{"as_of":"2026-08-18T12:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e0ed6ec156667c3797e5281fd01e4aeaa168b4137f61483f0a0e26f627b7e1dd","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T12:10:56.473069Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2504.13551/citation-record","integrity":"/paper/2504.13551/integrity","json":"/paper/2504.13551/citation-record.json","paper":"/paper/2504.13551"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.244242Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.244242Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:997066d8db79621be42e1443a8b1e195bbfe345c686a01e8dc6272c31d6abf93","observation_id":"7e09d1d1-205f-43bd-9195-3e6d7a5e1035","resolution":{"observed_at":"2026-08-16T12:10:56.244242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.11175","last_updated":"2018-04-12T17:03:44Z","snapshot_observed_at":"2026-08-14T19:31:00.623029Z","submitted_at":"2018-03-29T17:43:03Z","title":"Universal Sentence Encoder","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.11175","snapshot_observed_at":"2026-08-16T12:10:56.249502Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.249502Z"},"links":{"cited_paper":"/paper/1803.11175","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:4d6519092a0f2d0e471a12526f22584b893e7ff3cab5a1aecb0cf74821e5b1c1","observation_id":"804e93af-6480-413b-91e2-0a99f347c291","resolution":{"observed_at":"2026-08-16T12:10:56.249502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-16T12:10:56.255785Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.255785Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:0401c84d6c4c9b5ac82ae7057d2be7bce4c44c084f6c2ec4336a27f2af2d0a23","observation_id":"69ba0f18-29bb-4c33-a7db-3e98f0db3110","resolution":{"observed_at":"2026-08-16T12:10:56.255785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.265633Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.265633Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:0ec8041d401d0cceb812006421a0edcfc4006cb0b613a1574b252db9d2fafe1c","observation_id":"80c382ee-06f9-4b0d-8185-7f756b530024","resolution":{"observed_at":"2026-08-16T12:10:56.265633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:57.077079Z","title":null,"venue":null,"work_id":"c0fdabfb-b9a0-4a9b-9dd4-e6c2dad336a7","year":2022},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.270547Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:85b779d3f8ab22721c32dbb77ae5c311c410ba9657c72f6c7447d829930c6fc7","observation_id":"4cf9c53d-ec33-4552-b066-28a317041a68","resolution":{"observed_at":"2026-08-16T12:10:57.082906Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:57.062160Z","title":null,"venue":null,"work_id":"47cdd581-830d-4b9f-a6e2-56a4f718a667","year":2020},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.276479Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:86bd42686d648f218f80eebbf575b1cd791313be06149d7414041cb3836bc765","observation_id":"f4f9cabf-35a9-4292-ad89-c05b6652c412","resolution":{"observed_at":"2026-08-16T12:10:57.066854Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.281368Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.281368Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:f8b016d38b092ea3eff1903dfdabf74bf4c1590f9fa5ab7798a9e3fd5d4cdf30","observation_id":"d85cc113-153b-449b-bf31-9d91d4c0019c","resolution":{"observed_at":"2026-08-16T12:10:56.281368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.286156Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.286156Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:04d2e2577fb8f7ae335bcffd7247ebbfbfda6766f8ef474983646b9303dd34b2","observation_id":"43896ab6-8461-4c04-87bc-8ed1369def59","resolution":{"observed_at":"2026-08-16T12:10:56.286156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:57.046577Z","title":null,"venue":null,"work_id":"7bd44ad3-dc23-4104-85dc-4bfe184cdbee","year":2021},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.291392Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:7d3c01d7bab783329dfc5b4bafbd64d0609fb04f4bf49d000638cb394f65ee09","observation_id":"ba9529f3-7627-4fa4-b31a-4edf84e3864b","resolution":{"observed_at":"2026-08-16T12:10:57.051697Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.295986Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.295986Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:3a6fb822b83c27816ce9ba30be59dcde05564b1f49a9f929f2124f14fa5d68eb","observation_id":"6531ea06-2b05-4648-9f05-3d39e23635ad","resolution":{"observed_at":"2026-08-16T12:10:56.295986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.07597","last_updated":"2023-01-18T15:23:25Z","snapshot_observed_at":"2026-08-16T16:01:38.961755Z","submitted_at":"2023-01-18T15:23:25Z","title":"How