{"as_of":"2026-08-13T08:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:470292a19286ab27441cf4d0d951bc2c70d5d65861a2f7409a5e4e95661eaacb","coverage":[{"denominator":20,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T12:40:28.920086Z","state":"measured"},{"denominator":20,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":20,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.17026/citation-record","integrity":"/paper/2411.17026/integrity","json":"/paper/2411.17026/citation-record.json","paper":"/paper/2411.17026"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.106551Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"0b3931a8-eeb4-4557-88ec-f0cb4c860c7e","year":2014},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.857047Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:d89d8e8b130389cba06153252620593e892377a3db656b50291644467e754c2d","observation_id":"a2cdeb92-c383-4171-9252-49e52da11c62","resolution":{"observed_at":"2026-08-12T12:40:29.109520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-12T12:40:28.860668Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.860668Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:8e4f52ea0d8a96703a1a83d116e58c798d6d66dd1897d60834d7643e26eeee0b","observation_id":"a41a7387-e6c4-473d-9256-845c606e12b3","resolution":{"observed_at":"2026-08-12T12:40:28.860668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.098577Z","title":"Adversarial examples in the physical world","venue":null,"work_id":"e63127c4-5397-49d1-9365-6a109668a7aa","year":2016},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.864622Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:fff65671d581774bc47b0fad79b7778f072aa8a27a4031bcdcad6f1a323443c0","observation_id":"0531eb9d-87a9-41da-a279-1f48f3199a31","resolution":{"observed_at":"2026-08-12T12:40:29.101401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.090565Z","title":"Unadversarial examples: Designing objects for robust vision","venue":null,"work_id":"8e7239c3-c383-48c4-981b-84a2d17b6b7d","year":2021},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.868104Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:02273d893e9c9694b1e0d610388693397243953b6fd72cea2342ff3b33ff06ca","observation_id":"939136ba-8f8a-42c4-85d4-632bf2bc4100","resolution":{"observed_at":"2026-08-12T12:40:29.093472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.081875Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"8030d795-609e-47f8-a9c0-acdc293c41c6","year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.872145Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:4ea27af72b9c68408504dd84922c25e4d6041bbf8e1e4a1dd4fbe90b37663b96","observation_id":"87a14b90-f789-44aa-9c50-6c9be3b26f92","resolution":{"observed_at":"2026-08-12T12:40:29.085648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.073756Z","title":"Patchattack: A black-box texture-based attack with reinforcement learning","venue":null,"work_id":"d0f12ae5-e239-4906-beec-bebc6a40cef1","year":2020},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.875339Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:67e16c7d57c9e2b0cc439305272c81cdda4611a8e790f0d7138078a9e16956db","observation_id":"cb4d6dc1-1e52-421c-856a-c8d761232d17","resolution":{"observed_at":"2026-08-12T12:40:29.076781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.064646Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":"8bb6bcc4-7669-4563-8d97-e190716b530e","year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.878648Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:e072884638d5ac1d16b730a4702e5e75e331384793ffa81b0317e69e50e6a271","observation_id":"6aa1df58-d0d0-4f7e-81a7-c3ade5a92aea","resolution":{"observed_at":"2026-08-12T12:40:29.068619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-12T12:40:28.882015Z","title":"Adversarial patch","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.882015Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:801cac5c8ead8f6caf2d1912d15f9d5b6ecfd0336208837d61d9221c98ac6d2f","observation_id":"41263fdb-c070-4159-8b45-ce224da5ce97","resolution":{"observed_at":"2026-08-12T12:40:28.882015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-07-06T05:17:56.287788Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-12T12:40:28.885695Z","title":"Delving into transferable adversarial examples and black-box attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.885695Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:58b705f9cbb4705e99adc71f073095e73ece05a25ea2e3e7ffb68a5668db6d13","observation_id":"7196feb2-25f5-425f-991c-e4eca01eb498","resolution":{"observed_at":"2026-08-12T12:40:28.885695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02608","last_updated":"2018-03-01T12:49:11Z","snapshot_observed_at":"2026-07-06T06:17:41.340240Z","submitted_at":"2018-01-08T18:44:23Z","title":"LaVAN: Localized and Visible Adversarial Noise","version":2},"cited_work":{"arxiv_id":"1801.02608","doi":null,"metadata_source":"pith","pith_arxiv_id":"1801.02608","snapshot_observed_at":"2026-08-12T12:40:28.960032Z","title":"LaVAN: Localized and Visible Adversarial Noise","venue":"cs.CV","work_id":"536e0823-8d86-41d4-aba7-7dce3df34f30","year":2018},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.888872Z"},"links":{"cited_paper":"/paper/1801.02608","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:b0bce49520e2c62f123079c9a42fdc0036c60d3ab73a65331434c0e839c8df1e","observation_id":"23e19861-4cae-4c14-a795-18fb50a6fc8c","resolution":{"observed_at":"2026-08-12T12:40:28.965144Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.13053","last_updated":"2019-10-13T01:25:56Z","snapshot_observed_at":"2026-07-06T07:49:25.100741Z","submitted_at":"2019-04-30T05:28:22Z","title":"Search for muon-philic new light gauge boson at Belle II","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.13053","snapshot_observed_at":"2026-08-12T12:40:28.894277Z","title":"Robust