{"as_of":"2026-08-19T10:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:088095f3872ab459e9a2ec73ade08917488e619ffe1113304c7eb8cbae7f7758","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T21:46:08.595916Z","state":"measured"},{"denominator":49,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":49,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T14:57:31.353642Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04245","snapshot_observed_at":"2026-08-02T14:57:31.353642Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22544","last_updated":"2026-05-05T15:32:50Z","snapshot_observed_at":"2026-08-16T11:56:43.035970Z","submitted_at":"2026-05-05T15:32:50Z","title":"Concept-based Visual Counterfactual Explanations with Diffusion Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T14:57:31.353642Z"},"links":{"cited_paper":"/paper/2412.04245","citing_paper":"/paper/2607.22544"},"observation_digest":"sha256:8b8af4708ac30b5eddfda6a1521fa42d79e61b41267a5433e0d4a06fb087a99a","observation_id":"24a8236a-c857-43ed-ac22-59468d85589b","resolution":{"observed_at":"2026-08-02T14:57:31.353642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2412.04245/citation-record","integrity":"/paper/2412.04245/integrity","json":"/paper/2412.04245/citation-record.json","paper":"/paper/2412.04245"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2305.10388","last_updated":"2023-05-17T17:29:10Z","snapshot_observed_at":"2026-08-16T15:32:16.331108Z","submitted_at":"2023-05-17T17:29:10Z","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","version":1},"cited_work":{"arxiv_id":"2305.10388","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.10388","snapshot_observed_at":"2026-08-11T21:46:08.685756Z","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","venue":"cs.LG","work_id":"903a09c4-274b-42f7-a170-f691edbb5ddd","year":2023},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.404584Z"},"links":{"cited_paper":"/paper/2305.10388","citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:b410797781fd48a9e17c8ece6f3ea2e7de72d4e2b59c86d6d92c1c721f0d8511","observation_id":"987904d2-df95-48ce-b575-dd0593649624","resolution":{"observed_at":"2026-08-11T21:46:08.690109Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.345852Z","title":"Sorting out Lip- schitz function approximation","venue":null,"work_id":"847ddb52-bb25-4ed7-a47e-1467fcd2a0f2","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.409462Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:7e037bb4bda9cfdac46a59f2ce13a7a04dbe0e230529456ec24d5e33bc3111eb","observation_id":"292b5ca9-4f86-4c64-b468-5198bcccb9f4","resolution":{"observed_at":"2026-08-11T21:46:09.350836Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.331560Z","title":"Bartoldson, James Diffenderfer, Konstantinos Parasyris, and Bhavya Kailkhura","venue":null,"work_id":"83d0b73e-5958-447d-b03c-440a2357f9db","year":2024},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.413066Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:671dfbb3d1c3aa04e703c4ed6251bc81dcca01303e9d5d8c0ec3932ace85dcc0","observation_id":"6881a72f-9cec-429f-818d-6ca1fb08b7ee","resolution":{"observed_at":"2026-08-11T21:46:09.336101Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.317571Z","title":"Pay attention to your loss: understanding misconceptions about Lipschitz neural networks","venue":null,"work_id":"260f885c-59f0-4678-afa0-965b0c8533e6","year":2022},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.417278Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:7eb541de1af739b067ab2e425e988dc3acb0b408e83dcbeab98cb476a9c7ec82","observation_id":"7b04cc9a-3989-4f2b-a2af-3faada67ef45","resolution":{"observed_at":"2026-08-11T21:46:09.322567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.300368Z","title":"Lower bounds on adversarial robustness from optimal trans- port","venue":null,"work_id":"f9c3a781-84cb-471b-8580-255537d12474","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.421190Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:95fc8074971de30d4b09fee7bac3b9d43ea540bd084fe2f48667262ca605cb9d","observation_id":"93b4e849-96cc-46b7-9685-e975409be0dc","resolution":{"observed_at":"2026-08-11T21:46:09.306552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.280512Z","title":"Sample complexity of robust linear classification on sepa- rated