{"as_of":"2026-08-09T17:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:42d982bb1e357a361a565a03eac6b4dd5a6b90a5c4abd451ac7b071f4e3413a6","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T21:55:56.921124Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T11:32:42.835672Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T12:46:18.612622Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.04679","snapshot_observed_at":"2026-08-08T11:32:42.835672Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2502.07905","last_updated":"2025-02-11T19:21:23Z","snapshot_observed_at":"2026-08-09T00:39:02.531369Z","submitted_at":"2025-02-11T19:21:23Z","title":"DeepSeek on a Trip: Inducing Targeted Visual Hallucinations via Representation Vulnerabilities","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T11:32:42.835672Z"},"links":{"cited_paper":"/paper/2502.04679","citing_paper":"/paper/2502.07905"},"observation_digest":"sha256:a56c76030e6c645e46d20146b564f78858a3e0ac648ce85d7cd9f1eb683bbe26","observation_id":"ba7d8b8f-5ee3-406a-9c61-a6431f2ded4b","resolution":{"observed_at":"2026-08-08T11:32:42.835672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"cited_work":{"arxiv_id":"2502.04679","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.04679","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2502.04679 , year=","venue":null,"work_id":"f4281b25-94c6-44d6-b58d-7866c2b4b806","year":null},"citing_paper":{"arxiv_id":"2604.19724","last_updated":"2026-04-21T17:48:51Z","snapshot_observed_at":"2026-08-06T08:43:13.824032Z","submitted_at":"2026-04-21T17:48:51Z","title":"Benign Overfitting in Adversarial Training for Vision Transformers","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-05-10T02:58:29.672338Z"},"links":{"cited_paper":"/paper/2502.04679","citing_paper":"/paper/2604.19724"},"observation_digest":"sha256:11ea70eb5d490a455c1126a2644bd8c42e873046b12c82cfbb9e23f758acb02a","observation_id":"bf2af1ce-abfa-42f3-bc81-8f02eb3079d0","resolution":{"observed_at":"2026-05-11T12:46:18.695775Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.04679/citation-record","integrity":"/paper/2502.04679/integrity","json":"/paper/2502.04679/citation-record.json","paper":"/paper/2502.04679"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-08T21:55:56.663893Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.663893Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:e2ccd17f9bdd8836cbb28d08d47dc73858d7ec8b763425f5d3285bff86d5095b","observation_id":"f9a91be9-9744-42c5-8655-b34d5ddf1427","resolution":{"observed_at":"2026-08-08T21:55:56.663893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.03762","last_updated":"2023-08-02T00:41:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-06-12T17:57:34Z","title":"Attention Is All You Need","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.03762","snapshot_observed_at":"2026-08-08T21:55:56.669331Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.669331Z"},"links":{"cited_paper":"/paper/1706.03762","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:f935fc06c29159796f106776e5c3d23488f9e1915f786d6c108a767aeb584397","observation_id":"4bc9a03c-8b32-43d8-838c-b75d51470467","resolution":{"observed_at":"2026-08-08T21:55:56.669331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.674699Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.674699Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:bcf29d4dbd987c8926316bb2e580fbcd6debfc8a34b4ba3d67201a71af063b71","observation_id":"748d52a6-87b0-4cac-87e1-6c904fcd4406","resolution":{"observed_at":"2026-08-08T21:55:56.674699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.680019Z","title":"Rethinking semantic segmentation from a sequence-to-sequence perspective with transformers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.680019Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:741846569a166540657e33ca291562375f9cac0889968351f373907ba28c3fbc","observation_id":"3098d575-1cfe-4e71-a6f7-87885bcbfbb7","resolution":{"observed_at":"2026-08-08T21:55:56.680019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.684754Z","title":"End-to-end object detection with transformers,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.684754Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:0bc4c517d7f6cba40aa05645a06bfaaa236d4b42e0c90eda24a9f02a95c9bc8f","observation_id":"ff3d0644-17b7-4fe8-8d54-b270de0e63cd","resolution":{"observed_at":"2026-08-08T21:55:56.684754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.949338Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":"bdf71dbb-a654-42bd-bf90-8f0f41715539","year":2021},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.689635Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:d88ab80e1d816b3bb2f4822e04f834a14d8d34153e4158c94a448567f0a3a47d","observation_id":"df671326-4aa2-4d8b-bfdc-ac229d2cf96b","resolution":{"observed_at":"2026-08-08T21:55:57.954248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.934797Z","title":"Multimodal