods,","venue":null,"work_id":"7489b3db-0322-4e51-a8b1-6de387a2f3e8","year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:05.998888Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:e31752cc74daf2093b33502b8715ae90e529d5ce66b11ef14156ee61fa78ad1c","observation_id":"238d49f6-7db5-4cfb-8c91-eacf6dbd9f7d","resolution":{"observed_at":"2026-08-12T15:57:08.942959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-12T12:29:45.113982Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-12T15:57:06.018769Z","title":"Jailbreaking black box large language models in twenty queries,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.018769Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:9c4690fd79a6fe3b01db1b60f68bcd01690f9d0f285bbd946d1a2e4bcd030889","observation_id":"7191bc25-e2e7-485d-9d2c-114d8e6ea6d8","resolution":{"observed_at":"2026-08-12T15:57:06.018769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-13T00:39:04.444350Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-12T15:57:06.029488Z","title":"Jailbreaking lead- ing safety-aligned llms with simple adaptive attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.029488Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:5c0137cc8be8add990a225e6f95d962e98bac9c10c0f829e2d0ffdc79fb144ca","observation_id":"d7db9b0d-b3fe-4c6a-b11f-5532882e3969","resolution":{"observed_at":"2026-08-12T15:57:06.029488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.877736Z","title":"Guiding multi-step rearrangement tasks with natural language instructions,","venue":null,"work_id":"47f19b40-1b5a-4997-a0e8-bf7c4f273788","year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.044135Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:65e1b0c9a3fb5ecbc6cbd84dc2f54fdee0f6f8c9f1f32ca5106ab657785b2714","observation_id":"b5d4b2bb-e785-460f-9aff-f0c9a9fc0c70","resolution":{"observed_at":"2026-08-12T15:57:08.886268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.836123Z","title":"Language conditioned imitation learning over unstructured data,","venue":null,"work_id":"c148cb4f-5012-4692-84c5-998b34619532","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.049171Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:77f07e4e1d80513f1887c6d103504c555b50faffbb04562acc840c99e4ea990c","observation_id":"b61b8549-83f8-4d66-a1f9-3f982ee19066","resolution":{"observed_at":"2026-08-12T15:57:08.847947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.057654Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.057654Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:06ba16fa657b4b59cdbfd955fa3e9673c0204fc9fa1f287f17493eff5845b71e","observation_id":"1aef4a1b-5faa-4c44-8817-306a621950f8","resolution":{"observed_at":"2026-08-12T15:57:06.057654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.062078Z","title":"Safe learning in robotics: From learning-based control to safe reinforcement learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.062078Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:6c44b261f42b559635495310d631249e8ab822c093ce02f20bb863f9e0c18089","observation_id":"8697bacb-de30-473f-bbc6-3ce778e73e0d","resolution":{"observed_at":"2026-08-12T15:57:06.062078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.06817","last_updated":"2023-08-11T17:45:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-12-13T18:55:15Z","title":"RT-1: Robotics Transformer for Real-World Control at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.06817","snapshot_observed_at":"2026-08-12T15:57:06.066163Z","title":"Rt-1: Robotics transformer for real-world control at scale,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.066163Z"},"links":{"cited_paper":"/paper/2212.06817","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:35c9bf885459d7a6289a4d3288e6802fe1a8494fd685d6e581bec4237b71ce1b","observation_id":"ba44fa51-53a2-402a-9525-cf1cd6123942","resolution":{"observed_at":"2026-08-12T15:57:06.066163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.732284Z","title":"Adaptive dis- cretization for model-based reinforcement learning,","venue":null,"work_id":"8fef05ad-6f62-43bd-bea2-4f63b01b27c0","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.070445Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:b5e68db08ffd819a5ca7fd6da917a036f40faf7ada02d72f08dfac52a67b3ed8","observation_id":"04dbe44d-36f5-43ad-b31e-f4e5df8e16ef","resolution":{"observed_at":"2026-08-12T15:57:08.750523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.662060Z","title":"Action- quantized