{"as_of":"2026-08-13T03:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5cd7f727c3a5ce590015f859a26d68f40a08d43735ee40a89876c67aa23a7cb8","coverage":[{"denominator":16,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T10:44:58.551571Z","state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.02913/citation-record","integrity":"/paper/2502.02913/integrity","json":"/paper/2502.02913/citation-record.json","paper":"/paper/2502.02913"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.759376Z","title":"B., Mironov, I., Talwar, K., and Zhang, L","venue":null,"work_id":"0c565a87-b24f-469d-b962-37b534b1036d","year":2016},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.490449Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:74d3e6adc00503f1df8e4988d79ea3a8a1fd98e24e5963c7b42c81de841e008b","observation_id":"b4e62d67-426f-42ad-b843-e0039352dfbf","resolution":{"observed_at":"2026-08-09T10:44:58.762941Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.724164Z","title":"Comprehen- sive privacy analysis of deep learning","venue":null,"work_id":"bfc247dc-e904-43ef-ab9f-47ff08553f3b","year":2019},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.525310Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:45d6c046daff53a78ddc8717832b167bd1754e3dbec5a4c08f3a35daac318268","observation_id":"a444f083-9a12-4104-bbde-7fdf03585f34","resolution":{"observed_at":"2026-08-09T10:44:58.728327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.11524","last_updated":"2020-07-22T16:33:14Z","snapshot_observed_at":"2026-08-04T15:18:26.501887Z","submitted_at":"2020-07-22T16:33:14Z","title":"Improving Deep Learning with Differential Privacy using Gradient Encoding and Denoising","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.11524","snapshot_observed_at":"2026-08-09T10:44:58.529061Z","title":"Improving deep learning with dif- ferential privacy using gradient encoding and denoising","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.529061Z"},"links":{"cited_paper":"/paper/2007.11524","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:c63abaef1448888de1dcb606bb9a6d29e76caeefe5bff4ec3f0f1443763f731e","observation_id":"72b8ebef-94b3-4d8e-bcdc-269b6ce4db1d","resolution":{"observed_at":"2026-08-09T10:44:58.529061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.700788Z","title":"Mem- bership inference attacks against machine learning mod- els","venue":null,"work_id":"dae7e76f-cced-461d-ae7c-78a9b88c7fe8","year":2017},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.536782Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:f5c0f4753bdd004b916e85fb4f5408d683252e8a11dc478a682d99f4193006af","observation_id":"38d756df-0a18-4b97-8f70-93a424a9cd5e","resolution":{"observed_at":"2026-08-09T10:44:58.704869Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.677383Z","title":"Variational model inversion attacks","venue":null,"work_id":"7e182b35-94e6-4e13-8694-0adb383779dc","year":2021},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.543877Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:79fd1cdc035e4f5064786a5f0b8b181f1a7d97b088c4af83413fe00ca3fc670b","observation_id":"89ce4689-67f5-49a8-8fc4-1a83cc152e1f","resolution":{"observed_at":"2026-08-09T10:44:58.681386Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.665434Z","title":"Settings of MINE Network","venue":null,"work_id":"5fa54073-317f-4448-b731-8c61bdf8f5ca","year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.551571Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:9679bdd56d1485e9b5c40458d045c8fd471d7a89dc50abbe7ac83396fc55ecc6","observation_id":"2bc2f188-1f78-47a4-9224-5e9df346b745","resolution":{"observed_at":"2026-08-09T10:44:58.669432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.735736Z","title":"Detecting adversarial examples on deep neural networks with mutual information neural esti- mation","venue":null,"work_id":"d3b2745b-c673-400f-9259-1a4bea78350d","year":1901},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.512515Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:fa5d3ed8929903f486cba7fc41eb2ed1e527e59a56e4b617055716ef72fd2d33","observation_id":"94eb60c3-3b41-48bc-917a-a33f33187f98","resolution":{"observed_at":"2026-08-09T10:44:58.739945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.04062","last_updated":"2021-08-14T18:35:05Z","snapshot_observed_at":"2026-08-06T22:27:17.572335Z","submitted_at":"2018-01-12T05:42:58Z","title":"MINE: Mutual Information Neural Estimation","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.04062","snapshot_observed_at":"2026-08-09T10:44:58.495070Z","title":"I., Baratin, A., Rajeswar, S., Ozair, S., Bengio, Y ., Courville, A., and Hjelm, R","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.495070Z"},"links":{"cited_paper":"/paper/1801.04062","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:3e7d256c5bb8be045365ec9d4392d37006a54ac71287fb8a9a7f5d92ba5e92ce","observation_id":"6dc60f01-a935-4ec5-9c92-931e75d362a5","resolution":{"observed_at":"2026-08-09T10:44:58.495070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.689305Z","title":"E., Yu, L., and Wei, W","venue":null,"work_id":"420c724f-6bfc-4f63-91f4-0011994deaa5","year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.540289Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:c464eb7d9bc053b8e57c134431a471691e90a6cb9c7772bd772b614f3b3ebe0e","observation_id":"74014975-f5ef-43c8-9fa3-79e9802c51d1","resolution":{"observed_at":"2026-08-09T10:44:58.693122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.746908Z","title":"A., Tramer, F., Carlini, N., and