data","venue":null,"work_id":"706153b9-8f7c-4102-bd58-d3b521408319","year":2021},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.425067Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:fbca458b6b725941a650fdb6dfd3cc58134d647611dbd0ccd36c159417fd9e2c","observation_id":"fc4b7a37-8f87-4c86-a6cd-41504082f469","resolution":{"observed_at":"2026-08-11T21:46:09.285330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.262948Z","title":"Adversarial examples from computational con- straints","venue":null,"work_id":"8887dd86-301a-474a-bf3c-c1f2bd652f39","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.429028Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:3bbf4be40302c528096d52deca13637bd1afea3c217fd4f499b668e2060cf728","observation_id":"32182e04-fc91-4620-bb1a-75b318ba6158","resolution":{"observed_at":"2026-08-11T21:46:09.269685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.249002Z","title":"A law of robustness for two-layers neural networks","venue":null,"work_id":"ec2755e3-b522-4a42-9bda-aef27befcbba","year":2021},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.432764Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:661d76f0f80e64fff90f51a402c87746236ea1e33f6f00c8b31fb68fa9be07cf","observation_id":"05cf5a58-5244-43ab-bddf-8b68763b3bd4","resolution":{"observed_at":"2026-08-11T21:46:09.253631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.235450Z","title":"Parseval networks: Improv- ing robustness to adversarial examples","venue":null,"work_id":"acced4a9-ad73-46a7-ad3f-303eca698762","year":2017},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.436375Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:5cad5c7c8fc6dda529b95a07f88b72827dc94846556e66c344b082d1de483faf","observation_id":"047bf134-6dab-4071-8bd8-0d698b709b9a","resolution":{"observed_at":"2026-08-11T21:46:09.239913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.221297Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"075d4e83-a6e9-442d-b009-ede47a8ca171","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.439712Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:13d3cec1d5e8637b91de75e6ded32d0781b6432c0dd0b2ce1dfaa0bc762d218c","observation_id":"bf677fb7-04f1-4c60-9f57-dffb4ea6bf7b","resolution":{"observed_at":"2026-08-11T21:46:09.225681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.205352Z","title":"Sharp sta- tistical guaratees for adversarially robust gaussian classifi- cation","venue":null,"work_id":"ef7dd51c-8b53-431e-a39c-ae8521c00ae4","year":2020},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.443444Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:1b0824d298a1e5fdd685a9ca2cb16e8dbcb2200367d992dd63f0c69955ad9604","observation_id":"eab2f57b-0771-4238-acc7-8f93143b18f7","resolution":{"observed_at":"2026-08-11T21:46:09.209672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.189818Z","title":"Computational limitations in robust classification and win-win results","venue":null,"work_id":"7ca2f254-fbf5-4660-a16a-c22913c8f50f","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.448027Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:68e958b29701f1a02038e0f3588cb9df6d11ee257e942311a74fd8dbce7470b6","observation_id":"a14181c1-0c75-4927-aab6-7db513f20572","resolution":{"observed_at":"2026-08-11T21:46:09.194606Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04065","last_updated":"2019-06-04T04:39:09Z","snapshot_observed_at":"2026-08-14T18:18:06.359178Z","submitted_at":"2018-10-08T10:13:48Z","title":"Generalized No Free Lunch Theorem for Adversarial Robustness","version":8},"cited_work":{"arxiv_id":"1810.04065","doi":null,"metadata_source":"pith","pith_arxiv_id":"1810.04065","snapshot_observed_at":"2026-08-11T21:46:08.667839Z","title":"Generalized No Free Lunch Theorem for Adversarial Robustness","venue":"stat.ML","work_id":"21e03fea-7342-4b4b-aa9d-9d96579c810d","year":2018},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.451555Z"},"links":{"cited_paper":"/paper/1810.04065","citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:ba3b354390d4b1e97a124403876ea17e2cac42571f2d9507c1d9157f8ae4a90c","observation_id":"7a3716a1-2f52-4673-aa5a-05017a9865d1","resolution":{"observed_at":"2026-08-11T21:46:08.672334Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.175555Z","title":"Analy- sis of classifiers’ robustness to adversarial perturbations.Ma- chine Learning, 