{"as_of":"2026-08-11T11:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fa349e2b1bde4304e4de6b57df898f273b2ed0602010f7fc200f52a5a0759fdd","coverage":[{"denominator":32,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":32,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T22:17:06.462391Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:16:45.154556Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T22:05:02.550126Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"cited_work":{"arxiv_id":"2501.02232","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.02232","snapshot_observed_at":"2026-08-06T22:05:02.550126Z","title":"Distillation-Enhanced Physical Adversarial Attacks","venue":"cs.CV","work_id":"d14fc9d6-58b3-4b2b-bdda-9a2a812ed2a9","year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-11T11:24:46.599420Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T22:05:01.182350Z"},"links":{"cited_paper":"/paper/2501.02232","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:0872a005c023e7aacd335f629af8825af0b9eda2612914bf402ca11959854e21","observation_id":"600e0510-1e62-4928-a63e-0d250220ceac","resolution":{"observed_at":"2026-08-06T22:05:02.759034Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.02232","snapshot_observed_at":"2026-08-11T04:16:45.154556Z","title":"Distillation-enhanced physical adversarial attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-11T11:24:46.599420Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.154556Z"},"links":{"cited_paper":"/paper/2501.02232","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:33002b436bfbb356fe75917ad4e5a8c99b1edab53b0e139359ffc9f2c1889468","observation_id":"17bd6729-fdbd-4e57-affd-43439bec9869","resolution":{"observed_at":"2026-08-11T04:16:45.154556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2501.02232/citation-record","integrity":"/paper/2501.02232/integrity","json":"/paper/2501.02232/citation-record.json","paper":"/paper/2501.02232"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.870237Z","title":"Mysticmask: Adversarial mask for impersonation attack against face recognition systems,","venue":null,"work_id":"f4678975-13ed-481a-9fa4-446cadfc5036","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.340335Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:e9c6d1cce75106257d85a412a5b35c805b5354793a2fff328e65d5987de6b380","observation_id":"41502597-d2b7-4766-81c6-5a3fba321ab9","resolution":{"observed_at":"2026-08-10T22:17:06.874045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.858662Z","title":"An analysis of adversarial attacks and defenses on autonomous driving models,","venue":null,"work_id":"96d8653a-1972-45a3-8490-8130b65c7df6","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.345561Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:f13bd70b986fcbdd851fbb4de32dd4b602d931008044af1bac76ab1df73394b8","observation_id":"72fcc5ef-97ef-4907-b4e2-2b0cf7e4911b","resolution":{"observed_at":"2026-08-10T22:17:06.862646Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.846644Z","title":"Invisible pedestrians: Synthesizing adversarial clothing textures to evade industrial camera-based 3d detection,","venue":null,"work_id":"07de7714-08fa-4bfc-ac9e-1727434a3323","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.349452Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:bf8946ccc07e759ce8137647c58197f6256cfb9db016dba9721680060c6e72f0","observation_id":"e32c060f-7ca8-4ee8-8977-7cdd288883e6","resolution":{"observed_at":"2026-08-10T22:17:06.851001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.835660Z","title":"Universal physical camouflage attacks on object detectors,","venue":null,"work_id":"d2622d48-8e48-4de8-8bd7-cfa33504e321","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.353656Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:330ac8383696d22539ee5a6d89716ab40572a99a82e8a3765dfc90f94db6e6bd","observation_id":"7ec5dfa7-bae4-4f81-bf0c-1543261dd8a2","resolution":{"observed_at":"2026-08-10T22:17:06.839595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.824378Z","title":"Naturalistic physical adver- sarial patch for object detectors,","venue":null,"work_id":"1798a449-c67f-4157-8ff7-2b55b6b5f49c","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.357522Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:c25a0351a5e5233e6a6b01f306f0e84cc7a4e2510ccc9a47c19204427bb8a6e8","observation_id":"b332f043-1267-4b7e-9b40-bb4731ba7fba","resolution":{"observed_at":"2026-08-10T22:17:06.828988Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.812841Z","title":"Dap: A dynamic adversarial patch for evading person detectors,","venue":null,"work_id":"37922cd7-e0a6-4c99-a4ea-c65dfe3cea5d","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.361469Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:8683a450641d3c355f978dd6be956e3fec43ed33c06a975f6e6a700f199efe94","observation_id":"f36de3bf-69b5-437e-9c43-ca34ccc6face","resolution":{"observed_at":"2026-08-10T22:17:06.816997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.800938Z","title":"Physically