{"as_of":"2026-08-13T07:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5d3255df43f4d0863b8bdba17bfdac870b3b51f2cbce430ef5b94dea11cea89e","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T04:43:02.242563Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.01154/citation-record","integrity":"/paper/2412.01154/integrity","json":"/paper/2412.01154/citation-record.json","paper":"/paper/2412.01154"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.103304Z","title":"Adversarial example detection for DNN models: a review and experimental comparison","venue":null,"work_id":"ba215a7d-4ee5-44a7-bf3a-c842fe207546","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:01.990951Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:3cd8df78123ca69dbd3c6339cb0b1a9b61451571fec46a6812c13e90d71c0aef","observation_id":"040d2938-aebc-4ec7-9cda-497e3044c7a0","resolution":{"observed_at":"2026-08-12T04:43:03.108241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.088771Z","title":null,"venue":null,"work_id":"88d929f9-973a-4b08-a85c-4fed82c3d119","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:01.996356Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:5e9cd5377194d0a53c2af4dcf931f05ff515c7809fe3a7e94ecaa5e29393b9ff","observation_id":"1318ce22-3cb0-419b-81a3-08acf58c2ff2","resolution":{"observed_at":"2026-08-12T04:43:03.093499Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.073488Z","title":"Robust- bench: a standardized adversarial robustness benchmark","venue":null,"work_id":"c67d5040-79b3-4a51-8ffd-6d4ee9ca1123","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.001186Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:60d2ce9af9fbde5e4ce54507217cbf4ef76afe7c36ca6aedb9c5b8d9d7016d20","observation_id":"22dab27c-adab-40e1-aa6c-8588561b102b","resolution":{"observed_at":"2026-08-12T04:43:03.078166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.058813Z","title":"Evaluat- ing the adversarial robustness of adaptive test-time defenses","venue":null,"work_id":"0c0cb21d-b2f4-4fbc-84d1-d0a309c889cd","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.006007Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:8f5257a37b25068b14d277a0f3cc59f3de21bf3d75198f220d8e24313e00e12b","observation_id":"46d660f6-1e6d-4427-afbe-611f704830d9","resolution":{"observed_at":"2026-08-12T04:43:03.063184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.044253Z","title":"ImageNet: A large-scale hierarchical im- age database","venue":null,"work_id":"552703f5-3b6c-4392-96c2-3b8d1a5f5a2a","year":2009},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.011041Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:375064fb582d644e9da2d283904314c5ae8dc87f3e5de883a4f2f98a7bd2d96b","observation_id":"15efa351-fa2a-4a76-b6a1-3cf8a5d56c00","resolution":{"observed_at":"2026-08-12T04:43:03.048906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.029061Z","title":"Marsden, and Bin Yang","venue":null,"work_id":"753c4702-28f7-40ed-a12c-ad5ffd3c55ef","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.016107Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:b7c8e2780f7242e4b4a04fef38656214f133d08e1157e010f460d425748e90a8","observation_id":"1568b3f8-b9a0-435d-b22f-3ed3c827a6c8","resolution":{"observed_at":"2026-08-12T04:43:03.033830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:03.012804Z","title":"Unsupervised do- main adaptation by backpropagation","venue":null,"work_id":"d3e542ea-dabd-40a4-8ab0-6f14c3d499be","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.021155Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:57aaa5a0100fab539e9863cd858fbd4c808a052a5255a8349e6d846bad017ba5","observation_id":"8fec830b-814e-4c75-8bd2-e08e355e4d4f","resolution":{"observed_at":"2026-08-12T04:43:03.018164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.997528Z","title":"NOTE: Robust continual test-time adaptation against temporal correlation","venue":null,"work_id":"9f15fef2-1ba9-48ed-a837-186e9fc00564","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.026390Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:476320fa652b593f7ad05bd556dfad1c3a7001621edc6fc2466b3de3b1b25fe2","observation_id":"0a193986-55aa-4f0f-af02-36538d7f54c7","resolution":{"observed_at":"2026-08-12T04:43:03.002825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.982641Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"ebc4be27-f21c-47ab-b65e-e54a4c4fcc71","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.030989Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:db7f6287239ccd9e8bcc852bea340ae29432fffd04b07ca14209d4c331953554","observation_id":"e22bf1bd-976a-4f7e-9702-a40fc2cfbd81","resolution":{"observed_at":"2026-08-12T04:43:02.987672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.968350Z","title":"Improving ro- bustness using generated