offline reinforcement learning for robotic skill learning,","venue":null,"work_id":"448c28e2-6a65-4cfc-b1ba-3cef393d408f","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.075665Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:7c49995b8336460d3c6306b44d3241518e5609304b453953328afc0c75bb541d","observation_id":"035f0fab-e55d-48e0-8452-3a52247f2b14","resolution":{"observed_at":"2026-08-12T15:57:08.690909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.06680","last_updated":"2019-12-13T19:56:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2019-12-13T19:56:40Z","title":"Dota 2 with Large Scale Deep Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.06680","snapshot_observed_at":"2026-08-12T15:57:06.080399Z","title":"Dota 2 with large scale deep reinforcement learning,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.080399Z"},"links":{"cited_paper":"/paper/1912.06680","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:8512b581bff1c042f3472b565fbfb1306ed729562ab2f2e5ac6807b350f149dc","observation_id":"f0038d4a-70f5-4e28-85ef-7f4dc7bf8ff7","resolution":{"observed_at":"2026-08-12T15:57:06.080399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.086487Z","title":"Bc-z: Zero-shot task generalization with robotic imitation learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.086487Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:e2c9511fd745d7ac776929d21d9eeb338456192db5991033b62be05679de7bd1","observation_id":"3a5b17d6-8f26-431d-a0c8-6a0c3ae082b8","resolution":{"observed_at":"2026-08-12T15:57:06.086487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.093021Z","title":"Language-conditioned imitation learning for robot ma- nipulation tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.093021Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:917bde463b63a4bb8939285cdd209c3d8d7c178e248e7ddbd2c2021bc0bfb301","observation_id":"c91c8e3a-c3ba-48f9-9836-a09dca9b2aca","resolution":{"observed_at":"2026-08-12T15:57:06.093021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.528435Z","title":"Deep imitation learning for complex manipulation tasks from virtual reality teleoperation,","venue":null,"work_id":"6f2b171d-87eb-4b6f-bbad-a20d38f05df1","year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.104747Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:a1d3b3d0d74e788b75a981136eaabe6fb24ed1687881de26cb3f0d9b7586a830","observation_id":"405cf469-2975-43e1-9965-f231dbbfc205","resolution":{"observed_at":"2026-08-12T15:57:08.542488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.09395","last_updated":"2021-04-15T04:30:35Z","snapshot_observed_at":"2026-08-03T16:16:13.326473Z","submitted_at":"2020-04-20T15:49:35Z","title":"Energy-Based Imitation Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.09395","snapshot_observed_at":"2026-08-12T15:57:06.114320Z","title":"Energy-based imitation learning,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.114320Z"},"links":{"cited_paper":"/paper/2004.09395","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:4bbf90dfbd8f0e55cf712b9889994d52249284312216e5109d8be24f7b5a4b4f","observation_id":"7ffc604d-f751-4f09-b42f-8c2250648341","resolution":{"observed_at":"2026-08-12T15:57:06.114320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.469253Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":"5cb749a7-195c-4c4b-9322-3a125c57ecd4","year":2014},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.119657Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:34e266d5ab16d3c51220b6a43377a83ef2641bc9011cbb1ac4780c71e2b500db","observation_id":"6838c05f-2438-4282-8343-47cbf92bde3a","resolution":{"observed_at":"2026-08-12T15:57:08.487217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09154","last_updated":"2025-03-03T09:37:27Z","snapshot_observed_at":"2026-08-13T04:19:08.545815Z","submitted_at":"2024-02-14T13:13:26Z","title":"Attacking Large Language Models with Projected Gradient Descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09154","snapshot_observed_at":"2026-08-12T15:57:06.132379Z","title":"Attacking large language models with projected gradient