learning with transform- ers: A survey,","venue":null,"work_id":"2cfb64c6-e90a-492c-8d5b-ae80cc8f9edb","year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.695133Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:c589dd153f35b78206f1923de496934d2ee9071b5372c02221ba14fa19979995","observation_id":"a51bcb5d-6f3b-4089-ba7b-867a6b8adc6c","resolution":{"observed_at":"2026-08-08T21:55:57.939518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15670","last_updated":"2022-11-02T18:57:19Z","snapshot_observed_at":"2026-08-08T22:57:45.855434Z","submitted_at":"2021-03-29T14:48:24Z","title":"On the Adversarial Robustness of Vision Transformers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.15670","snapshot_observed_at":"2026-08-08T21:55:56.699771Z","title":"On the adversarial robustness of vision transformers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.699771Z"},"links":{"cited_paper":"/paper/2103.15670","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:357b7d06bce48ab44625930fd30c6f9bff874bbceed865a5f05eaae6628fe882","observation_id":"dbfc1ad7-256f-4222-b440-73d090c7ddb8","resolution":{"observed_at":"2026-08-08T21:55:56.699771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-08T21:55:56.704533Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.704533Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:7c1bb9a6c4cbf4c5d387ea15263213e76e60ff940908167a98d68d9ab1e32949","observation_id":"b595a56a-677c-4b78-9cf6-269b72b46635","resolution":{"observed_at":"2026-08-08T21:55:56.704533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.920110Z","title":"Improving adversarial robustness requires revisiting misclassified examples,","venue":null,"work_id":"18bc09d4-14b4-445b-9dae-2d162231b30a","year":2019},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.709480Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:7ad01c68c7e0307f29164eafbf007767d50f5c5f6a5e20095055dc6b0623678f","observation_id":"28c44e86-4660-479a-9e41-9b6ef60ebab6","resolution":{"observed_at":"2026-08-08T21:55:57.924779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02535","last_updated":"2023-12-24T23:11:19Z","snapshot_observed_at":"2026-07-06T13:49:23.138584Z","submitted_at":"2022-09-06T14:36:57Z","title":"Analyzing Transformers in Embedding Space","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02535","snapshot_observed_at":"2026-08-08T21:55:56.713959Z","title":"Analyzing transformers in embedding space,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.713959Z"},"links":{"cited_paper":"/paper/2209.02535","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:c34991313f245bb5a6a3cbc0f38dcfc458969cf642f86355c78f41629aef3f55","observation_id":"ed7bacdd-912a-4859-a567-964b05864939","resolution":{"observed_at":"2026-08-08T21:55:56.713959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.14680","last_updated":"2022-10-12T18:01:23Z","snapshot_observed_at":"2026-08-03T05:22:23.916601Z","submitted_at":"2022-03-28T12:26:00Z","title":"Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Space","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.14680","snapshot_observed_at":"2026-08-08T21:55:56.718987Z","title":"Transformer feed-forward layers build predictions by promoting concepts in the vocabulary space,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.718987Z"},"links":{"cited_paper":"/paper/2203.14680","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:062df6c0265dc9134a0e0271ba9f803f7f6d08de8425effcd18d8879fd390abc","observation_id":"c7b97406-8709-49c9-8e17-3a44947bcb7d","resolution":{"observed_at":"2026-08-08T21:55:56.718987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.903971Z","title":"Do vision transformers see like convolutional neural networks?","venue":null,"work_id":"6d4c77df-a0e7-4c72-af64-998d7206cd93","year":2021},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.723878Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:71f4afe4e0d7c0afc2cc434553697f76a592fe1cf2a3894df48d622429e1da25","observation_id":"e84d8915-d786-477d-83c3-c6dd96ab43a4","resolution":{"observed_at":"2026-08-08T21:55:57.909327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.887687Z","title":"Understanding and defending patched-based adversarial attacks for vision transformer,","venue":null,"work_id":"831d5239-3b2e-48d9-ab24-844a4278f901","year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.728259Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:930fac722bad261350e6cb8f6944df0825f57ec2b2c8571d3f7659b2e4e9fd24","observation_id":"565fb93c-0ef5-46cd-8cae-cdfc98734b78","resolution":{"observed_at":"2026-08-08T21:55:57.892656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.872753Z","title":"Analyzing