data","venue":null,"work_id":"ddc7b7cf-c9e8-41cf-83e7-99a16fec53f1","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.035699Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:51ab582a12bb91237ce3703a5ca969c647193c7aace817dbe9d5d852e92364b4","observation_id":"6b82ce89-d750-4253-81bd-aed55cbf006d","resolution":{"observed_at":"2026-08-12T04:43:02.972965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.954078Z","title":"Semi-supervised learning by entropy minimization","venue":null,"work_id":"2797b2ba-777d-44fb-ba6f-e4be1d34459e","year":2004},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.040496Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:7d21b093de8bf04be738f1c354b9c8b8de3c17bba67bbc60d808d1fdf308a017","observation_id":"f60fef33-c3b1-4d7e-bbb1-b826aa76cb36","resolution":{"observed_at":"2026-08-12T04:43:02.958672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.938922Z","title":"Simple black-box adver- sarial attacks","venue":null,"work_id":"73d6889c-8a94-4261-b1e2-3d65e6fb9399","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.045246Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:26296e28419c9cea94f22c976c31bbfd857336854da23ba6e5ed840c068489bf","observation_id":"a60024cd-d703-4efb-a20c-a4a6af58d5e8","resolution":{"observed_at":"2026-08-12T04:43:02.943522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1512.03385","last_updated":"2015-12-10T19:51:55Z","snapshot_observed_at":"2026-07-06T04:39:28.429064Z","submitted_at":"2015-12-10T19:51:55Z","title":"Deep Residual Learning for Image Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1512.03385","snapshot_observed_at":"2026-08-12T04:43:02.049844Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.049844Z"},"links":{"cited_paper":"/paper/1512.03385","citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:13e512dc5dcbe4b24b35e9cdd37a5c0c2ab2c84f45a3b79a2bc028a68738b0b7","observation_id":"fbd930e9-cf6d-40dd-870b-0b6e585b781a","resolution":{"observed_at":"2026-08-12T04:43:02.049844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.923816Z","title":"Benchmarking neu- ral network robustness to common corruptions and perturba- tions","venue":null,"work_id":"7189dd8e-6fbb-4950-bf2f-967173929214","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.054747Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:9fcef5e4286b35a324a1dfc678d01bf2daef19f414de58a4c7085599712883c3","observation_id":"ffe0fecd-611e-4d18-aed3-6d2936d0c60b","resolution":{"observed_at":"2026-08-12T04:43:02.929225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.908740Z","title":"Cubuk, Barret Zoph, Justin Gilmer, and Balaji Lakshminarayanan","venue":null,"work_id":"c1566bc8-cb54-4ba6-be40-50b89afc6278","year":2020},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.059413Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:a9bfa1ad43339a11fdebe076986a3c94215565092fbd5e6c02647198bdda9fdb","observation_id":"ad1522b7-55e0-4560-827e-f765552d2d0f","resolution":{"observed_at":"2026-08-12T04:43:02.913285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.894032Z","title":"The many faces of robustness: A critical analysis of out-of-distribution generalization","venue":null,"work_id":"98f04974-8059-4c9c-ad78-71955308813e","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.064009Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:b120c05ade94df70d5f89550f2a4210d102a150a928db720c76bd1feab84439b","observation_id":"27c2b910-a986-432c-a0db-47dad99e6146","resolution":{"observed_at":"2026-08-12T04:43:02.898693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.880624Z","title":null,"venue":null,"work_id":"0d2c16a6-cab9-4866-b812-da8bb9c37f74","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.068532Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:c0b9dc43dde83261b18b60e53350bd9b8d2184b19d05c2bcb08bf46a38e87331","observation_id":"2612c76d-29ac-4c6a-bad5-cd41b4f763dc","resolution":{"observed_at":"2026-08-12T04:43:02.884610Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.866850Z","title":null,"venue":null,"work_id":"953f59f2-12ca-41f2-b0a3-ace9c8b4d4f5","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.072459Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:c075dbdaa0bb4ff21c861d0723f28efad1c8ca47980f9ce147742cfb8e750d74","observation_id":"7f1cce28-18d0-463f-aad7-278b56c75b5f","resolution":{"observed_at":"2026-08-12T04:43:02.871249Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.852417Z","title":"Batch Normalization: Accelerating deep network training by reducing internal co- variate shift","venue":null,"work_id":"ba1bad3e-fe41-4df6-b1ac-bd6e66d733f0","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.076467Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:533138ef02b70790124e11d773236baa67cd949ce2e2074c600ef161881eed25","observation_id":"fe124f83-c4de-45a6-98a4-41fe1f1e664c","resolution":{"observed_at":"2026-08-12T04:43:02.857058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.837908Z","title":"Contrastive