descent,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.132379Z"},"links":{"cited_paper":"/paper/2402.09154","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:914388402ae3e44b116b27b2e941508a0f6e3e277bb005ac2dacf198fd42d832","observation_id":"6448b82d-8a67-444c-98d4-f9be429bdc3f","resolution":{"observed_at":"2026-08-12T15:57:06.132379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-13T00:32:28.634791Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-12T15:57:06.138066Z","title":"Amplegcg: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.138066Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:c8246873599fc551b2cee4bd75d8f89f4bf50656c6f255d83a8afa64c26e3e82","observation_id":"89dcb5ff-bec8-4f77-a6fc-2ed15e8d42d6","resolution":{"observed_at":"2026-08-12T15:57:06.138066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.409181Z","title":"Adversarial example does good: Preventing painting imi- tation from diffusion models via adversarial examples,","venue":null,"work_id":"82404645-f5ff-4645-8577-dbc770c280a7","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.147735Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:8087f74a5ffa3a276abeec824869d700f5f3cd426123f8ba861777d073aed43f","observation_id":"14f1593e-1b8a-4950-9616-fc3d90786d80","resolution":{"observed_at":"2026-08-12T15:57:08.425745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.342411Z","title":"On the adversarial robustness of multi- modal foundation models,","venue":null,"work_id":"e777fdc7-398b-42e0-acd7-47f2095e6035","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.154648Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:f648d1ed8caaeef6013cdf53b02b1d6f663ff3a73beb1301d7fd4d10a7dd0c6a","observation_id":"1af02b95-0b3a-4150-8df4-95f5e2dfe909","resolution":{"observed_at":"2026-08-12T15:57:08.367312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.284769Z","title":"Attacking deep reinforcement learning with decoupled adversarial policy,","venue":null,"work_id":"30f136c0-385f-48d7-aa04-63a2d63f5f95","year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.161923Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:b8a0eea0d4ab530fb997a63f265e7c78c1ad3a0fb2cb216675dac355d0e461d1","observation_id":"d0aba1c8-607d-40ed-891f-77fc1238b44a","resolution":{"observed_at":"2026-08-12T15:57:08.300337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.235677Z","title":"Revisiting the adversarial robustness-accuracy tradeoff in robot learning,","venue":null,"work_id":"c99679bc-0e4a-41f8-a2a6-0e76e980bf04","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.169372Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:39634bae300b050da8f4c917b32a117edd5b9031d494d8f17f07045f8c0f34b0","observation_id":"e682be39-23da-4cda-9508-3f95264977e6","resolution":{"observed_at":"2026-08-12T15:57:08.248867Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.201065Z","title":"Studying adversarial attacks on behavioral cloning dynamics,","venue":null,"work_id":"58c7fffe-e61a-4a27-8aca-5aaf45b623cf","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.180096Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:3254544bca5de006076fe1cefe740f17c25a6b04059831547494b0614c798854","observation_id":"2482316e-fd20-4e69-af67-b322652a39b4","resolution":{"observed_at":"2026-08-12T15:57:08.214634Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.125271Z","title":"Is deep learning safe for robot vision? adversarial examples against the icub humanoid,","venue":null,"work_id":"69472f38-94ad-49a6-90d2-2cf3910186bf","year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.184669Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:d1123830fa994337a1c1097fdb42cf57556e822677826722290f1d7cfe6dc2f0","observation_id":"77ab3fcf-f96e-4420-aa9c-e62556bcaef2","resolution":{"observed_at":"2026-08-12T15:57:08.169971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:08.043821Z","title":"Analyzing adversarial attacks against deep learning for robot navigation","venue":null,"work_id":"cbcb7c7b-9e85-4584-b3bf-3e043abad3a3","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.189707Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:692bca61b0e7a89c65a424ee2c3c95d4a04705e86d23e93efde4c55ceebd0873","observation_id":"3f9b4169-1c48-4da8-806c-77959a20d28e","resolution":{"observed_at":"2026-08-12T15:57:08.054802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.196172Z","title":"Video