{"as_of":"2026-08-10T02:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d75760377cfd0a63cada7927ab5c11d90796d1479287475f3c1db4d49bda680f","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T17:52:54.005091Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.00760/citation-record","integrity":"/paper/2502.00760/integrity","json":"/paper/2502.00760/citation-record.json","paper":"/paper/2502.00760"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-10T01:12:16.468283Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-09T17:52:53.879412Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.879412Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:aaf5888367b8ff9b34546e4bc3e214272faee23cdc4311d7c95cdc53596b24a7","observation_id":"14bc3544-175c-4f3b-95d3-82eaf2e13ea8","resolution":{"observed_at":"2026-08-09T17:52:53.879412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.08458","last_updated":"2015-12-02T18:06:03Z","snapshot_observed_at":"2026-07-06T04:37:52.737823Z","submitted_at":"2015-11-26T17:45:01Z","title":"An Introduction to Convolutional Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.08458","snapshot_observed_at":"2026-08-09T17:52:53.885978Z","title":"An introduction to convolutional neural networks,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.885978Z"},"links":{"cited_paper":"/paper/1511.08458","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:28b8b4daecc01af33ce6568f5173ec501a8631942c636c749250d804b93a250c","observation_id":"26fc833f-9807-4403-a981-dda175126fb3","resolution":{"observed_at":"2026-08-09T17:52:53.885978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.912923Z","title":"Network inversion for training-like data reconstruction,","venue":null,"work_id":"3824b71f-fb3c-48ea-9380-b3f9e6458c8f","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.890970Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:6889d0c0a356d29c89f21ed9143cf2b29dc216d72c34d65248c498bb5553b657","observation_id":"8ea7333d-0c9b-4472-ad48-a149971000b3","resolution":{"observed_at":"2026-08-09T17:52:54.917732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.897738Z","title":"Privacy-preserving machine learning: Threats and solutions,","venue":null,"work_id":"d8d3f8f5-21bd-4c17-b452-d8b93a4adc2e","year":2019},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.895827Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c977b9641ae1abf7b522e974ed32a80cf614273b1203c00cc789a21eb22aeed6","observation_id":"d9745209-310a-4cd4-ac50-c74bd8fc89c3","resolution":{"observed_at":"2026-08-09T17:52:54.902718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.04417","last_updated":"2021-09-22T05:05:56Z","snapshot_observed_at":"2026-08-09T02:16:51.504444Z","submitted_at":"2021-08-10T02:58:31Z","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.04417","snapshot_observed_at":"2026-08-09T17:52:53.900981Z","title":"Privacy-preserving machine learning: Methods, challenges and directions,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.900981Z"},"links":{"cited_paper":"/paper/2108.04417","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:03b0afd2939cad7d79d49f84c6b7dbb3cfab7d697e152fba1022bf60252b2def","observation_id":"b9dffebe-583d-454f-b775-aa5d642a5268","resolution":{"observed_at":"2026-08-09T17:52:53.900981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:53.906380Z","title":"Inversion of neural networks by gradient descent,","venue":null,"work_id":null,"year":1990},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.906380Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c4aa2080233026c9d4d9075761bf108e5f6a9f8ce6b7ec2789ab2c91a8b0670d","observation_id":"946e0866-cca6-45d7-9a0c-b3b0f7986e37","resolution":{"observed_at":"2026-08-09T17:52:53.906380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.882328Z","title":"Inversion of feedforward neural networks: algorithms and applications,","venue":null,"work_id":"b6c3a8cc-069c-401d-b355-87df118454dc","year":1999},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.911344Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:6113084ebb0569c0661f27724a1de488ec803a6be2f36e717a16a0b562b3beac","observation_id":"2f9004bf-a8fa-4294-aeed-4873a539d918","resolution":{"observed_at":"2026-08-09T17:52:54.886945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.867646Z","title":"Neural network inversion