realizable natural-looking clothing textures evade person detectors via 3d modeling,","venue":null,"work_id":"cccecf74-79af-4378-83e1-04083a875f8d","year":2023},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.365600Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:2a585ede63f818f69ba2f8f4578a4a7f8123f41a2911cd46d1d6606d3e6c7e45","observation_id":"f338ac70-6261-449a-aef2-2a04d585324f","resolution":{"observed_at":"2026-08-10T22:17:06.804943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10498","last_updated":"2024-11-15T09:30:47Z","snapshot_observed_at":"2026-07-06T19:51:09.829522Z","submitted_at":"2024-11-15T09:30:47Z","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","version":1},"cited_work":{"arxiv_id":"2411.10498","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.10498","snapshot_observed_at":"2026-08-10T22:17:06.544098Z","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","venue":"cs.CV","work_id":"692113c4-6883-48c1-b874-62de31d35b75","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.369090Z"},"links":{"cited_paper":"/paper/2411.10498","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:edb2e317a685c64ae65509a30846f9a1e4a218601dfb09fdae66378b15e9521f","observation_id":"5cb2911b-4cd7-4fbe-87de-c0f12d3eb285","resolution":{"observed_at":"2026-08-10T22:17:06.549840Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07253","last_updated":"2024-12-10T07:24:24Z","snapshot_observed_at":"2026-07-06T20:04:30.197401Z","submitted_at":"2024-12-10T07:24:24Z","title":"CapGen:An Environment-Adaptive Generator of Adversarial Patches","version":1},"cited_work":{"arxiv_id":"2412.07253","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.07253","snapshot_observed_at":"2026-08-10T22:17:06.520713Z","title":"CapGen:An Environment-Adaptive Generator of Adversarial Patches","venue":"cs.CV","work_id":"f9d6bd4d-87bb-4fdb-8409-8f2f0fcc47a7","year":2024},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.373067Z"},"links":{"cited_paper":"/paper/2412.07253","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:80bfe1d3df75906e3389a1810c016b36d7ad33f5c95427f3cae7e884a07d0bb1","observation_id":"94304e0c-b840-455e-8fe6-605ee069fc14","resolution":{"observed_at":"2026-08-10T22:17:06.529650Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.789884Z","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection,","venue":null,"work_id":"6d972fcf-b619-40bf-b0ab-3a4aa3f0fef7","year":2019},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.376784Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:59c78d5fd433f94a90c8f0682349ff1439a43e97071223a0c8044bb3102b551b","observation_id":"726ff8e4-716d-4ae5-94c7-94a3ca1b7744","resolution":{"observed_at":"2026-08-10T22:17:06.793854Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.778432Z","title":"The v1 hypothesis-creating a bottom-up saliency map for preattentive selection and segregation,","venue":null,"work_id":"dbbbebf2-0a11-481d-bed5-12dd7766212f","year":2014},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.380221Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:b38a2ec53567079c1b612c7a3f8ed45f9510af9ab96acd4f44392d84c0fa853e","observation_id":"bf8096d6-c9eb-49fc-9d84-cf9b9ebd9e94","resolution":{"observed_at":"2026-08-10T22:17:06.782612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.767616Z","title":"Attention capture by eye of origin singletons even without awareness—a hallmark of a bottom-up saliency map in the primary visual cortex,","venue":null,"work_id":"f29bb744-746b-4a14-9a2d-e0a60f62d17f","year":2008},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.384291Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:dcb86ba1a31c23a449e674d10bd5d58c031fc59177b09aa374b07b10aa56a3e7","observation_id":"d5e1d1a2-8a9c-4dc0-a63e-e5838cf11a91","resolution":{"observed_at":"2026-08-10T22:17:06.771563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.756527Z","title":"Physical adversarial examples for object detectors,","venue":null,"work_id":"15124acb-dfc4-4f90-b981-df9e8f8133b8","year":2018},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.388406Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:094f4b3f9591dc3cf43dd1c0fe5664bd63cefa2d47f5319a65f5ab4b38a16a5f","observation_id":"8c84fe93-16ac-435d-8695-8249ce450b15","resolution":{"observed_at":"2026-08-10T22:17:06.760306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.745233Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":"6340bbb6-6f46-433d-bcee-cce9b8412cfd","year":2016},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.391895Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:3e053705ad03630029d7ba31621112a83991b3ff7982a5046bdb2b03a5cc4538","observation_id":"c388ba16-94f6-483b-99b0-42c1278b51cc","resolution":{"observed_at":"2026-08-10T22:17:06.749914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.733033Z","title":"Seeing