pretraining (vpt): Learning to act by watching unlabeled online videos,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.196172Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:41f20df2b87cbd5768628404859412f0df24ebe0f9c81a2d1fa0a70f8223a65b","observation_id":"3b64ff93-c49b-40d0-a040-309b10d5d994","resolution":{"observed_at":"2026-08-12T15:57:06.196172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.994017Z","title":"Is bert really robust? a strong baseline for natural language attack on text classification and entailment,","venue":null,"work_id":"ae99b65f-e111-4709-98ed-ab33ef8ca7ff","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.203109Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:25ea3d96516d6381f7cf2ac29e0d3a70a872d87c8593ceb94962abe8b67a900e","observation_id":"c6310bf0-ef8e-41ac-88e7-e4fedaaf842c","resolution":{"observed_at":"2026-08-12T15:57:08.001026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.917938Z","title":"Hard prompts made easy: Gradient-based discrete optimization for prompt tuning and discovery,","venue":null,"work_id":"69c77015-961d-471c-b0c2-f1f841030760","year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.214787Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:2d0f4ec6d56bfaf7f5e3b55868c4f5faaf63dfc976b233e5b1558e27d37765e6","observation_id":"dfc20bae-f501-43bc-a936-d39e8d24d1b4","resolution":{"observed_at":"2026-08-12T15:57:07.939626Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.888144Z","title":"Automatically auditing large language models via discrete optimization,","venue":null,"work_id":"eec3a150-6161-4c06-bae0-46b21b21dee4","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.222037Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:69262ed0dc82a16d815d2032720f919c459fe5d560b502c2ed59e18995181d38","observation_id":"f22141c9-edf0-465c-9ad9-74d9d5c6c0fc","resolution":{"observed_at":"2026-08-12T15:57:07.897804Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.833272Z","title":"Character-level white-box adversarial attacks against transformers via attachable subwords substitution,","venue":null,"work_id":"bdf9223f-e938-4623-a551-b3199efde62d","year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.228450Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:5805f3a0df284db585ab06acbbf7dd3dc45926f48f73daf21dcf9d80514b8b9a","observation_id":"c5be924d-da2f-4b6a-9c97-35914711a6b5","resolution":{"observed_at":"2026-08-12T15:57:07.848410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.786034Z","title":"Generating natural language adversarial examples,","venue":null,"work_id":"139f6c4e-e91b-4b8f-9fa5-09453619ccde","year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.236780Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:057cfe2b11a5b3576e27f8bc1f4cb3f3a2332e18116f450a053fff02f5994539","observation_id":"432feeb3-3d1a-4baa-a45a-6f8dba8c0ef6","resolution":{"observed_at":"2026-08-12T15:57:07.803757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6550","last_updated":"2015-03-27T11:52:28Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-19T22:40:51Z","title":"FitNets: Hints for Thin Deep Nets","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6550","snapshot_observed_at":"2026-08-12T15:57:06.246216Z","title":"Fitnets: Hints for thin deep nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.246216Z"},"links":{"cited_paper":"/paper/1412.6550","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:e83747288d5a5c73d6d3edc5d1e4db51d7af315533b50ef3a4448ca052ac100f","observation_id":"f1b9edac-9088-42cb-8bfe-d10f544f0174","resolution":{"observed_at":"2026-08-12T15:57:06.246216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.739830Z","title":"Knowledge transfer via distilla- tion of activation boundaries formed by hidden neurons,","venue":null,"work_id":"2cbac1bf-2572-4b68-92d0-05db0bdc9b73","year":2019},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.257983Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:8fd5f85c54e05dde37fa4ffe1d5fa4e6c2f6b461ba15c06af9da60cf81e115f5","observation_id":"ee814a0e-a034-4d2a-9fdc-e294c1d014c8","resolution":{"observed_at":"2026-08-12T15:57:07.747035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.714090Z","title":"Au- toprompt: Eliciting knowledge from language