adaptation network for unsupervised do- main adaptation","venue":null,"work_id":"2d7a388c-d996-4e88-964c-1f3f9ef4ec69","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.080767Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:e2265ac8b725475b6f14ca9bd94f5aab5174cef81454a3adff03a3fbfdc35ce9","observation_id":"dbebd13e-e1f5-4494-aab9-136f9a955879","resolution":{"observed_at":"2026-08-12T04:43:02.842659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.822977Z","title":"Kingma and Jimmy Ba","venue":null,"work_id":"a77f385a-737c-41cd-9dab-ca24431fe6af","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.084899Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:37a9fd8ed0ffcd7ebc1ba8fd08e9b55bcf51f5777240fef8f7b9f6502f106127","observation_id":"94020d3f-1d39-4c8f-8ac5-eb09fc7bd230","resolution":{"observed_at":"2026-08-12T04:43:02.827792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.808573Z","title":"Pseudo-label : The simple and efficient semi-supervised learning method for deep neural networks","venue":null,"work_id":"db4da796-3e9a-4d94-9611-679e850655c4","year":2013},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.089187Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:cbb5f61f7cd8067bd4f5d5bac0708f7ce441d74a0f3b0cc99426d388104a18f3","observation_id":"78875cc5-7b52-4027-bbd7-27d427164e01","resolution":{"observed_at":"2026-08-12T04:43:02.813260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.794359Z","title":"Detecting adversarial image examples in deep neural networks with adaptive noise reduc- tion","venue":null,"work_id":"848f60fc-81fe-41e6-8871-2af221d3eabe","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.093148Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:26856a562a60e5ead4fa124dd8e8d926d03be0d69f4c9990bd4199050b52610e","observation_id":"d85c21c2-f65e-4e24-86e6-0df52c413280","resolution":{"observed_at":"2026-08-12T04:43:02.799022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.778655Z","title":"Do we really need to access the source data? Source hypothesis transfer for un- supervised domain adaptation","venue":null,"work_id":"e41742a3-431a-4026-9ca4-14821b8208ab","year":2020},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.097081Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:5f5260ca9e2824196a5aeef68434b7b21b7833105905627597c3eee106ceca43","observation_id":"3f9c2b0f-e424-45e3-b89d-e9ca9ddcc0df","resolution":{"observed_at":"2026-08-12T04:43:02.783263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.764108Z","title":"Self-improving reactive agents based on rein- forcement learning, planning and teaching","venue":null,"work_id":"ef918ea0-9331-4aa0-806e-3155391a390b","year":1992},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.101038Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:90fbfd9a1156679ca8274c1c9a5fd730af35f346091545cad4f2d72e82fcf0af","observation_id":"a5410266-c8fb-4a99-b2aa-7ee0f30c7423","resolution":{"observed_at":"2026-08-12T04:43:02.768872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.749084Z","title":"TTT++: When does self-supervised test-time training fail or thrive? In Advances in Neural Information Processing Systems (NeurIPS), pages 21808–21820, 2021","venue":null,"work_id":"c30c4cf8-576a-4db6-9875-c6d07b0a780b","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.105584Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:15f9c25b75413707753154308efa511e65236a0369d6ec9dc7a0a0378c741cb6","observation_id":"0b1e6fb2-2ef4-47dd-a4e2-532a211eff17","resolution":{"observed_at":"2026-08-12T04:43:02.754290Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.733863Z","title":"Greedy policy search: A simple baseline for learnable test-time augmenta- tion","venue":null,"work_id":"18e787b4-78e1-4f95-a572-8d52cad8bdf6","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.109903Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:204d2f2e7dafec187ac5c3f622a4e617f8ae6567c7371fc4db91e2350d763fd5","observation_id":"e79b642f-70e6-44c8-8b55-053d998b0b10","resolution":{"observed_at":"2026-08-12T04:43:02.738851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.718701Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"a2826bb5-f36a-4f9c-a344-17c886d17834","year":2018},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.114600Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:9c73678b6660d6e1aefc026f9e83e187123c24581060b84ef40ce5a5dda20a95","observation_id":"a7120f20-1ce0-44e3-b796-ad247273ebee","resolution":{"observed_at":"2026-08-12T04:43:02.723501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.703981Z","title":"Torchvision: Py- torch’s computer vision