vision trans- formers for image classification in class embedding space,","venue":null,"work_id":"5cbc40e4-8f35-46fb-be38-c445207be82e","year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.732602Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:99c627ee3bba4f13f5bbf7eb3c56e2098d67c9d466843754d29f14bf9b38d09a","observation_id":"64314351-ef68-4b17-9544-f18a35393bd9","resolution":{"observed_at":"2026-08-08T21:55:57.877748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-08T21:55:56.737104Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.737104Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:8d8f7845103604f0c3f86bc01384fceb980616575313811fb28d8573c98c6034","observation_id":"a9b02c2c-f59e-4706-ba71-aabb534d0a05","resolution":{"observed_at":"2026-08-08T21:55:56.737104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.857520Z","title":"Speech-transformer: a no-recurrence sequence-to-sequence model for speech recognition,","venue":null,"work_id":"b4c8316e-83a6-403c-8207-bb740915b15c","year":2018},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.741931Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:be55c52f8a8a753cc6d9b3094a41d18c0db0cdd203f947ab4a0f4bb2ffcce8e3","observation_id":"4cf262f9-a2aa-4db7-b756-ff413e394ffc","resolution":{"observed_at":"2026-08-08T21:55:57.862660Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.842456Z","title":"Geometric analysis and metric learning of instruction embeddings,","venue":null,"work_id":"84bc75c6-a0c9-4016-9979-6aa82b0b0c87","year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.746461Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:1a339df88d63a4512175b288afec940c24b9c5668eec12b6e561fa8b9402e919","observation_id":"7e1a0699-1b74-42f8-bd5c-c62493234b55","resolution":{"observed_at":"2026-08-08T21:55:57.847229Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-08T21:55:56.751171Z","title":"Representation en- gineering: A top-down approach to ai transparency,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.751171Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:03224387c26afe5f4b2cca5b414264ba518723b23bdc2eec5fe605035762cc66","observation_id":"18f1bd2b-c66e-4532-bad0-797c894675ac","resolution":{"observed_at":"2026-08-08T21:55:56.751171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13752","last_updated":"2024-11-01T07:51:36Z","snapshot_observed_at":"2026-07-06T18:03:24.368197Z","submitted_at":"2024-04-21T19:24:15Z","title":"Adversarial Representation Engineering: A General Model Editing Framework for Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13752","snapshot_observed_at":"2026-08-08T21:55:56.756082Z","title":"Towards general conceptual model editing via adversarial representation engineering,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.756082Z"},"links":{"cited_paper":"/paper/2404.13752","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:2b8773988ee24f7ef75d2327a106aa678d293a8641052f1f910be6181371f9af","observation_id":"eb278ed3-6a32-4747-8a01-6605bcb73ecf","resolution":{"observed_at":"2026-08-08T21:55:56.756082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.15568","last_updated":"2024-01-28T04:59:51Z","snapshot_observed_at":"2026-08-06T17:50:04.768784Z","submitted_at":"2024-01-28T04:59:51Z","title":"Intriguing Equivalence Structures of the Embedding Space of Vision Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.15568","snapshot_observed_at":"2026-08-08T21:55:56.760661Z","title":"Intriguing equivalence structures of the embedding space of vision transformers,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.760661Z"},"links":{"cited_paper":"/paper/2401.15568","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:79da6dc1cc530eacba0f6fe2be43f50732f482a39b6f0261fad428fb8da4c736","observation_id":"a53e4359-ca51-4455-a5db-44da95035e4d","resolution":{"observed_at":"2026-08-08T21:55:56.760661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.827597Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"10bf1081-5691-463b-9f13-bc570145fb93","year":2017},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.765403Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:828237a36d11ae3b845af5e90473046666987605a5c5d9240f15cc1e85e6aecf","observation_id":"41db1421-419e-4d9f-8ae5-ebe128cd51df","resolution":{"observed_at":"2026-08-08T21:55:57.832254Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.358396Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods,","venue":null,"work_id":"22d84135-94a6-4340-a384-56c6c8d71c4e","year":2017},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.769688Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:e3ee0d8f13132bbad2daa6d4bce3659838118d08e6fb23a9771c58854a9b2676","observation_id":"059f2246-6458-4977-b897-5cd9205c8dac","resolution":{"observed_at":"2026-08-08T21:55:57.363326Z","resolver_source":"arxiv_id_nonexistent","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.774331Z","title":"Deepfool: a simple and accurate method to fool deep neural networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.774331Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:133c1a3db3edcfaab36218c3d7a9fd4c2949c31ca389d6fc22e1d1dd237ed6b2","observation_id":"223a0a95-4345-4d40-9dff-58c764b0129e","resolution":{"observed_at":"2026-08-08T21:55:56.774331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-08T21:55:56.778848Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.778848Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:3c100297e82569256933be5d0481113e2b8d8f446a0ade64e44ffd8dba5d02dd","observation_id":"9b9b43b0-86a1-4099-9a2d-eb174b6c447d","resolution":{"observed_at":"2026-08-08T21:55:56.778848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.783657Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.783657Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:c214bc6674859657cdb5c135af29f908d4c571568020755356858c6f6f7e384b","observation_id":"dd9a6214-0b5d-4977-9f75-e232cebf306a","resolution":{"observed_at":"2026-08-08T21:55:56.783657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.787903Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.787903Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:20244a602ff36506d22b69bd03efd9f13c75a41045f014f548fe0f22a9176c91","observation_id":"bbd18d83-64c0-4cfb-a41e-34e1cc31e903","resolution":{"observed_at":"2026-08-08T21:55:56.787903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.782961Z","title":"Transferability in machine learning: From phenomena to black-box attacks using adver- sarial samples,","venue":null,"work_id":"75b2b8e1-13f1-44c9-85ed-ca8f2933bcec","year":2016},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.792629Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:de990028792d0157f50f2944dd13016723bdfc641f129f3ee26add96efb332c9","observation_id":"c94a54a2-1787-4a04-9c40-f84ec6ac6ce7","resolution":{"observed_at":"2026-08-08T21:55:57.788483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.768067Z","title":"Exploring adversarial robustness of vision transformers in the spectral perspective,","venue":null,"work_id":"77e8b1d2-09a0-4fae-b4d6-198f12d1aad3","year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.797332Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:364dbc77c134c0200265bdc05630c56f2c49d67f2d33a948edb994d7b58e7dbb","observation_id":"cae8eb0b-a1ce-4c77-9ddf-8b8f89db408b","resolution":{"observed_at":"2026-08-08T21:55:57.772794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.752926Z","title":"Understanding adversarial robustness of vision transformers via cauchy problem,","venue":null,"work_id":"4a78c7dc-b928-4793-bf0e-c596333d531e","year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.801846Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:6feef85c461e7f06e4a6c21d8c0c01a4405fb9f06202a2b97d890f2601d5f7c4","observation_id":"daf7c609-1854-40c9-8cdf-0a9f8e0f11ad","resolution":{"observed_at":"2026-08-08T21:55:57.757657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07392","last_updated":"2024-07-10T06:32:58Z","snapshot_observed_at":"2026-07-06T18:44:03.869577Z","submitted_at":"2024-07-10T06:32:58Z","title":"Malicious Path Manipulations via Exploitation of Representation Vulnerabilities of Vision-Language Navigation Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07392","snapshot_observed_at":"2026-08-08T21:55:56.806424Z","title":"Malicious path manipulations via exploitation of representation vulnerabilities of vision-language navigation systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.806424Z"},"links":{"cited_paper":"/paper/2407.07392","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:fb7a03848f9b227df96871c7711b5749e78ac679a263151e6db33cec469557d6","observation_id":"bdfbb109-afea-4ab3-95e9-ae099c0e795a","resolution":{"observed_at":"2026-08-08T21:55:56.806424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.811327Z","title":"Towards transferable adversarial attacks on vision transformers,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.811327Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:b5dbc41954984b50eaa0b17d4d2e54ae4bcb19e81d9fbf8f0f1aa54badf895e9","observation_id":"9d22b454-f878-4148-97af-ac832e25e23a","resolution":{"observed_at":"2026-08-08T21:55:56.811327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.726398Z","title":"Dual stage black-box adversarial attack against vision