2018","venue":null,"work_id":"b9591d29-5187-445b-93c2-ea85c4f1064a","year":2018},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.454911Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:7cab8ac9a3b08729be555260d086e510118c69c9717220d8ce8369482a15ddee","observation_id":"26e9bfb1-d2cd-4744-ae39-8efc7215bbf6","resolution":{"observed_at":"2026-08-11T21:46:09.180476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.160019Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"91d4cc9c-bd96-446c-a362-071477be8814","year":null},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.458368Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:658f485549fb2f6c8a03dd76245bedc59e6f63d7d1ef324f6166ef76e68dca1d","observation_id":"192e4852-39e2-40ac-9216-3d7245485cac","resolution":{"observed_at":"2026-08-11T21:46:09.164686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.140520Z","title":"Improving robustness using generated data","venue":null,"work_id":"b0ac05f5-2848-456c-8b78-fa7967a97cc6","year":2021},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.462463Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:42e1dfa93d8591da84261061a1740b7014d44536642152012e04e472fb04bc6d","observation_id":"6ae7861b-25b1-417b-855a-f31a40c8f161","resolution":{"observed_at":"2026-08-11T21:46:09.145614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.110584Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"1f534f5a-3fa3-4fa0-9785-d3dd2ab79172","year":2016},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.466007Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:c345e6ae89b245eee51e4646dbfc611ae2a5467bc5c3edec89e2d3f0b8b57ec4","observation_id":"b629f5e8-76c4-44a4-9395-62e78833ff33","resolution":{"observed_at":"2026-08-11T21:46:09.116369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.090164Z","title":"Unlocking deterministic robustness certification on Imagenet","venue":null,"work_id":"12f806ce-f782-4996-ad6d-dea28947bb59","year":2023},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.469678Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:f460b7f7bf3869a29cb25d2bd69967eab0fe92a7eacbc499a254ff1a00dc25b7","observation_id":"7f1dbb22-d55a-458c-b4ee-701644c05056","resolution":{"observed_at":"2026-08-11T21:46:09.096764Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.075164Z","title":"A recipe for improved certifiable robustness","venue":null,"work_id":"b2ec3575-c437-4925-b794-3acb74762757","year":2024},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.473296Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:8d5f0cdd14cf7942e9bfd33aaddc5cc86865ea2e6fe16432b6481a9ed26561ce","observation_id":"334a364d-0373-4f32-9526-d9e9da52843f","resolution":{"observed_at":"2026-08-11T21:46:09.080526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.060189Z","title":"Adversar- ial examples are not bugs, they are features","venue":null,"work_id":"495308f6-a6d6-4efa-8c1e-222b3b5650e9","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.477443Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:45b2724e52890bd74c3a90f9075e5ef48657bdfb39821dcf2505ef6e7c5e515b","observation_id":"661bf8e3-0734-413b-9693-3eb455a52b07","resolution":{"observed_at":"2026-08-11T21:46:09.064721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.044717Z","title":"Batch normalization: Accelerating deep network training by reducing internal co- variate shift","venue":null,"work_id":"fc9f94f9-49fc-434c-9cbd-afef3ed972ca","year":2015},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.482825Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:08d77ad59787e99954f5caffb9b9201c011fa7f712ff4df606b440073cc73d1b","observation_id":"3f5f3a37-61a5-4342-aa40-13575e91e99d","resolution":{"observed_at":"2026-08-11T21:46:09.049891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.030501Z","title":null,"venue":null,"work_id":"8d5c33c7-7396-43c0-8183-e7b2363f2b80","year":null},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.487135Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:3ee500ba5e33def12604c5221b0621066292dff0e8aec094966291fa0db35e1c","observation_id":"b89d5961-5e0c-4515-87b0-c47a36ed9e6b","resolution":{"observed_at":"2026-08-11T21:46:09.034983Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.016910Z","title":"Why robust generalization in deep learning is diffi- cult: Perspective of expressive power","venue":null,"work_id":"d88ad3b7-1757-4ee2-b10a-617d0c3c539f","year":2022},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.491301Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:ac0fff6b0f830b4660021d365700f72c8d4284302da360ebfc1f396ae069deb0","observation_id":"1faa86c1-4418-46e1-b8d0-2ac5fd54d6f6","resolution":{"observed_at":"2026-08-11T21:46:09.021721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:09.003203Z","title":"A