library.https://github.com/ pytorch/vision, 2016","venue":null,"work_id":"8041ba5e-09d1-42e0-a3f5-2dff3e9564ff","year":2016},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.119090Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:4e7a0ba08ab25770d0a53dddfa632afcb2bd4b5f3644014a66f9022ebf420e3b","observation_id":"764bcb8f-bf56-410f-a197-7f4e8b3e046c","resolution":{"observed_at":"2026-08-12T04:43:02.708425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.690221Z","title":"Univer- sal test-time adaptation through weight ensembling, diver- sity weighting, and prior correction","venue":null,"work_id":"f1e84b9f-5545-45ff-8ed9-16f90d5fbef3","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.123521Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:96089f460a123a0d1be9dfdc132a8ef711071cce7df8a01a82c42cdbf7d37446","observation_id":"a58516a2-2519-4907-bd42-52155b2d3941","resolution":{"observed_at":"2026-08-12T04:43:02.694640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.14999","last_updated":"2021-06-28T22:06:10Z","snapshot_observed_at":"2026-08-03T19:08:42.645000Z","submitted_at":"2021-06-28T22:06:10Z","title":"Test-Time Adaptation to Distribution Shift by Confidence Maximization and Input Transformation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.14999","snapshot_observed_at":"2026-08-12T04:43:02.128191Z","title":"Test-time adaptation to distribution shift by confidence maximization and input transformation","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.128191Z"},"links":{"cited_paper":"/paper/2106.14999","citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:4843121337008a54bb183a0664b49d4afe997b6bd2108660ba33222533114ed4","observation_id":"2470987f-6125-4241-8a66-fd30423b3f72","resolution":{"observed_at":"2026-08-12T04:43:02.128191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.676477Z","title":"Deep neural networks are easily fooled: High confidence predictions for unrecognizable images","venue":null,"work_id":"6c21e144-846e-479a-bb82-4f462ac44fdd","year":2015},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.133030Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:fd5190e306b52bdb9aaea8f5c14ca5f62a5b7584ec33f0f82fdd55d1d6e7f043","observation_id":"2099d03f-620c-425c-a752-dcf1099f595b","resolution":{"observed_at":"2026-08-12T04:43:02.680831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.661848Z","title":"Tuan Nguyen, Thanh Nguyen-Tang, Ser-Nam Lim, and Philip Torr","venue":null,"work_id":"065e655b-d4b7-4a87-b6f4-b17b34eef64d","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.137693Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:70ce5a0069e605e53ab338a3fa02988cd6716e854ba764b4ae3a55b26b296816","observation_id":"7fe0a2cb-84c4-4c30-b1f8-32a0cf3fe960","resolution":{"observed_at":"2026-08-12T04:43:02.666834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.647292Z","title":"Efficient test- time model adaptation without forgetting","venue":null,"work_id":"1992e9b3-0643-4fe9-a605-a2c2bc0532bb","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.142212Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:48e8511d60ea461b83b15384d72027efe09efbcd880caab32ce86591a6a110cf","observation_id":"093cdf72-3c1c-4b95-bec2-8d28d55515a8","resolution":{"observed_at":"2026-08-12T04:43:02.651991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.632066Z","title":"Towards stable test-time adaptation in dynamic wild world","venue":null,"work_id":"9e396b6c-38e9-4686-8217-463311ff4442","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.146936Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:703e680ae96e8e7c775d7598d360baef4c53ee09f33994d9d7753a70a0d87552","observation_id":"2e40f024-637f-4702-8a23-1fc22bd5cef4","resolution":{"observed_at":"2026-08-12T04:43:02.637209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.617139Z","title":"To- wards robust detection of adversarial examples","venue":null,"work_id":"166c8070-c1d3-4cc0-bda1-19c37e6084b6","year":2018},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.151721Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:ccb40c1d8715813017dfcb111ce44f227a874f82de052d8bf12f02b96c37cdd0","observation_id":"9e989a0d-0941-44e0-80db-b452051d2a28","resolution":{"observed_at":"2026-08-12T04:43:02.621968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.601308Z","title":"Distillation as a Defense to Ad- versarial Perturbations Against Deep Neural