{"as_of":"2026-08-18T13:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6a57b5f96ba84c652179aba7927d9f9ab12639782da074cb8343d52b855bacd0","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T22:38:55.305976Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2501.01106/citation-record","integrity":"/paper/2501.01106/integrity","json":"/paper/2501.01106/citation-record.json","paper":"/paper/2501.01106"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.141918Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.141918Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:d1fab1edd5e942436cc24fe4c126f2fb4bee8ba0733f75688ec5dd0a6549885b","observation_id":"c6e6a6d7-f8be-4b65-83e6-10947639b971","resolution":{"observed_at":"2026-08-10T22:38:55.141918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.146943Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.146943Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:8988548a7f3a9de9bc03decf96153f41c4f4624bc1d72e2fee37ee868dc81ccb","observation_id":"fcfddee7-ec73-40f5-9e55-c5b1eba2ef48","resolution":{"observed_at":"2026-08-10T22:38:55.146943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.741822Z","title":null,"venue":null,"work_id":"b60c0063-0204-4c34-911a-a9138bbc6457","year":2022},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.151157Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:72562e6f44f9bc68f1b73ea55cad205b234ac69c7e38db8846c6f66327427a41","observation_id":"218d1ff7-35a1-4ed7-8e7f-34c0fb65deb8","resolution":{"observed_at":"2026-08-10T22:38:55.745472Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1703.09387","last_updated":"2017-03-28T03:24:33Z","snapshot_observed_at":"2026-08-14T21:09:42.918858Z","submitted_at":"2017-03-28T03:24:33Z","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.09387","snapshot_observed_at":"2026-08-10T22:38:55.155374Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.155374Z"},"links":{"cited_paper":"/paper/1703.09387","citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:ad97ca86621a35e625ce4fbbfd37c0d835a763a2ad68fe1857cac9a688467161","observation_id":"677533b2-d8f6-4872-b066-423567e7194c","resolution":{"observed_at":"2026-08-10T22:38:55.155374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.731029Z","title":null,"venue":null,"work_id":"2af2aa12-4c90-4185-88df-4bc0b40f6f9a","year":2022},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.160083Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:ed165adc23cc74d723847c0ae5dc7299f5347ee182242e3020d95e4e9609a1cb","observation_id":"34053cd4-0240-41ba-a002-c83399c9adf1","resolution":{"observed_at":"2026-08-10T22:38:55.734653Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.720655Z","title":null,"venue":null,"work_id":"63ec2eda-db41-48cf-8004-0bc54b8133ef","year":2023},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.163962Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:6fa24ccdcc4dbc94f568860b44788efd8e956656c9c66bb56d0ff8a5c9a4b056","observation_id":"902040de-7350-4b7b-bbe7-523b6a4cd716","resolution":{"observed_at":"2026-08-10T22:38:55.724259Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.710284Z","title":null,"venue":null,"work_id":"f9ac03f2-fbe0-4f2a-9503-827ad1fe4137","year":2019},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.168146Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:9f89cd05e54ede169c0ab39d2b1e8f330d5e9197470ac1356b4e11d7dccf221d","observation_id":"f3fcac0a-b87f-443e-9410-63bcfda98bf5","resolution":{"observed_at":"2026-08-10T22:38:55.714071Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.700503Z","title":null,"venue":null,"work_id":"73d88e99-3f8e-4733-a2ca-5dc605feb71a","year":2009},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.172138Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:853b7747f341d193b3c358a03dbf43bd4504afbef940126634390a719fe69344","observation_id":"42077a59-7f92-4cda-add6-cbcf8736b1c0","resolution":{"observed_at":"2026-08-10T22:38:55.703873Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-16T09:25:53.087782Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-10T22:38:55.176124Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.176124Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:aa0e5a6f2bc06d533efe904f50220ecdde77003020e18e60e3aff1e5b5ad3783","observation_id":"cd53f5ae-95ba-4ff5-b440-b42017d7bb5b","resolution":{"observed_at":"2026-08-10T22:38:55.176124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-10T22:38:55.179907Z","title":"J.; Shlens, J.; and