models with automatically generated prompts,","venue":null,"work_id":"ea14e475-54f1-4f8e-b103-7742c39eac83","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.269911Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:5aeaf9664e4b5cef245fa3c01ab3723c39329a4ee5c6bf8929b18763f2291a55","observation_id":"e79bf631-224b-4e54-8aa2-37b43455948c","resolution":{"observed_at":"2026-08-12T15:57:07.728255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.280054Z","title":"Hotflip: White-box adversarial examples for text classification,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.280054Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:ba385e3bbf485ec222ec64cbbad1b090b003b9ddf23e4296fe98d22811cb93ba","observation_id":"865786c5-00ef-4d30-bb8a-d74d2cc1a14d","resolution":{"observed_at":"2026-08-12T15:57:06.280054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.288699Z","title":"Calvin: A benchmark for language-conditioned policy learning for long-horizon robot manipulation tasks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.288699Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:2ba3ef03d9c00fdda6a5d8633980230d27a41f9efe71c7732ce976f560a191eb","observation_id":"d233d880-9dbf-4220-9a54-e89da518bb31","resolution":{"observed_at":"2026-08-12T15:57:06.288699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.615981Z","title":"Modularity through attention: Efficient training and transfer of language- conditioned policies for robot manipulation,","venue":null,"work_id":"6e8fca4d-14d2-4b08-b2ca-fe44bb4541b6","year":2023},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.301290Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:6bae0254057697475137caaecbac2e681e10a71c496093b7165e57809f703c48","observation_id":"9a71ad0e-9624-4cfe-b7a7-9263f589e585","resolution":{"observed_at":"2026-08-12T15:57:07.624152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.01975","last_updated":"2020-11-03T19:42:32Z","snapshot_observed_at":"2026-07-06T10:11:26.758341Z","submitted_at":"2020-11-03T19:42:32Z","title":"Rearrangement: A Challenge for Embodied AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.01975","snapshot_observed_at":"2026-08-12T15:57:06.314686Z","title":"Rearrangement: A challenge for embodied ai,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.314686Z"},"links":{"cited_paper":"/paper/2011.01975","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:98a65cc6082bcb6d349998c8273ad0ffec6073d2e3d6ce7b3dc55b30f595223d","observation_id":"fa7f95a2-bcf4-4621-a9bd-9f38e57cf472","resolution":{"observed_at":"2026-08-12T15:57:06.314686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.594506Z","title":"Ocrtoc: A cloud-based competition and benchmark for robotic grasping and manipulation,","venue":null,"work_id":"80da92fa-00f5-4639-ac39-eaa6cd6d3241","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.324044Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:16d308e84f75fbb18cb634f3f3445c2639a7c8ba7946c12509a2780a1f21fe96","observation_id":"7f6b13b0-5e1d-4179-b843-9092a14e9aad","resolution":{"observed_at":"2026-08-12T15:57:07.603192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.337535Z","title":"Transporter networks: Rearranging the visual world for robotic manipulation,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.337535Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:ff4aedb7a3746a9feb4094df717700b81fb3b1ebb48d3743246a9a7dd9204592","observation_id":"1565fc1c-bd0a-42ed-85c6-866bbaa68bbb","resolution":{"observed_at":"2026-08-12T15:57:06.337535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.347159Z","title":"Cliport: What and where pathways for robotic manipulation,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.347159Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:6ff7349c963d7fa2c1b9bf2a66a097af703f526427927b21ae5ac51b016b43bd","observation_id":"0ebcce89-b22c-4de4-8967-94f38414090a","resolution":{"observed_at":"2026-08-12T15:57:06.347159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.492047Z","title":"Decision transformer: Reinforcement learn- ing via sequence modeling,","venue":null,"work_id":"91a49b08-3784-4889-8669-a70aacb6d8c6","year":2021},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.356170Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:227f825dd63daee37f66ba38f182b02919d5d640bf89d120d1a677ab85ab0e83","observation_id":"c4d3cfad-a8ef-43d0-a892-83b8f28a8f35","resolution":{"observed_at":"2026-08-12T15:57:07.497215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.365398Z","title":"Relay