transformer,","venue":null,"work_id":"8461813f-9d78-4485-a9dc-53ed97914fc0","year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.815648Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:6524ef6a7092d1df6d9977b3ecbaa5140ca7eea5ea6bc37c154ae0ec9f5f6d37","observation_id":"4cd2ae69-de9c-4f1c-a9a3-e5996eec4d01","resolution":{"observed_at":"2026-08-08T21:55:57.731569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02220","last_updated":"2024-11-28T17:05:08Z","snapshot_observed_at":"2026-07-06T16:56:49.877351Z","submitted_at":"2023-12-03T18:31:19Z","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","version":2},"cited_work":{"arxiv_id":"2312.02220","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.02220","snapshot_observed_at":"2026-08-08T21:55:57.091628Z","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","venue":"cs.CV","work_id":"aa0204d8-999c-4978-8733-6b445e489425","year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.820079Z"},"links":{"cited_paper":"/paper/2312.02220","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:a7966d0aeab8973019b34331edb84374f9bd4900c9cf28ec4e30a6995bb728fb","observation_id":"94e7b802-1707-497c-b116-d2457b16bb35","resolution":{"observed_at":"2026-08-08T21:55:57.096674Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2206.06761","last_updated":"2022-09-08T07:10:17Z","snapshot_observed_at":"2026-07-06T13:20:37.241795Z","submitted_at":"2022-06-14T11:20:16Z","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","version":4},"cited_work":{"arxiv_id":"2206.06761","doi":null,"metadata_source":"pith","pith_arxiv_id":"2206.06761","snapshot_observed_at":"2026-08-08T21:55:57.067546Z","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","venue":"cs.CV","work_id":"7b5f609e-d44b-4d87-bb45-b123b6a3d039","year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.824675Z"},"links":{"cited_paper":"/paper/2206.06761","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:4e878aaee2a4f337cc18b1b63558d57b4ca273f7f480e8bb55c9d9577f5f13df","observation_id":"6208163a-2fb5-4bce-b30e-ca3d3cd01c9e","resolution":{"observed_at":"2026-08-08T21:55:57.074603Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.710517Z","title":"Transferable adversarial attacks on vision transformers with token gradient regularization,","venue":null,"work_id":"b665d5a7-9eda-4ef0-ae6d-f159ecfc9820","year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.829728Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:58a2ffd7effb4df04bb5445531abc198547be3c0ebbe95de4773a8bf8bdf794b","observation_id":"49599946-1957-4000-80c7-a5e21de782d4","resolution":{"observed_at":"2026-08-08T21:55:57.715219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.07125","last_updated":"2021-01-03T19:58:55Z","snapshot_observed_at":"2026-07-06T08:15:25.894149Z","submitted_at":"2019-08-20T01:51:40Z","title":"Universal Adversarial Triggers for Attacking and Analyzing NLP","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.07125","snapshot_observed_at":"2026-08-08T21:55:56.833996Z","title":"Universal adversarial triggers for attacking and analyzing nlp,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.833996Z"},"links":{"cited_paper":"/paper/1908.07125","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:8650f3ede7147899cce1af65a529e7e8fde4fea06a171eb54899b9569a83cc9f","observation_id":"825360b9-5028-4b56-be78-1f2f0ccd7687","resolution":{"observed_at":"2026-08-08T21:55:56.833996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.19160","last_updated":"2024-10-24T21:01:45Z","snapshot_observed_at":"2026-07-06T19:39:23.839070Z","submitted_at":"2024-10-24T21:01:45Z","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.19160","snapshot_observed_at":"2026-08-08T21:55:56.838748Z","title":"Adversarial attacks on large language models using regularized relaxation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.838748Z"},"links":{"cited_paper":"/paper/2410.19160","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:fb1cde2afa331491d7a77b435193e7b3ec6f354d6acbfbf2ea54cf44a37fd51d","observation_id":"844fb739-fac2-4cc4-822f-18d4d7b318d3","resolution":{"observed_at":"2026-08-08T21:55:56.838748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.693330Z","title":"Trade-off between robustness and accuracy of vision transformers,","venue":null,"work_id":"31cf8caf-4356-4b4c-b29a-54ba2897e48a","year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.843286Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:d10deecca491c2cf3d020fa38aad17ab2cce9ad2b2acb4c1c6428eb8d1067deb","observation_id":"c193a182-3e71-48c7-8774-9d98d305b7ba","resolution":{"observed_at":"2026-08-08T21:55:57.698590Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.677271Z","title":"When adversarial training meets vision transformers: Recipes from training to