Szegedy, C","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.179907Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:025a2c9370388bd7ac0e4750e52000a6b15d0e6383eca6b9787fc8c13fe52619","observation_id":"2c65edf7-bfe5-45b2-83ee-8ae79c3f3825","resolution":{"observed_at":"2026-08-10T22:38:55.179907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.184535Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.184535Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:19357f943cfc0c0358d0d3f93a6a12dceab122e97e87b54bae20cd1df7a01902","observation_id":"8a9d780f-f9a3-4170-a042-762a875017d2","resolution":{"observed_at":"2026-08-10T22:38:55.184535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.188599Z","title":null,"venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.188599Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:fddd469bc308dd921b92b100efb24e57fb711747f95644c60edd4169861b4cab","observation_id":"2ae6d37f-0a87-4c1f-9a13-b3b57d603df2","resolution":{"observed_at":"2026-08-10T22:38:55.188599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.677035Z","title":null,"venue":null,"work_id":"7bd95caf-f8ac-493c-8226-4198b8b4c6f9","year":2018},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.192055Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:70598711e4522efcef86aaf0ba3b78067a007a7d0c85dbb8991ae01b2c63e5fd","observation_id":"499a7260-91c5-48d7-9b04-f3396b076295","resolution":{"observed_at":"2026-08-10T22:38:55.680258Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.667459Z","title":null,"venue":null,"work_id":"fafabdce-69cb-432e-9891-b0ab636842f2","year":2017},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.195624Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:5c710d21df8754cb0e7a6e7346db8ccdd14714970bd2c29cb2bfb4afea1a4d65","observation_id":"1081808d-80fd-449c-9a8e-bcddf346a572","resolution":{"observed_at":"2026-08-10T22:38:55.670765Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.657361Z","title":null,"venue":null,"work_id":"40f74f07-9447-4dbd-a6b2-c4ac2ce003f3","year":2013},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.199771Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:e9ff97a887514fd39c8718b730b93dee69c5e686c5e1267b7628498ecc4f2f14","observation_id":"8b26aef7-b30c-4e49-b8a4-3b77e5e154b2","resolution":{"observed_at":"2026-08-10T22:38:55.660798Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.646980Z","title":null,"venue":null,"work_id":"31466b7e-90d2-49ba-806c-623e7cd456d8","year":2012},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.203613Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:35dff87b45ed969dbe9121d74e947c5769cb8f917b83de8d2effd75d2d04ec88","observation_id":"b15f1d9b-91a2-4c3b-9732-382445916c43","resolution":{"observed_at":"2026-08-10T22:38:55.650533Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.636383Z","title":"J.; and Bengio, S","venue":null,"work_id":"9fa99f6f-a673-44e2-8716-3da8a7d12fc7","year":2018},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.207163Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:64042af3b3bd79eb923291edc80c7afece200b1c2545dcd736d081499d79b621","observation_id":"0480365d-3cc7-4a1b-9f6f-6ee8d7775d25","resolution":{"observed_at":"2026-08-10T22:38:55.640200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.211293Z","title":null,"venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.211293Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:c75e0fb6f7da133a528aa7c6411f792e56a4a4c99734469dc586aba09f84739c","observation_id":"cf10373b-890e-477e-a7ad-fc3a1da23377","resolution":{"observed_at":"2026-08-10T22:38:55.211293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.620522Z","title":null,"venue":null,"work_id":"ebc0ed17-40d0-41bc-a2f2-0159b17e6ba7","year":2020},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.214995Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:e2560a2f44980554f655bd259a787e4987bdb1802764016ae98b475e28189848","observation_id":"d0f7f031-bf3c-4bf1-8bf5-bd5d2d52e8e8","resolution":{"observed_at":"2026-08-10T22:38:55.623986Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.610158Z","title":null,"venue":null,"work_id":"e8bab44b-2249-410f-95fa-dbdcf8593698","year":2024},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.219768Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:048ad4356b46dc90c72c1546a11cf70ea2b2e456f673780be9dceae0421890ec","observation_id":"0ca227b2-05c5-4bbf-b14a-6f13380da86f","resolution":{"observed_at":"2026-08-10T22:38:55.614135Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.599467Z","title":null,"venue":null,"work_id":"f9aa0707-7ba4-44b1-8bd5-c2dbfdb4eb73","year":2023},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.223948Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:831f8eb2351e9e7be39ee899aa291d97992c38048dbb89575be75eee46ae508c","observation_id":"a89eb062-e691-4162-8217-6ba50ae340b0","resolution":{"observed_at":"2026-08-10T22:38:55.603559Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.588404Z","title":null,"venue":null,"work_id":"7ce211c1-6605-4609-84e7-dce002456eb6","year":2021},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.227654Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