Paper- not, N","venue":null,"work_id":"2faf0ad9-c5de-4641-ab20-bb692e442e0d","year":1964},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.499706Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:18b46f2c073da9159837fbcded5a11d9ae2636d0f639b7b556009861ef02b462","observation_id":"86e98dff-6722-478c-bd1d-b9c03e90e138","resolution":{"observed_at":"2026-08-09T10:44:58.751702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-07-06T05:17:20.642708Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-09T10:44:58.521159Z","title":"Adversarial ma- chine learning at scale","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.521159Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:d0f3221881beac82bbe1401cdc5626867c5fa0182eaa853ae99635accfc2c17e","observation_id":"a6751d79-d943-43d1-8546-2f4f448d6cfc","resolution":{"observed_at":"2026-08-09T10:44:58.521159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T10:44:58.712423Z","title":"V ., Krpalkova, L., Riordan, D., and Walsh, J","venue":null,"work_id":"ed18991b-6ced-40c2-b2cc-0e1e06f459e5","year":2019},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.533177Z"},"links":{"citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:42c6d2f197bbaf224e46278cc2da97d37d51a30c71e6021ea8fe6573d129ae86","observation_id":"a5edd8ac-3f06-4b77-8712-0daa20620909","resolution":{"observed_at":"2026-08-09T10:44:58.716246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-13T02:40:23.887636Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-09T10:44:58.503867Z","title":"An image is worth 16x16 words: Trans- formers for image recognition at scale","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.503867Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:d8fe8b369cb5b2b27a921963a6545d49d8b575012a2d318f2f6cfe48b3e8d097","observation_id":"446be18f-0d92-485e-adfd-ba9b0fbc4ac7","resolution":{"observed_at":"2026-08-09T10:44:58.503867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00696","last_updated":"2024-12-01T06:40:28Z","snapshot_observed_at":"2026-08-12T05:03:47.816446Z","submitted_at":"2024-12-01T06:40:28Z","title":"Intermediate Outputs Are More Sensitive Than You Think","version":1},"cited_work":{"arxiv_id":"2412.00696","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.00696","snapshot_observed_at":"2026-08-09T10:44:58.615067Z","title":"Intermediate Outputs Are More Sensitive Than You Think","venue":"cs.CV","work_id":"7408d9da-dd40-480c-b94f-9a993add1487","year":2024},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.516688Z"},"links":{"cited_paper":"/paper/2412.00696","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:7862394c58e44d2e0d31a1f7b0297ff5202197c4e55bbd93005c74ddfbea7f86","observation_id":"bf57f052-ece7-47ff-bb39-050c93273a83","resolution":{"observed_at":"2026-08-09T10:44:58.621232Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2001.10648","last_updated":"2020-04-28T00:43:42Z","snapshot_observed_at":"2026-08-07T19:09:14.679603Z","submitted_at":"2020-01-29T00:42:08Z","title":"Modelling and Quantifying Membership Information Leakage in Machine Learning","version":2},"cited_work":{"arxiv_id":"2001.10648","doi":null,"metadata_source":"pith","pith_arxiv_id":"2001.10648","snapshot_observed_at":"2026-08-09T10:44:58.633384Z","title":"Modelling and Quantifying Membership Information Leakage in Machine Learning","venue":"cs.LG","work_id":"3899c50a-1c95-4d36-b3b9-2c0de72a5bb4","year":2020},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.508410Z"},"links":{"cited_paper":"/paper/2001.10648","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:270d56e7499c706964b4e366809758aadf956f32327cf73bb2dbfc3161c86c77","observation_id":"381e7552-db1d-456a-916c-2a101c548c69","resolution":{"observed_at":"2026-08-09T10:44:58.637443Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2001.02610","last_updated":"2020-01-08T16:45:09Z","snapshot_observed_at":"2026-08-12T01:33:52.396724Z","submitted_at":"2020-01-08T16:45:09Z","title":"iDLG: Improved Deep Leakage from Gradients","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.02610","snapshot_observed_at":"2026-08-09T10:44:58.547558Z","title":"G., Zhao, C., Sun, Q., Tang, Y ., Qian, F., and Kurths, J","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","version":4},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-09T10:44:58.547558Z"},"links":{"cited_paper":"/paper/2001.02610","citing_paper":"/paper/2502.02913"},"observation_digest":"sha256:420d829eb02ad31ef77cc634ec12e09e19f9b2971e0895e55176f3e868b34b84","observation_id":"9259e078-b24d-4a83-8f2a-2fb6509493fd","resolution":{"observed_at":"2026-08-09T10:44:58.547558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2502.02913","last_updated":"2025-02-12T04:59:16Z","latest_version":4,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-12T16:04:09.451755Z","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage"},"reference_resolution":{"displayed":16,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":2,"verified_fuzzy":9},"total_outbound_references":16},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 16 of 16 outbound references and 0 inbound Pith citation observations for arXiv:2502.02913."}