isn’t believing: Towards more robust adversarial attack against real world object detectors,","venue":null,"work_id":"bc7fa344-e4c8-42ee-9f1f-8eef4073774e","year":2019},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.395685Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:ac52b38484cd5aec2657ea87a0d318b94edb7f2e7e4223b35d5f7170334ae75a","observation_id":"69dc3a2e-38a5-427c-9e35-8438f9d4287a","resolution":{"observed_at":"2026-08-10T22:17:06.737638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.721627Z","title":"Adversarial t- shirt! evading person detectors in a physical world,","venue":null,"work_id":"526510cf-feab-45a0-98d3-ff3fb4816475","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.399907Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:d35b19a4039644f7f44229a7e146a6bf2a2ac90374c73ce16277544c6a7401c0","observation_id":"1762d385-5d20-4577-ad75-c417ab24a6b5","resolution":{"observed_at":"2026-08-10T22:17:06.725880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.710071Z","title":"Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices,","venue":null,"work_id":"81499791-144e-481b-a4c9-5517e512f934","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.403574Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:d0e79ce4751f4a6e8a986f455e15632b62d8ea4f6285cc8cf505f92a8fc46d37","observation_id":"e615fe86-f060-42be-8261-a930d07c5bf1","resolution":{"observed_at":"2026-08-10T22:17:06.714057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.699662Z","title":"Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phenomenon,","venue":null,"work_id":"6942f17b-53dc-40d0-bfad-31c80496db4e","year":2022},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.407044Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:b2cff7e71b31953b7eb22cf9265d63c8521b91596901238ba8ee67e29db01657","observation_id":"945c49f4-a67d-409d-b88d-e303cec2b181","resolution":{"observed_at":"2026-08-10T22:17:06.703623Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.688902Z","title":"{SLAP}: Improving physical adversarial examples with {Short-Lived} adversarial perturbations,","venue":null,"work_id":"e2a5cc22-ff26-4303-8121-6c1d0f658eac","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.411102Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:28d4ecf6bec7d015e6f675cf6b93b489916f22ada764e477ebb1e76378cb3adf","observation_id":"9e2f5383-7362-4bc5-bb23-633228c58203","resolution":{"observed_at":"2026-08-10T22:17:06.692862Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1503.02531","last_updated":"2015-03-09T15:44:49Z","snapshot_observed_at":"2026-07-06T04:11:24.157003Z","submitted_at":"2015-03-09T15:44:49Z","title":"Distilling the Knowledge in a Neural Network","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1503.02531","snapshot_observed_at":"2026-08-10T22:17:06.414785Z","title":"Distilling the knowledge in a neural network,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.414785Z"},"links":{"cited_paper":"/paper/1503.02531","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:3698c3f8a8c9f6b39b811e9ee3f2cf0a5be3c5f17821d6f961841c01b0712a16","observation_id":"2decfe1c-dd18-49af-87ab-1784c3c68327","resolution":{"observed_at":"2026-08-10T22:17:06.414785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.677342Z","title":"Learning without forgetting,","venue":null,"work_id":"1d04569f-ad8b-41dc-9f2b-fce6ae7c129f","year":2017},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.418824Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:1a5984dbfba39f43d80d5d72be0536e564c880649f670118962d5e3b58dcaaf9","observation_id":"1ee2f4da-6038-4a6a-9058-3de6e3461d64","resolution":{"observed_at":"2026-08-10T22:17:06.681385Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.666102Z","title":"Mimicking very efficient network for object detection,","venue":null,"work_id":"0f1eda31-814f-46c0-87f3-e4e38b5a1794","year":2017},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.422873Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:5f2fe89874d3f37af35ad1e7364ccb28ec0c4b901a97fb9ee7919ef95c3a1239","observation_id":"98099dd2-2a46-4954-930c-30242660b00c","resolution":{"observed_at":"2026-08-10T22:17:06.670260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.654772Z","title":"Online model distillation for efficient video inference,","venue":null,"work_id":"3160964c-0d4a-404c-b177-3c7d7145165a","year":2019},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.426793Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:303e15fc56183d741d245460204ddc95856cb34e75c7aafb9825bd9de91452f2","observation_id":"6616342b-2152-4d14-99ff-38428497e703","resolution":{"observed_at":"2026-08-10T22:17:06.658716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.644146Z","title":"Distillation as a defense to adversarial perturbations against