beyond gradient descent,","venue":null,"work_id":"73d82a0e-48aa-4afc-aa05-ce7dec683d2d","year":2017},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.915553Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:43a9ff1ef95221db6e424d603b31426398facccf2cd5f64fabd3c2e63f34847c","observation_id":"efd341b7-cef8-4392-bda6-a0749e77c334","resolution":{"observed_at":"2026-08-09T17:52:54.872280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.473644Z","title":"Neural network inversion in adversarial setting via background knowledge alignment,","venue":null,"work_id":"dc1e9860-95a0-4cbc-a120-790871404a6f","year":2019},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.919901Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:ee397dd23d128c9afaf0069b7e402f94852ea186aac0773a14221351b3db4bbf","observation_id":"e77cb6f5-ef84-46e2-befb-3d4a7cf85313","resolution":{"observed_at":"2026-08-09T17:52:54.479031Z","resolver_source":"arxiv_id_nonexistent","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.852386Z","title":"Neural network explanation using inversion,","venue":null,"work_id":"f23798df-2f41-4021-887e-b235efe55463","year":2007},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.924172Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:a002b49c4effdee3545b2f835e4ef2c54bc92fde433e99a50f4e60e8470f553a","observation_id":"b0413546-0a69-4714-b2e3-267096fcf649","resolution":{"observed_at":"2026-08-09T17:52:54.857477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.838553Z","title":"Model inversion networks for model-based optimization,","venue":null,"work_id":"85c17bf4-88a6-495e-b336-bc237ba89c76","year":2019},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.928612Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:7934251c1fc11c62f8783d25c316c77763c98bfe30bf21a1a9e27ecae0febe55","observation_id":"13becc89-df8a-4a73-a38f-430d55d2ea94","resolution":{"observed_at":"2026-08-09T17:52:54.842786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.825071Z","title":"Reconstructing training data with informed adversaries,","venue":null,"work_id":"4e9b3951-0739-4bca-85e8-bdd88ff91840","year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.932753Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:2cc45fae9e8db9edbb724c4399517bef054dd61dccd03399120d5a6bb0133c06","observation_id":"418e6806-76b5-406a-bed7-49ea6bac91ca","resolution":{"observed_at":"2026-08-09T17:52:54.829316Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:53.936776Z","title":"Reconstructing training data from model gradient, provably,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.936776Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:f8c5150abd0632c96e34d0204c86f765c6dad8c6f22c51e19c7057cdfd7eb303","observation_id":"31d76ae5-9bd6-49db-af79-0a554c8ff02d","resolution":{"observed_at":"2026-08-09T17:52:53.936776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.09027","last_updated":"2022-06-17T22:05:29Z","snapshot_observed_at":"2026-08-06T03:40:28.105758Z","submitted_at":"2022-06-17T22:05:29Z","title":"Landscape Learning for Neural Network Inversion","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.09027","snapshot_observed_at":"2026-08-09T17:52:53.940729Z","title":"Landscape learning for neural network inversion,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.940729Z"},"links":{"cited_paper":"/paper/2206.09027","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:8b02ad92e5e1fe3f661f720fe5ebfa79240c9ed0aef77a353b1325607e634666","observation_id":"622d5ecb-f5b7-4c4f-893a-662a1a4b0750","resolution":{"observed_at":"2026-08-09T17:52:53.940729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.799339Z","title":"Network inversion of binarised neural nets,","venue":null,"work_id":"c24194ef-37f6-44fb-89c1-88580eb82756","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.944728Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:68abf8316ebda80efb803b6bb739d9ed7f078aa3d1829b1aef698b2b9426b8cb","observation_id":"5b99eab8-bf06-408e-94fc-16a130daefa0","resolution":{"observed_at":"2026-08-09T17:52:54.803619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.03702","last_updated":"2021-11-05T18:59:01Z","snapshot_observed_at":"2026-07-06T12:05:55.928795Z","submitted_at":"2021-11-05T18:59:01Z","title":"Reconstructing Training Data from Diverse ML Models by Ensemble