pol- icy learning: Solving long horizon tasks via imitation and reinforcement learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.365398Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:c2c62aed5bd936ef97f8d1e316e9cc822afbbf88a3e242c045f8062bb8865180","observation_id":"dcf52139-1e11-418a-91a8-37dfdd41b590","resolution":{"observed_at":"2026-08-12T15:57:06.365398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.418442Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":"f7372f47-cf1c-4d36-a6da-b649c7c63c30","year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.374587Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:a71adc59b486d80b0db39ae1bf89187945dd04a2eaec3d4f4c130b0164b13783","observation_id":"a9b7839f-ce39-47c2-b99b-1f2b574bb678","resolution":{"observed_at":"2026-08-12T15:57:07.434788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.379530Z","title":"Mask r-cnn,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.379530Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:0b78938ec13721cc846d9cf763952d65959e887ee1a0bd4ff2c1f546a9d98f7d","observation_id":"f1779177-a9df-4e5e-bdd9-78e9718357b5","resolution":{"observed_at":"2026-08-12T15:57:06.379530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:06.390979Z","title":"Exploring the limits of transfer learning with a unified text-to-text transformer,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.390979Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:41ae67031edb4e3de98ef482193492fd5b21259fcf293cfd61b4052dfcfb1b36","observation_id":"95507752-1cef-4e9c-8427-cc2154deb603","resolution":{"observed_at":"2026-08-12T15:57:06.390979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01369","last_updated":"2025-01-03T04:36:11Z","snapshot_observed_at":"2026-08-13T10:17:31.357339Z","submitted_at":"2024-02-02T12:39:49Z","title":"On the Multi-modal Vulnerability of Diffusion Models","version":2},"cited_work":{"arxiv_id":"2402.01369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.01369","snapshot_observed_at":"2026-08-12T15:57:06.613034Z","title":"On the Multi-modal Vulnerability of Diffusion Models","venue":"cs.LG","work_id":"6b690928-62ef-4497-96ac-fc075018bfeb","year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.396776Z"},"links":{"cited_paper":"/paper/2402.01369","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:f5c5cdb5d272c19f757619252fdafe569202b130b5b386f50c070302c4b6e4e5","observation_id":"99273b85-92cf-42f8-9e8c-c58de0fc5c7a","resolution":{"observed_at":"2026-08-12T15:57:06.626743Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-13T00:59:41.384742Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-12T15:57:06.405214Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.405214Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:5f3e3323fca8a85f03697d0e67668691480188b67f4913b3908f1be85c833a28","observation_id":"aab7c635-b76f-4c7f-b9e0-c16a0745a34b","resolution":{"observed_at":"2026-08-12T15:57:06.405214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:57:07.322443Z","title":"Enhancing adversarial example transferability with an intermediate level attack,","venue":null,"work_id":"54be3468-3402-4883-9a21-a68658db7c9b","year":2019},"citing_paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:06.421719Z"},"links":{"citing_paper":"/paper/2411.15222"},"observation_digest":"sha256:733116924e61eae21318af6a3958071f897dd5caf1200540acfbffb60069c43a","observation_id":"079d90c1-9c6b-4048-8bc3-d48f9ca0e4fc","resolution":{"observed_at":"2026-08-12T15:57:07.330861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.15222","last_updated":"2024-11-21T02:46:04Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-12T15:50:12.518887Z","submitted_at":"2024-11-21T02:46:04Z","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation"},"reference_resolution":{"displayed":67,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":28,"verified_exact":0,"verified_fuzzy":38},"total_outbound_references":67},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 67 of 67 outbound references and 1 inbound Pith citation observation for arXiv:2411.15222."}