deep neural networks,","venue":null,"work_id":"8c5d0058-97fd-4e1e-8057-cdb1a8687686","year":2016},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.430705Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:cbe668cf0a36e6515aaa764d34b563d121f4758adf1dc1a4b2a5fee80912b143","observation_id":"6a3a2870-1c08-4693-a560-8b6a8e4f4b61","resolution":{"observed_at":"2026-08-10T22:17:06.648047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.05264","last_updated":"2017-05-15T14:25:15Z","snapshot_observed_at":"2026-08-01T18:59:06.538571Z","submitted_at":"2017-05-15T14:25:15Z","title":"Extending Defensive Distillation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.05264","snapshot_observed_at":"2026-08-10T22:17:06.434675Z","title":"Extending defensive distilla- tion,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.434675Z"},"links":{"cited_paper":"/paper/1705.05264","citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:85f4f2b53a8b48eb0e0fa7fb2e5294cf0a7b23d6af1cedcaf4ace397a6f84fe1","observation_id":"b0d1bdfa-168d-41cd-9a8a-926404c6febe","resolution":{"observed_at":"2026-08-10T22:17:06.434675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.632150Z","title":"Ad- versarially robust distillation,","venue":null,"work_id":"8dc2ec6e-20e9-4f35-9e77-64fa6e724d56","year":2020},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.438910Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:63519e6a771b530ff42f749f75f1707e44fc23323d70af727995f10ad886dfd5","observation_id":"fd22598f-be19-4a6f-ab61-e458e635796a","resolution":{"observed_at":"2026-08-10T22:17:06.636166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.620969Z","title":"Revisiting adversarial robustness distillation: Robust soft labels make student better,","venue":null,"work_id":"5013e9e5-0358-4b15-b969-2c8b2c201794","year":2021},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.442799Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:3dc9055c1713d4ccfd0684ffbfa7a1c89709f62b8b0690b751b9521c4a086629","observation_id":"2a6048fc-8850-42e2-806e-48bf2b2431d8","resolution":{"observed_at":"2026-08-10T22:17:06.624908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.610214Z","title":"A* sampling,","venue":null,"work_id":"431cab05-cc5a-4345-8d6a-3d493b4f3cf8","year":2014},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.447045Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:3847c66c81fca456554ac2f5270d70551414522390497ca8eaf925d4a9406f5f","observation_id":"caa1ae7e-0440-4499-ad7a-199e89242597","resolution":{"observed_at":"2026-08-10T22:17:06.613813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.597667Z","title":"I-divergence geometry of probability distributions and minimization problems,","venue":null,"work_id":"c146163e-42a0-4b84-947c-9a0779d80b09","year":1975},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.450772Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:f25611af56107124b54c8ea178ea79111f7c63901fa42001ca4176680b231429","observation_id":"4b095fa6-755b-4b42-a12d-61a009f04a60","resolution":{"observed_at":"2026-08-10T22:17:06.601980Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.583131Z","title":"Histograms of oriented gradients for human detection,","venue":null,"work_id":"66a5dc15-cd9c-4be6-ba1a-253f22367707","year":2005},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.454754Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:734ff2e3b623860cc9c30d8c2b8bbff2b43c40f6d0b302a42e080b7bc2b4c63d","observation_id":"69438373-d44e-4b37-a495-e773f60a5008","resolution":{"observed_at":"2026-08-10T22:17:06.588224Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.571509Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":"18574a30-a272-4478-86f7-9af1ea59932b","year":2018},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.458564Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:f55aef6f2f9ba30c2f5287845233d98c3d9b5371feb367bf9636a6e2245a1267","observation_id":"e5341b0d-f19a-403d-a122-b21518624a57","resolution":{"observed_at":"2026-08-10T22:17:06.575483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:17:06.558769Z","title":"T-sea: Transfer-based self-ensemble attack on object detection,","venue":null,"work_id":"42c23dca-0e49-48ee-99be-9851d68cfdd6","year":2023},"citing_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:06.462391Z"},"links":{"citing_paper":"/paper/2501.02232"},"observation_digest":"sha256:5261c83fcfaebbf92f1ff0b77abc816d81f2e251a4d23f82099fe056a47b8a51","observation_id":"4e6b3ba7-5cd7-4abe-b99d-ed5d3052945e","resolution":{"observed_at":"2026-08-10T22:17:06.563358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks"},"reference_resolution":{"displayed":32,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":2,"verified_exact":2,"verified_fuzzy":28},"total_outbound_references":32},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 2 inbound Pith citation observations for arXiv:2501.02232."}