Inversion","version":1},"cited_work":{"arxiv_id":"2111.03702","doi":null,"metadata_source":"pith","pith_arxiv_id":"2111.03702","snapshot_observed_at":"2026-08-09T17:52:54.111483Z","title":"Reconstructing Training Data from Diverse ML Models by Ensemble Inversion","venue":"cs.LG","work_id":"4be134e6-5bb3-4763-858a-553fad131ad2","year":2021},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.948750Z"},"links":{"cited_paper":"/paper/2111.03702","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:9305f6b46fd86fd4502cbf90fbaf7e2c79ea9e0df2093b319a704864333b0097","observation_id":"88711419-c2f9-48b7-9e21-a5352323416b","resolution":{"observed_at":"2026-08-09T17:52:54.116365Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2206.07758","last_updated":"2022-12-05T14:49:34Z","snapshot_observed_at":"2026-08-03T07:41:48.597777Z","submitted_at":"2022-06-15T18:35:16Z","title":"Reconstructing Training Data from Trained Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.07758","snapshot_observed_at":"2026-08-09T17:52:53.953441Z","title":"Reconstructing training data from trained neural networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.953441Z"},"links":{"cited_paper":"/paper/2206.07758","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:c2a4d11d7280d1228cc016ce6d46f650b9049253ac0f88975ad0f9e6dde70c48","observation_id":"786db1a0-00f4-41a1-ab85-cb2cc4b72f8d","resolution":{"observed_at":"2026-08-09T17:52:53.953441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03350","last_updated":"2023-05-05T08:11:00Z","snapshot_observed_at":"2026-08-08T01:47:52.928549Z","submitted_at":"2023-05-05T08:11:00Z","title":"Reconstructing Training Data from Multiclass Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03350","snapshot_observed_at":"2026-08-09T17:52:53.958008Z","title":"Reconstructing training data from multiclass neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.958008Z"},"links":{"cited_paper":"/paper/2305.03350","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:e0ba74a3614a104677244a6b968e0697743117c4ad301048a198bb9f6c1a04f0","observation_id":"97b822f6-1a0e-45d4-b7c0-4fd6697926bc","resolution":{"observed_at":"2026-08-09T17:52:53.958008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.03714","last_updated":"2023-06-10T14:14:10Z","snapshot_observed_at":"2026-07-06T14:27:53.824389Z","submitted_at":"2022-12-07T15:32:22Z","title":"Reconstructing Training Data from Model Gradient, Provably","version":3},"cited_work":{"arxiv_id":"2212.03714","doi":null,"metadata_source":"pith","pith_arxiv_id":"2212.03714","snapshot_observed_at":"2026-08-09T17:52:54.057195Z","title":"Reconstructing Training Data from Model Gradient, Provably","venue":"cs.LG","work_id":"bdcd28ff-ed48-4eb2-b987-72d906734c5c","year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.962513Z"},"links":{"cited_paper":"/paper/2212.03714","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:a518efc91d10294ac7bdcbf3a3fc74728fe689a019d6d40fb4d37d70c1c28af0","observation_id":"351adacd-cb91-4a8e-906f-7170a89db970","resolution":{"observed_at":"2026-08-09T17:52:54.063890Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.783322Z","title":"Reconstructing training data from real world models trained with transfer learning,","venue":null,"work_id":"d4b94c84-aa52-40b6-a092-6c770ffb9f31","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.967214Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:bddcba35defeccb920d703519e89a820ee760fb5920dba25e4d47474ac07078e","observation_id":"7f52870d-ab52-4891-8c61-e0ca8837300f","resolution":{"observed_at":"2026-08-09T17:52:54.787955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.768660Z","title":"Bounding training data reconstruction in private (deep) learning,","venue":null,"work_id":"254e306f-0a30-4ecb-b32d-2b35f2628a0e","year":null},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.972092Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:6b7244c672a926bd2cbd9ab734df0735f3a805e117ba1d5456b0670425f808fb","observation_id":"6e2a0469-5f79-4813-bd68-06fc447131f1","resolution":{"observed_at":"2026-08-09T17:52:54.773055Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.740555Z","title":"Network inversion of convolutional neural