architec- ture,","venue":null,"work_id":"9de64096-2873-4c6e-b871-48619b2f8129","year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.847731Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:e30cb10ab356949a3f3e0c048f431be8bccae474f377893336cdfd7c193c0b56","observation_id":"2b8cb184-a4b7-46e0-b30a-4c272bca7d1b","resolution":{"observed_at":"2026-08-08T21:55:57.682723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08392","last_updated":"2025-01-04T03:37:30Z","snapshot_observed_at":"2026-08-07T12:06:34.277325Z","submitted_at":"2022-03-16T04:45:59Z","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.08392","snapshot_observed_at":"2026-08-08T21:55:56.852148Z","title":"Patch-fool: Are vision transformers always robust against adversarial perturbations?","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.852148Z"},"links":{"cited_paper":"/paper/2203.08392","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:bb70f6609edfab4eb825edbd6842c46ed58ef8f3739d0df002590ff392c86b6a","observation_id":"0c40af13-8193-4d13-af12-7f909b157f6e","resolution":{"observed_at":"2026-08-08T21:55:56.852148Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.662028Z","title":"Harnessing edge information for improved ro- bustness in vision transformers,","venue":null,"work_id":"0a348a7d-cafa-4773-aebf-60c10292a2a6","year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.856667Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:80665c8bb43363fc8b32a50ef0abaf40235b56d5f5223bd2f6bbe4c7a8597736","observation_id":"0ce83078-9cb3-43d6-8f1b-0c536c026d81","resolution":{"observed_at":"2026-08-08T21:55:57.667081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.647038Z","title":"Random entangled tokens for adversarially robust vision transformer,","venue":null,"work_id":"45837096-28f1-4ece-b447-1774739d011c","year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.861141Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:0ee0a814de57e71a62e5e31a0c12b5f3be27aefe60bdf0246b680107e76e4707","observation_id":"1507362e-63bd-410a-a606-b0908b3903fe","resolution":{"observed_at":"2026-08-08T21:55:57.651816Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.865770Z","title":"Certified adversarial robustness via randomized smoothing,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.865770Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:e622564071406ba4e6f8a4fc5bc03d4dc794606d1cd64feaa07ab48cd050a897","observation_id":"423035ef-0954-4a93-8e1b-34e609987e0b","resolution":{"observed_at":"2026-08-08T21:55:56.865770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.622032Z","title":"{PatchGuard}: A provably robust defense against adversarial patches via small receptive fields and masking,","venue":null,"work_id":"cc743d85-0ba7-465e-aca7-b2cbe737cece","year":2021},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.870469Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:d138c5d1279b7d0cc13e355c756aca2ba864cc61c74196ea2143c49e72e72285","observation_id":"4e80317f-7b05-4981-8716-eab976ad264d","resolution":{"observed_at":"2026-08-08T21:55:57.626764Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10248","last_updated":"2024-10-10T13:20:13Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-08-20T12:21:05Z","title":"Steering Language Models With Activation Engineering","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.10248","snapshot_observed_at":"2026-08-08T21:55:56.874769Z","title":"Activation addition: Steering language models without optimiza- tion,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.874769Z"},"links":{"cited_paper":"/paper/2308.10248","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:5e5c1ab34e490a943cda7ebe4c70f4402f3b658bc60c354bcf77c4d30c486fb1","observation_id":"bd6e3cd9-bbed-4636-9938-d05155d14a4f","resolution":{"observed_at":"2026-08-08T21:55:56.874769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.06668","last_updated":"2024-02-13T22:37:39Z","snapshot_observed_at":"2026-07-06T16:46:06.801011Z","submitted_at":"2023-11-11T21:19:44Z","title":"In-context Vectors: Making In Context Learning More Effective and Controllable Through Latent Space Steering","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.06668","snapshot_observed_at":"2026-08-08T21:55:56.879587Z","title":"In-context vectors: Making in context learning more effective and controllable through latent space steering,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.879587Z"},"links":{"cited_paper":"/paper/2311.06668","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:d791906c137779e12f9d27b73e7d61a6dfebb04a358ce23ceab60381c356fdf8","observation_id":"9b6cf97a-2567-4702-b105-087a6e35b8af","resolution":{"observed_at":"2026-08-08T21:55:56.879587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05162","last_updated":"2024-10-24T19:21:52Z","snapshot_observed_at":"2026-08-02T21:32:36.729604Z","submitted_at":"2024-02-07T18:34:38Z","title":"Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05162","snapshot_observed_at":"2026-08-08T21:55:56.884625Z","title":"Assessing