patch attacks","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.894277Z"},"links":{"cited_paper":"/paper/1904.13053","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:4b4dbb9fee3c54edde51038b1c45947de3bbf66ec9de2203502642752eee11df","observation_id":"cc32b585-e1b3-4b10-a778-79f2b6f95794","resolution":{"observed_at":"2026-08-12T12:40:28.894277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.055611Z","title":"Adversarial training for free! Advances in Neural Information Processing Systems (NeurIPS), 32, 2019","venue":null,"work_id":"c9f3d084-149d-414d-9bcb-f6cbad3603ed","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.897717Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:1e03d7ffad383a0f6b8befd671403ef8a3b85ef1873013ac5b007a8a749cd81e","observation_id":"b9641ad2-8e9e-4503-85ce-ff3340137537","resolution":{"observed_at":"2026-08-12T12:40:29.058977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.047497Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"773f0b41-a3b6-4fbe-af56-cfc91b94b16c","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.900520Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:be5639924114008fbaa43f95500838fffccaa6f7e4421421f063f6a0f411463b","observation_id":"0ed5278d-4e73-4a9b-b23e-5e567bd052ef","resolution":{"observed_at":"2026-08-12T12:40:29.050370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.038825Z","title":"Certified robustness to adversarial examples with differential privacy","venue":null,"work_id":"8e178140-da04-4dd4-98b2-046e7bfa229e","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.903254Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:2f06193730555b4928934c895a50aa8a02bbc229c3f2190d737ded92ca133a19","observation_id":"bb080c78-5689-41ea-9623-5329c2e3d8f2","resolution":{"observed_at":"2026-08-12T12:40:29.042030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.029851Z","title":"Provably robust deep learning via adversarially trained smoothed classifiers","venue":null,"work_id":"1349d24b-c3b4-4a8a-8f0e-bcd4a680ff79","year":2019},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.905907Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:f4276033614f7b882f5697f7edd4f5338f5dc1ad9698665cf0b3e1b9f8cb3ffd","observation_id":"c32e05a4-54aa-4d0b-b53d-d0fdb983d1ff","resolution":{"observed_at":"2026-08-12T12:40:29.033030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.021420Z","title":"Patchguard: A provably robust defense against adversarial patches via small receptive fields and masking","venue":null,"work_id":"16dc3a29-4602-46ba-8c4b-427550efd38b","year":2020},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.908618Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:ec8a51e2487f58455bc0458fe55abcb0d182ab7b640ee500e3311fcf115c443e","observation_id":"8a6e7512-6134-4774-a59b-907c68b4ff1b","resolution":{"observed_at":"2026-08-12T12:40:29.024494Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08488","last_updated":"2022-03-29T01:34:50Z","snapshot_observed_at":"2026-08-07T04:15:43.892780Z","submitted_at":"2022-03-16T09:28:03Z","title":"Pushing the limits of raw waveform speaker recognition","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.08488","snapshot_observed_at":"2026-08-12T12:40:28.911288Z","title":"Patchcleanser: Certifiably robust defense against adversarial patches for any image classifier","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.911288Z"},"links":{"cited_paper":"/paper/2203.08488","citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:cbb3baa18d60aa17643c4f0bc71f85e4dc75d13c0c2904d28d25e9689884a1d9","observation_id":"58fd64f4-8b57-4a3d-b57a-666ccea3e1c1","resolution":{"observed_at":"2026-08-12T12:40:28.911288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.013057Z","title":"Patchzero: Defending against adversarial patch attacks by detecting and zeroing the patch","venue":null,"work_id":"2026fad2-beb2-45e1-a432-8ca2e86a03d1","year":2023},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.914273Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:7c6bff663a86cbbd2738813dca4197701921cfeb0798cd927b732fbecb1525eb","observation_id":"6371f224-1d78-412e-b4f5-6c4dda6225d0","resolution":{"observed_at":"2026-08-12T12:40:29.016156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:29.004727Z","title":"Benson, Aleksander Mądry, Elan Rosenfeld, and Zico Kolter","venue":null,"work_id":"979cd4c2-2544-4be2-ae86-6a9752baafd7","year":2021},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.917489Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:7a6340050b152f0d1912db58319cbce76672ca788d7b1ca66db6d4e94cc63d0c","observation_id":"5b40cbb9-48df-4137-ba19-0fbe1483f3e2","resolution":{"observed_at":"2026-08-12T12:40:29.007716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T12:40:28.995846Z","title":"(de) randomized smoothing for certifiable defense against patch attacks","venue":null,"work_id":"cd5e3887-5254-4f07-a5bb-c4d38723632d","year":2020},"citing_paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-12T12:40:28.920086Z"},"links":{"citing_paper":"/paper/2411.17026"},"observation_digest":"sha256:9cba680cebe6969fa2bc19ef53cfe391c66b64e1350302fc05ac220e5a7a0b4c","observation_id":"b8797ae6-f805-4c99-895b-0a1d8836af60","resolution":{"observed_at":"2026-08-12T12:40:28.999089Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.17026","last_updated":"2024-11-26T01:38:51Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T12:33:59.720236Z","submitted_at":"2024-11-26T01:38:51Z","title":"RED: Robust Environmental Design"},"reference_resolution":{"displayed":20,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":1,"verified_fuzzy":14},"total_outbound_references":20},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 20 of 20 outbound references and 0 inbound Pith citation observations for arXiv:2411.17026."}