dynamical system perspective for Lipschitz neural networks","venue":null,"work_id":"189dd8e5-481c-40d9-8355-ff0c3f8bf52b","year":2022},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.495443Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:792d1dda5e95d1c3e80045d0367519ff6f83aeec8319ab5894293b72e41fad22","observation_id":"bd2d6a7a-17f0-4a6d-82eb-f7b12e0a2ead","resolution":{"observed_at":"2026-08-11T21:46:09.007593Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.987492Z","title":"The curious case of adversarially robust models: More data can help, double descend, or hurt generalization","venue":null,"work_id":"1200680b-c44e-4ac4-b003-9b759a13409d","year":2021},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.501324Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:df6b587e061f58d2bc15cb8731fdec216d6d6d20d1fff2f573c213cd5897fcb9","observation_id":"57889c89-111d-4845-af66-d12896a8a140","resolution":{"observed_at":"2026-08-11T21:46:08.992258Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1901.00532","last_updated":"2019-01-02T20:54:07Z","snapshot_observed_at":"2026-08-16T18:46:05.893780Z","submitted_at":"2019-01-02T20:54:07Z","title":"Adversarial Robustness May Be at Odds With Simplicity","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1901.00532","snapshot_observed_at":"2026-08-11T21:46:08.505269Z","title":"Adversarial robustness may be at odds with simplicity","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.505269Z"},"links":{"cited_paper":"/paper/1901.00532","citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:d9d240e0402ea7d3fda63c1102bdf39448be91101b9c09768270bd8193bca518","observation_id":"839af719-fdca-402a-8857-99f6780c89ab","resolution":{"observed_at":"2026-08-11T21:46:08.505269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.974590Z","title":null,"venue":null,"work_id":"14330cf8-5b66-42aa-b4ab-ddc90ac2a567","year":1901},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.510431Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:48ca651a403db7861f3f76217679d5ccec8ecccda6f9f4316a3dd1f726b0f3d0","observation_id":"3ef02021-91d4-47e3-9654-01db15f0b76b","resolution":{"observed_at":"2026-08-11T21:46:08.979009Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.963260Z","title":"SimpleConvNet","venue":null,"work_id":"f12e9baa-a034-4df9-b49f-04cf79a4f53f","year":2024},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.514978Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:17d405eb286bbf9b2a95b6555012e21ab51644cda32428764384a3d503ff3410","observation_id":"e89aa632-cf95-4f25-8d45-d12bb8c87dd3","resolution":{"observed_at":"2026-08-11T21:46:08.966739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.951079Z","title":null,"venue":null,"work_id":"44d49450-ce4d-44e0-943b-2e8e7cf22a5a","year":2022},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.518863Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:ab8a86d4621fd0606a5603df26b52be353ef5f8e7d97de02915c14214a27c632","observation_id":"02ec7cac-0564-4915-b051-669cb6668526","resolution":{"observed_at":"2026-08-11T21:46:08.954979Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.06103","last_updated":"2024-06-03T15:20:13Z","snapshot_observed_at":"2026-08-16T14:44:20.300517Z","submitted_at":"2023-11-10T15:12:04Z","title":"1-Lipschitz Neural Networks are more expressive with N-Activations","version":2},"cited_work":{"arxiv_id":"2311.06103","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.06103","snapshot_observed_at":"2026-08-11T21:46:08.630069Z","title":"1-Lipschitz Neural Networks are more expressive with N-Activations","venue":"cs.LG","work_id":"80db6ddd-55b8-468b-bdf5-3a09cba5bf1d","year":2023},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.522677Z"},"links":{"cited_paper":"/paper/2311.06103","citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:ce73ec22d67d88e0f90ca3b378919783fbad55065bcb5fd727534bf32fb77a99","observation_id":"b483c782-c923-4a39-9a60-d9d79309a1f5","resolution":{"observed_at":"2026-08-11T21:46:08.636820Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.938621Z","title":null,"venue":null,"work_id":"6e53b44a-5990-4819-8e30-9325de3cfb83","year":2024},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.526946Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:956fc665d82ac68dfc85425b64d9a452bf8e30700f4e256bc1269787e4b2f761","observation_id":"a37de3a9-dc10-4fb0-9c3b-d961160ab1f4","resolution":{"observed_at":"2026-08-11T21:46:08.942778Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.926163Z","title":"Adversarial