the brittleness of safety alignment via pruning and low-rank modifications,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.884625Z"},"links":{"cited_paper":"/paper/2402.05162","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:d75c867a66d43649d1a4be818f30b9b7e89c43fc52a9e15fc2da5ef861e41543","observation_id":"fdb2e949-cf83-4f26-a872-9c43d77b03bf","resolution":{"observed_at":"2026-08-08T21:55:56.884625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.889482Z","title":"Pytorch image models,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.889482Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:24948e023d97eede49e5dda9a46aeb0c6d549a872afb399795d9fed11e5f74c1","observation_id":"0b1e96d4-c46e-4d67-a55c-8028fcf435a9","resolution":{"observed_at":"2026-08-08T21:55:56.889482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.893972Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.893972Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:7ec75e5cce7abc746e3c1ad6118de88707f8e49dd71d2a9378aceea4dcebe052","observation_id":"d522b9cc-a955-4f3a-a9f4-18342c09f066","resolution":{"observed_at":"2026-08-08T21:55:56.893972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.06450","last_updated":"2016-07-21T19:57:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-07-21T19:57:52Z","title":"Layer Normalization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.06450","snapshot_observed_at":"2026-08-08T21:55:56.898568Z","title":"Layer normalization,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.898568Z"},"links":{"cited_paper":"/paper/1607.06450","citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:353369b05b0764ad3bc409e2596bac1b1718eef64869eb018ec25cd13a06dc5a","observation_id":"c80acbaf-359d-4e8c-90c3-2600903a12c6","resolution":{"observed_at":"2026-08-08T21:55:56.898568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.903522Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.903522Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:d04a6754e90d1a658adae410b0c48db0755727d807876e9ed8d95428fbd6bacf","observation_id":"28b12efa-8229-4603-9a2f-b87074ae67ae","resolution":{"observed_at":"2026-08-08T21:55:56.903522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.576874Z","title":"imagenette,","venue":null,"work_id":"dbc2fcd2-f4ea-4863-a5f4-d86c9d50a127","year":2019},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.907973Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:ee1ca54be8eadaf60883698deaa81acaef17c16dccfd7e8347b866713a776f0e","observation_id":"ec516fd6-985a-4283-9b15-a133845f3d90","resolution":{"observed_at":"2026-08-08T21:55:57.581998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.561133Z","title":"Cifar-10 (canadian institute for advanced research),","venue":null,"work_id":"52e1810e-0a33-41ab-b952-f4c346e97b5d","year":2010},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.912291Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:6aa1d31590a73cb11a530a5ac89dd00b457bd2700f9b251d6651b1d6040d27f2","observation_id":"5d4093ba-ed64-42c2-a15f-6bb94355a49e","resolution":{"observed_at":"2026-08-08T21:55:57.566160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:56.916516Z","title":"Training data-efficient image transformers & distillation through attention,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.916516Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:26a457fd25f6a05e99eff56d9f05e391b8520dfce35dfa4641b525f893a9fec1","observation_id":"c09b11c5-f1ae-411b-936a-bec7d105287e","resolution":{"observed_at":"2026-08-08T21:55:56.916516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T21:55:57.535182Z","title":"How deep learning sees the world: A survey on adversarial attacks & defenses,","venue":null,"work_id":"9a4114c1-cce1-4e53-a7de-555984a26dcd","year":2024},"citing_paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-08T21:55:56.921124Z"},"links":{"citing_paper":"/paper/2502.04679"},"observation_digest":"sha256:3a4038238234db89d6d60da46a387dc50d2b3fa7e069da9c90eb7c4c9587ec17","observation_id":"4aea6147-5d6e-49b5-bf36-8eb50b47c248","resolution":{"observed_at":"2026-08-08T21:55:57.540141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.04679","last_updated":"2025-02-07T05:58:16Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T00:38:19.475413Z","submitted_at":"2025-02-07T05:58:16Z","title":"Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":3,"verified_fuzzy":22},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 2 inbound Pith citation observations for arXiv:2502.04679."}