nets,","venue":null,"work_id":"e4dbc3af-8765-4649-8f33-110f08133af7","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.979933Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:fe2e7f54797b998375af2d2037676e13a92469823dcffa76051928a9367a9fbe","observation_id":"8db56948-6480-4ef2-bc6b-b4e2e23ae47e","resolution":{"observed_at":"2026-08-09T17:52:54.744800Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.725894Z","title":"Network inversion and its applications,","venue":null,"work_id":"c70ee12c-14d8-4502-9a13-7762e5d9cebd","year":2024},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.983826Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:3e4d4290d8a62188f1c2175d31a36a58409dab45b8756bc091b7d3cb29bf0f25","observation_id":"352716d1-4547-4b4d-919d-d74af2dc1f44","resolution":{"observed_at":"2026-08-09T17:52:54.730231Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:53.987558Z","title":"The mnist database of handwritten digit images for machine learning research,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.987558Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:37e8eb9bbe23d67503b13ff9e7a53df87766919980e4ea83188b71b6a061627e","observation_id":"0e03b73c-dc5b-4c7d-88c9-458e87fdd4f8","resolution":{"observed_at":"2026-08-09T17:52:53.987558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.07747","last_updated":"2017-09-15T21:29:49Z","snapshot_observed_at":"2026-07-06T05:56:41.814255Z","submitted_at":"2017-08-25T14:01:29Z","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.07747","snapshot_observed_at":"2026-08-09T17:52:53.991272Z","title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.991272Z"},"links":{"cited_paper":"/paper/1708.07747","citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:198efd9085765febe53e2a7a0dab55ef72f48c864d8798005ff0d1f7f01068b3","observation_id":"4f8588de-23b3-4758-b641-c16dc7434070","resolution":{"observed_at":"2026-08-09T17:52:53.991272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.700619Z","title":"Cifar-10 (canadian institute for advanced research)","venue":null,"work_id":"e4504b34-15d3-4994-800a-b8b26dc4f660","year":null},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.995764Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:1cd728fbdf7beb44503cbef6ba231a66f1685af75b4c72732ce1e0167a7be909","observation_id":"368b3323-02bf-4de0-8128-754eadc328f2","resolution":{"observed_at":"2026-08-09T17:52:54.705795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.684801Z","title":"Dropout: A simple way to prevent neural networks from overfitting,","venue":null,"work_id":"0ed1bcbc-ee9d-4eeb-8d3d-53a9beb40c34","year":1929},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:54.000475Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:52d5fc6009f82ba340e947b299693d9977fc382240da2b383031f9c9de87e337","observation_id":"4c762b59-dfbc-4037-a856-bf4dcd3a9361","resolution":{"observed_at":"2026-08-09T17:52:54.689780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.669380Z","title":"Batch normalization: Accelerating deep network training by reducing internal covariate shift,","venue":null,"work_id":"aeaf86a7-87cb-489f-975b-42ae0403e93a","year":2015},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:54.005091Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:4a1c2a14700056a8a9f317accee68670c4e79a8d0b648371bccb3789fdac6261","observation_id":"232bc763-4930-447c-ab85-36b145272ac5","resolution":{"observed_at":"2026-08-09T17:52:54.674405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:52:54.754606Z","title":"8056–8071","venue":null,"work_id":"5fcda61e-4be6-4279-bb2c-bf80fbb597cb","year":2022},"citing_paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers","version":1},"reference_index":162,"source":"pdf_text","source_observed_at":"2026-08-09T17:52:53.976139Z"},"links":{"citing_paper":"/paper/2502.00760"},"observation_digest":"sha256:6190a02d05f305b3e8a7daaffcc60dfea8c299f1fbd8a9a97b44aa2e00abe32b","observation_id":"780adcc4-b06f-401f-b185-fd6423792fb3","resolution":{"observed_at":"2026-08-09T17:52:54.758744Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.00760","last_updated":"2025-02-02T11:50:00Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-09T17:45:47.836066Z","submitted_at":"2025-02-02T11:50:00Z","title":"Privacy Preserving Properties of Vision Classifiers"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":3,"verified_fuzzy":16},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2502.00760."}