training can hurt gen- eralization","venue":null,"work_id":"1281d339-f6bb-4be3-a049-94581f282495","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.530655Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:8323e61cbca22ff018768fa77742bd4020eb85b435c6cfc4e1da84a6c10abff2","observation_id":"69630e69-0506-42d2-96f2-8a3441befa6d","resolution":{"observed_at":"2026-08-11T21:46:08.930184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.912940Z","title":"Understanding and mitigating the tradeoff between robustness and accuracy","venue":null,"work_id":"8fe41b64-12f7-4154-b409-1108533cd04c","year":2020},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.535015Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:cc9479e5f4afdeccf450a3de7714598185a7649bcf30299dcb4129a278175d19","observation_id":"ec1c54bf-3be0-4999-b763-27b7a78cd169","resolution":{"observed_at":"2026-08-11T21:46:08.917362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.899889Z","title":"Adversarially robust gener- alization requires more data","venue":null,"work_id":"eeda14a2-2a1e-4a40-bc88-bdc5b93c8470","year":2018},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.539152Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:989df1ec66056e2a11868a8fb9cde7591d62186eb3dbc161b56e7268c2ad3df2","observation_id":"06146b40-6249-4efe-9864-24e240e03dd1","resolution":{"observed_at":"2026-08-11T21:46:08.904254Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.885585Z","title":"Understanding Machine Learning: From Theory to Algorithms","venue":null,"work_id":"a219f3f0-48a8-4191-92c5-a2fe4ebbb2c3","year":2014},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.542947Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:4406dfffb88602e106ad5199cb0e1a5f1c8933a6c1e56b1a23ee5d1c205ec615","observation_id":"71295f6b-9109-4645-acb8-19156d77838d","resolution":{"observed_at":"2026-08-11T21:46:08.890865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.871893Z","title":"In- triguing properties of neural networks","venue":null,"work_id":"38676f95-f5ec-4e17-8e63-c883987dbfa2","year":2014},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.546575Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:7acd1a0bb4c2a93e842716f8756ef76e0e5c9f0948df3bcf032883dd8b1573c4","observation_id":"3819c203-1694-4153-b8bc-1ab1b60610d4","resolution":{"observed_at":"2026-08-11T21:46:08.876175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.857757Z","title":"Robustness may be at odds with accuracy","venue":null,"work_id":"bda3a7c4-adf0-4189-b21f-3ec7e7fbe979","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.550296Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:578dca1ae69db6bd6e66d1c6e69e43170aadeed02f3fb8b3fb47511fe420e304","observation_id":"0cee9537-971c-4b14-b5cb-993c06213f81","resolution":{"observed_at":"2026-08-11T21:46:08.862137Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.844066Z","title":"Lipschitz-margin training: Scalable certification of pertur- bation invariance for deep neural networks","venue":null,"work_id":"c9b558bc-e31f-466f-b6b8-c3bc86d53bea","year":2018},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.554073Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:9ddc1a8ed252dc0c0477076a99e8fc3d74f69c6b96d6dd635133ff395eb1d815","observation_id":"8237b94b-0849-4276-b14b-491d1a7dad46","resolution":{"observed_at":"2026-08-11T21:46:08.848600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.831429Z","title":"Lipschitz regularity of deep neural networks: analysis and efficient estimation","venue":null,"work_id":"a2850c26-bf6f-4355-ba66-d16d29c354cd","year":2018},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.557733Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:33ffdc27f32b66cfc407b080c6cc8141ec396236797a9aeb61cfe3da78cef9d5","observation_id":"43a786d9-48ff-4ab3-aa5f-e637444b97b5","resolution":{"observed_at":"2026-08-11T21:46:08.835266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.817702Z","title":"Better diffusion models further improve adversarial training","venue":null,"work_id":"eb8e16c3-2d14-44c2-a72d-43287b5d7cb6","year":2023},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.562520Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:c8bbc19bb3cc5f5264a5ab5c8d31feb04d96546fd5acc6f0418bf7655999b73f","observation_id":"ac614304-bf93-4a2e-aff0-499b4ee51e78","resolution":{"observed_at":"2026-08-11T21:46:08.822432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.799898Z","title":"94% on