:39490f79b8038d9c24221af1c63178bea835bcb7912ac2836a9f31aab34b6252","observation_id":"63ad7efa-207a-40bc-9802-9adaefa2852a","resolution":{"observed_at":"2026-08-10T22:38:55.591846Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.577230Z","title":null,"venue":null,"work_id":"16380a10-2d52-499a-b0ca-d657735ee89f","year":2020},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.231344Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:c5471ac3169c238f54d0b2fd1a7d27230caa05b52fef96f1cf9da49832c108b9","observation_id":"622c147d-0d9a-4275-83b9-1164fbff6276","resolution":{"observed_at":"2026-08-10T22:38:55.580888Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-10T22:38:55.235242Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.235242Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:9d0a9e436d888e68d117ee4ec5633db269ca126d01980be31dd831b87d059fbc","observation_id":"f1c3be38-9e11-4d60-a08d-d3700a8c61d1","resolution":{"observed_at":"2026-08-10T22:38:55.235242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.566151Z","title":"S.; and Porikli, F","venue":null,"work_id":"379a5c0a-1193-4b90-ba3a-c916a884ffce","year":2021},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.240007Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:9cc2adc89bda45a0883580a12f9d9c2f8e65e90385b31ff33de5de9487f3912e","observation_id":"77ecc665-06e3-4891-9d33-2ceaa13a63fd","resolution":{"observed_at":"2026-08-10T22:38:55.569752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.555654Z","title":"M.; Khan, S","venue":null,"work_id":"a83e193a-f1a5-401b-bfac-1dee34351fcd","year":2019},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.243612Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:554a382baa4e4304f0031c53869699623555dda3df07dedc5d581e48b799dbb3","observation_id":"1e59e2ba-7683-4f36-b997-83f7db40990d","resolution":{"observed_at":"2026-08-10T22:38:55.559190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.545321Z","title":null,"venue":null,"work_id":"def2d943-0870-44c5-8f4d-5eedf5c4fc69","year":2008},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.247468Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:fd12dfefbdc13f8a88b709ab26fc09152178e6448c19626a59264a1806c06605","observation_id":"20760fd7-0ade-44dc-be4d-52d536116b61","resolution":{"observed_at":"2026-08-10T22:38:55.549005Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.532449Z","title":null,"venue":null,"work_id":"f559d3f4-db91-4f5c-af3b-8b7f70967483","year":2019},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.251806Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:10838414afb60d35f260cd047a91e848527b928830934b956cea92b959e02046","observation_id":"f4775329-6a7a-4a1d-866c-194eceb779cf","resolution":{"observed_at":"2026-08-10T22:38:55.537400Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.521954Z","title":null,"venue":null,"work_id":"5261b073-3c8c-4c05-985d-a760d980f048","year":2018},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.255573Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:9294bf3544c3024a5a46e1ca00315264df9f4d47d55c187cbc92b4ffbc4a2287","observation_id":"ea727010-32af-4e4e-8e47-f4b2e6e6b7d9","resolution":{"observed_at":"2026-08-10T22:38:55.525838Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.259273Z","title":"W.; Hallacy, C.; Ramesh, A.; Goh, G.; Agarwal, S.; Sastry, G.; Askell, A.; Mishkin, P.; Clark, J.; et al","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.259273Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:fa3aa9eb3260771de2d1b1e536ef09e0bb90042f8f0a6394d0c326ffb7cc4572","observation_id":"d24093b5-f175-4929-89a3-aab4222aeec4","resolution":{"observed_at":"2026-08-10T22:38:55.259273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.504433Z","title":null,"venue":null,"work_id":"c1d797fe-c979-41e0-9286-b363dab56607","year":2016},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.263011Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:4328a595a52df0f0d17b07da130affa087f8f4556454bd20733dddfa00409e7a","observation_id":"7b60aa9b-a1eb-4ad8-ba35-2e023bf68557","resolution":{"observed_at":"2026-08-10T22:38:55.508127Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.266904Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.266904Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:2cd31bc9adf926f5be7e9e03d6b7942f963e942e6d16795b8dca312aafc42bc4","observation_id":"cc3ae560-5744-4cca-b782-6a6f8d73231d","resolution":{"observed_at":"2026-08-10T22:38:55.266904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.486920Z","title":"R.; Cogswell, M.; Das, A.; Vedantam, R.; Parikh, D.; and