Networks","venue":null,"work_id":"db7df48a-0868-4db2-ace1-4e77cd36a961","year":2016},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.156132Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:e5b1ae42f2fd2e54978e355eb9450355f3a6213420c8601dc1aaf0687ad72f3f","observation_id":"cb76b16c-a0d4-48bb-b7be-9b3f36f4b052","resolution":{"observed_at":"2026-08-12T04:43:02.606251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.584116Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":"ce1317aa-af45-45eb-af9c-79825c09b66f","year":2017},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.160642Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:e9d4d7ecaa3c0746e737848f0ac1c9a9763728a4ecaca8a862c5832bae2aa249","observation_id":"50678730-253b-40a3-9fcc-57d0ffab5cab","resolution":{"observed_at":"2026-08-12T04:43:02.588940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.569103Z","title":"MedBN: Robust test-time adap- tation against malicious test samples","venue":null,"work_id":"839b3a2f-492d-40a9-aaad-ef0f017f2c2b","year":2024},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.165264Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:5662fba658c2f2f83dec0ebd0138607dc8955e8bdb692aa49d0da56a87782232","observation_id":"bd10519a-3ddb-4dfa-82c1-9a22a3fb2bac","resolution":{"observed_at":"2026-08-12T04:43:02.574009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.554004Z","title":"RDumb: A simple approach that questions our progress in continual test-time adaptation","venue":null,"work_id":"73ba69f0-cee8-4684-9805-2c852cb9e776","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.169967Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:903ec3f96900052a9f073b6c4d15bf406450acf37266a8a589b9df0fb9a8c7d2","observation_id":"a42dc7ab-6d7d-4c33-8c2c-b4e92d1d7340","resolution":{"observed_at":"2026-08-12T04:43:02.559094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.538994Z","title":"Lawrence","venue":null,"work_id":"01d64281-0c31-4b45-b867-47a4917bc1af","year":2009},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.174524Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:3dc54fc0de253ed1063e892f9b3f74abf5cc2f9829eecba987c12654ac3a0c72","observation_id":"1c20b4ea-4e70-478a-a8fe-5fd5b9c04d61","resolution":{"observed_at":"2026-08-12T04:43:02.543468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.523924Z","title":"A survey on image data augmentation for deep learning","venue":null,"work_id":"ce27f5d0-9e56-4c25-a07d-136442e72e3b","year":2019},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.178982Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:248c83e73c0211e6ec4943a3af33c8f835551aa866ed52c89c7921e5f08cb615","observation_id":"8a27da3c-5a2a-44bd-bcf2-9bd888273969","resolution":{"observed_at":"2026-08-12T04:43:02.528792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.508590Z","title":"Towards real-world test- time adaptation: Tri-Net self-training with balanced normal- ization","venue":null,"work_id":"7e71ef99-9be1-45f2-bca3-fc0151df4738","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.183495Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:301c782fd81f8c9716d3006e147cb0d908798f416b69db3a252a9943a6dfbdc3","observation_id":"ace08f22-589b-4b9e-bec7-8bba606c0141","resolution":{"observed_at":"2026-08-12T04:43:02.513001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.494698Z","title":"Test-time training with self- supervision for generalization under distribution shifts","venue":null,"work_id":"f53ecfb9-f660-4531-a646-1d1a0f863d32","year":2020},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.188239Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:9ceda88ed346a560fa3ea17eb5798428ec60ccf9c94fa9060d503f7911a206fd","observation_id":"3b3e8b45-2ccb-49fb-8917-bb2679989e62","resolution":{"observed_at":"2026-08-12T04:43:02.499173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.480942Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"9a04ecf0-97c7-4405-a9ba-902a04b1de89","year":2014},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.192943Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:fe645f3ea74aebd8bcffa9e5232a1587a3adda19d7cc8e92d42b6d22973aebbc","observation_id":"5db7203d-09ea-4dee-a97f-3527c454334c","resolution":{"observed_at":"2026-08-12T04:43:02.485209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.466335Z","title":"Mean teachers are bet- ter role models: Weight-averaged consistency targets im- prove semi-supervised deep learning results","venue":null,"work_id":"d607baad-b264-4e92-b29a-d2e91a752cc4","year":2017},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.197415Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:33278dad5769df9eeb71be6985f1a50993cdd100fb7fb1edd3e5461cd26a8ade","observation_id":"a733f7bc-af77-4987-a92d-889ac8f4cb95","resolution":{"observed_at":"2026-08-12T04:43:02.471207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.450959Z","title":"Visualizing data using t-SNE","venue":null,"work_id":"2ef23782-7078-4cf7-bb04-2ad7c70dfe05","year":2008},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.201980Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:0b45ec9fcb06707a66b57dac769acddbdd113d5a3b2ca0d5203adc8da03ecaf4","observation_id":"8d8a6c47-5a34-4381-af39-cbf1c059f2a0","resolution":{"observed_at":"2026-08-12T04:43:02.455798Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.435459Z","title":"Tent: Fully test-time adaptation by entropy minimization","venue":null,"work_id":"f3c04d1e-29c2-4058-9ad8-79e240d7e360","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.206444Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:258e1175e4ec5144dacc74147c0b0c5e071d6909fc8f4c8b24b2d4cf097cf038","observation_id":"16488855-9fd9-4052-b0be-0bbe75f22c39","resolution":{"observed_at":"2026-08-12T04:43:02.440495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.419965Z","title":"Continual test-time domain adaptation","venue":null,"work_id":"4c8c8daf-0aa7-41bf-a6ab-8a44e5f60f81","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.211585Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:826d96cb3be5e935e0a3aba806108cd5a091f9339ac91bfb7cb473a407c0f24e","observation_id":"37ecab8c-178c-481b-a153-2da3a9f0dae9","resolution":{"observed_at":"2026-08-12T04:43:02.424847Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.404215Z","title":"Vincent Poor","venue":null,"work_id":"d4ea2040-e7db-4ca9-abf3-b189c6279708","year":null},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.216231Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:c13085182b90d27f70d7403962e59b5af12f2f51fac9ccb1149364affcc69612","observation_id":"2427e3e4-24f5-48b6-b055-9a3aecaa0f96","resolution":{"observed_at":"2026-08-12T04:43:02.409521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.387202Z","title":"Wang, Vikash Sehwag, Saeed Mahloujifar, and Prateek Mittal","venue":null,"work_id":"7f40b136-ed5a-4374-8758-408db0815833","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.221030Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:9d556572cf7911fa90bc872c1671e62db1b1af6cc6009de038a1a42cecec442e","observation_id":"2de87f44-23e3-4ca2-8527-b90d333ba5d5","resolution":{"observed_at":"2026-08-12T04:43:02.392838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.370412Z","title":"Grey-box adversarial attack and defence for sentiment classification","venue":null,"work_id":"d0fec9df-fe2e-4b0d-a8ce-4f4806b45b2c","year":2021},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.225873Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:ceaa27886539dd8c5bd23c3bf16b5363d932cf68c749a1df6d10871c4345c322","observation_id":"22e896e5-19a2-413f-8418-668d0a2ade2f","resolution":{"observed_at":"2026-08-12T04:43:02.375353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.354788Z","title":"Robust test- time adaptation in dynamic scenarios","venue":null,"work_id":"d445658b-a837-4375-b5ff-9773864d12b3","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.230319Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:60b8dac3983cea65a8f3358e8ca6e467f9e38d3ee35aae88d56df601d2d0e0c8","observation_id":"980e59e8-cc74-4966-84eb-2a3724f9eecb","resolution":{"observed_at":"2026-08-12T04:43:02.359805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.338803Z","title":"Dauphin, and David Lopez-Paz","venue":null,"work_id":"5294b8e6-4f18-4e6d-ac61-382c212ac05e","year":2018},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.234492Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:bf00281aa9cfe3ba3d37bcc9690e7222ce40074a4fc27e21b8fdca14e954d181","observation_id":"cd356da2-74f5-4b4f-bb79-8ec2ca0097c9","resolution":{"observed_at":"2026-08-12T04:43:02.343828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.322852Z","title":"MEMO: Test time robustness via adaptation and augmentation","venue":null,"work_id":"9e0e01ca-e44f-41f0-86fa-141be234a8d7","year":2022},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.238585Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:925f6ad4b4788074d0949f85ef94e60c1e320f9d135b57c4207901e88d9d0815","observation_id":"1294b932-f646-4c18-8daa-bbab7882273f","resolution":{"observed_at":"2026-08-12T04:43:02.328319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:43:02.306835Z","title":"shifting boundary effect","venue":null,"work_id":"a8f3daa9-da59-4d62-bbfb-922bb39002a1","year":2023},"citing_paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T04:43:02.242563Z"},"links":{"citing_paper":"/paper/2412.01154"},"observation_digest":"sha256:75921b8dca14a22ddf3f1df1ce7452c8b963ee4295f1645339ea34ebdc9489a0","observation_id":"b3cb40d6-df79-43b9-bdd5-04dfc217deb5","resolution":{"observed_at":"2026-08-12T04:43:02.312282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.01154","last_updated":"2024-12-02T05:55:13Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-12T04:36:03.015279Z","submitted_at":"2024-12-02T05:55:13Z","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":0,"verified_fuzzy":51},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2412.01154."}