CIFAR-10 in 94 lines and 94 seconds","venue":null,"work_id":"8b4962b9-ea7e-41fa-aabd-488ca5696329","year":2022},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.567438Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:29bec8f5ea2037625d5c9741950d2141ebb345b4751d0794a226c6c5ee7c1921","observation_id":"507dfa4a-fcd9-4868-b389-a6d2606d3a2c","resolution":{"observed_at":"2026-08-11T21:46:08.805644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.782104Z","title":"LOT: Layer-wise orthogo- nal training on improvingℓ2 certified robustness","venue":null,"work_id":"7721f642-c6ee-4980-bdc9-c987898a2dad","year":2022},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.571806Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:a24d6b174d6106a78116576a0a15fd5accc332ce4db9018efcde20c7b3a4508e","observation_id":"aad141e6-a26e-4643-9d48-856e73e21b8a","resolution":{"observed_at":"2026-08-11T21:46:08.790324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.768084Z","title":"Theoretically principled trade-off between robustness and accuracy","venue":null,"work_id":"30a1817c-addd-4fb5-8090-34593a898613","year":2019},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.575848Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:f310beb3e124fd68f806bc18a9409c8d4333048ef6f1350a4c62751d5413301f","observation_id":"41aff2b8-ec27-479c-b840-a8c23ab421ca","resolution":{"observed_at":"2026-08-11T21:46:08.773086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.754304Z","title":"Recall Theorem 2","venue":null,"work_id":"ad21ba69-08b1-4bc5-9e9c-4ec10a080e1e","year":null},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.579305Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:e67b93de9acc980379729dd1f3de9967cf7f76493c67cabafe4ec172eca22cfc","observation_id":"4d3e5c9c-0a17-487c-92b1-9a370a79bcd9","resolution":{"observed_at":"2026-08-11T21:46:08.758436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.741460Z","title":null,"venue":null,"work_id":"7248ee9d-5d5d-4f78-9f72-778a5c6408f6","year":null},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.584320Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:01a3833e406393510b2b101b95b1eafc26e6d42c0011d0ff07cf330131f81584","observation_id":"7b97cf02-f5ef-4f0f-b63a-525bb4595f6e","resolution":{"observed_at":"2026-08-11T21:46:08.745391Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.729296Z","title":"For the performance on additional subsets of prin- cipal components see Table 1 and Figure 7","venue":null,"work_id":"356dd7df-7efc-47fe-adb6-929424f7b8e1","year":null},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.587885Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:06fd0cbfd09d0788fb5b35268abe4c9307a6ed77855348d8e0c5f073487c611a","observation_id":"02f636a1-15a7-4ae2-80ed-2c72c3485d80","resolution":{"observed_at":"2026-08-11T21:46:08.733699Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.710936Z","title":"Often the architecture, layers, and the training pipeline in general is different depending on whether accuracy or robust accuracy is the goal metric","venue":null,"work_id":"7e1bffe9-b79e-42e3-b274-b1fbe3a66c04","year":null},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.591198Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:bb34f4264e820b69b356b0414f78df1bf57050edc3f35df2d74504450d177d52","observation_id":"c14b5293-2dde-4f5d-868e-de355261e484","resolution":{"observed_at":"2026-08-11T21:46:08.716023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T21:46:08.698503Z","title":"In this section we want to explore why this might be the case","venue":null,"work_id":"51dcfb3b-ed1e-489a-a1ff-ba93d2852b91","year":null},"citing_paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-11T21:46:08.595916Z"},"links":{"citing_paper":"/paper/2412.04245"},"observation_digest":"sha256:354941243dab47048270040673e4af82194f7c296750258a291693183d58b1b0","observation_id":"fd42b669-8b30-479d-945c-5da621f92cdf","resolution":{"observed_at":"2026-08-11T21:46:08.702755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.04245","last_updated":"2025-07-17T09:22:28Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T20:15:34.109172Z","submitted_at":"2024-12-05T15:27:39Z","title":"Intriguing Properties of Robust Classification"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":6,"verified_exact":3,"verified_fuzzy":39},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 1 inbound Pith citation observation for arXiv:2412.04245."}