Batra, D","venue":null,"work_id":"e6f745a1-92ff-447f-943c-ced5386ed766","year":2017},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.270800Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:2fa27e57f2df8f1211eeeb5c7e2e2af83bf2861f694090cff738e2bb8932e27b","observation_id":"c038c545-d322-4293-8c94-edab6164df96","resolution":{"observed_at":"2026-08-10T22:38:55.490904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-17T19:17:06.411141Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-10T22:38:55.274592Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.274592Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:bb88c0e064f91956cb93fbbdcd77e19b25efc466ca88cd422ff375f1e427a78a","observation_id":"cd8d5ea2-2f1e-45de-8e88-b38f1d95ee82","resolution":{"observed_at":"2026-08-10T22:38:55.274592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-10T22:38:55.278533Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.278533Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:40e0ffcde9d642bf8108e994fe82c04b7acd75fec581e09cfbac7ba5c352a7cf","observation_id":"19b297f2-f547-49c8-9140-a33b0ceb5c6a","resolution":{"observed_at":"2026-08-10T22:38:55.278533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.282943Z","title":"N.; Kaiser, .; and Polosukhin, I","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.282943Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:c54fe417def59e98c2e87c5a30d0375accc6392fe1b032ac0599e0c6ca245bf4","observation_id":"d25b752a-ffc1-4d44-a393-723cb0dec152","resolution":{"observed_at":"2026-08-10T22:38:55.282943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.467217Z","title":null,"venue":null,"work_id":"fb02be6e-67b0-4420-a324-38648ea528f0","year":2011},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.286458Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:0990312c7de02d87413f5054d5455ef6a44700ae9706737842321c402838781d","observation_id":"5d3556ab-a056-4972-9baf-4c3cf2f500ef","resolution":{"observed_at":"2026-08-10T22:38:55.470881Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.455954Z","title":null,"venue":null,"work_id":"2434318c-9a2e-489c-a36b-4b136568a144","year":2023},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.290222Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:df20daecd7e6d1d3f25e08452b52a2919881758621fec833ed4bac4de56b69bf","observation_id":"59315ca4-f5b7-495a-80ae-aab7caea6d20","resolution":{"observed_at":"2026-08-10T22:38:55.459458Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.444920Z","title":null,"venue":null,"work_id":"660e1f31-1e5c-4eeb-a1cb-fd3a90d2d4ac","year":2019},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.293873Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:46f0c53634e839cc279611735265d9db321ccf9d4537e133a7a748b89f11c39f","observation_id":"71a68049-891c-4eac-a6ac-003ba08e71fd","resolution":{"observed_at":"2026-08-10T22:38:55.448764Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.433883Z","title":null,"venue":null,"work_id":"cecd2106-2df4-49b8-a86b-bbdbe05efedc","year":2024},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.298261Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:e23236dffb0dcdfc56e8781d37b69c12200a4aab98b1e6501f3c3498498daf67","observation_id":"d45a9bf0-9b7b-4a41-972d-577b74168230","resolution":{"observed_at":"2026-08-10T22:38:55.437750Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.11528","last_updated":"2022-03-14T11:42:30Z","snapshot_observed_at":"2026-08-16T17:25:31.507498Z","submitted_at":"2022-01-27T14:04:27Z","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","version":4},"cited_work":{"arxiv_id":"2201.11528","doi":null,"metadata_source":"pith","pith_arxiv_id":"2201.11528","snapshot_observed_at":"2026-08-10T22:38:55.339661Z","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","venue":"cs.CV","work_id":"efd06579-ec32-4b2c-b108-3cd31e4d6f57","year":2022},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.301834Z"},"links":{"cited_paper":"/paper/2201.11528","citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:3ce63c4292efb4f7a3c8de9ebd4fc56ef7131e8f640044c76f1813d2fe94afe6","observation_id":"713ef52a-fda8-475e-a055-f2cd6b459241","resolution":{"observed_at":"2026-08-10T22:38:55.348311Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:38:55.421848Z","title":null,"venue":null,"work_id":"b3146a7e-3316-4c9e-9fca-dc9614634cc7","year":2017},"citing_paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-10T22:38:55.305976Z"},"links":{"citing_paper":"/paper/2501.01106"},"observation_digest":"sha256:2171b6a82bf0ea4ff574fe24f7dec0074c87a8acbc5ebb6c1e4e656fd5475b7d","observation_id":"998b8e74-901a-4c71-9529-375dd73de4ec","resolution":{"observed_at":"2026-08-10T22:38:55.425683Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.01106","last_updated":"2025-01-02T07:06:49Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-18T07:26:05.739544Z","submitted_at":"2025-01-02T07:06:49Z","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":37,"verified_exact":1,"verified_fuzzy":4},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2501.01106."}