Close is ChatGPT to Human Experts? Comparison Corpus, Evaluation, and Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.07597","snapshot_observed_at":"2026-08-16T12:10:56.300920Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.300920Z"},"links":{"cited_paper":"/paper/2301.07597","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:aaeebbc135c99fc5be40450baddfb50c7513922db249666b677197e72e37a4f6","observation_id":"bb5b6c01-c2cb-4fca-afd9-db4c9839c821","resolution":{"observed_at":"2026-08-16T12:10:56.300920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.306616Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.306616Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:faa0be8ea7acd4b4a1d0ce77467c23e66c9da863e38c28325e83766d7c0cd77f","observation_id":"8a819357-ce60-4c3b-83ea-ff7e0f89a470","resolution":{"observed_at":"2026-08-16T12:10:56.306616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.03654","last_updated":"2021-10-06T21:02:00Z","snapshot_observed_at":"2026-08-16T13:36:21.119762Z","submitted_at":"2020-06-05T19:54:34Z","title":"DeBERTa: Decoding-enhanced BERT with Disentangled Attention","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.03654","snapshot_observed_at":"2026-08-16T12:10:56.312067Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.312067Z"},"links":{"cited_paper":"/paper/2006.03654","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:8a470eb93d6b2e8051dd7f9997998fe4b4e1cc88d5867334bc7586470ad3d032","observation_id":"2cdaa7fe-5109-4865-8ea0-2dc5528c27db","resolution":{"observed_at":"2026-08-16T12:10:56.312067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:57.022520Z","title":null,"venue":null,"work_id":"3cd31bdb-1937-4ae5-9fc6-e9d6b1c1f4fa","year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.317122Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:5fe673015d43c09fe4813d90fdf077f66a5c6503e96c2ef94b64fd15c9416eeb","observation_id":"cea4316b-f59d-4729-a013-70f038694ec4","resolution":{"observed_at":"2026-08-16T12:10:57.027414Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.15777","last_updated":"2024-05-29T15:50:43Z","snapshot_observed_at":"2026-08-16T13:58:15.315616Z","submitted_at":"2024-04-24T09:55:24Z","title":"A Comprehensive Survey on Evaluating Large Language Model Applications in the Medical Industry","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.15777","snapshot_observed_at":"2026-08-16T12:10:56.321987Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.321987Z"},"links":{"cited_paper":"/paper/2404.15777","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:7a9faab2dd546b33190dbe53e93febda33509fc74d7a69a61bc5e2d6d6337eee","observation_id":"1c70732f-2358-4667-9f11-aff666720254","resolution":{"observed_at":"2026-08-16T12:10:56.321987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.327174Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.327174Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:ec390df2604efe37f1901500d5dd32ea3dd056c888d09ee5c3c57b5dfd957fe9","observation_id":"749b3fd4-a89e-4f8f-843d-8b7c910b7a28","resolution":{"observed_at":"2026-08-16T12:10:56.327174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.331904Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.331904Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:7125fdc496a35853b90438e408027a08b32af6a0baf732ba57eb8b628d0259bb","observation_id":"bd372f32-f81a-4530-a2d8-d6d6f02f2fdc","resolution":{"observed_at":"2026-08-16T12:10:56.331904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.336617Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.336617Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:8d6388e44a18e14756c4429d6864c8d068c0399fd55e03adbf82cca2ca3fb0a5","observation_id":"54535590-cd1e-44bd-aeea-6bb0af6d311a","resolution":{"observed_at":"2026-08-16T12:10:56.336617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.11942","last_updated":"2020-02-09T03:00:18Z","snapshot_observed_at":"2026-08-18T01:27:11.590348Z","submitted_at":"2019-09-26T07:06:13Z","title":"ALBERT: A Lite BERT for Self-supervised Learning of Language Representations","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.11942","snapshot_observed_at":"2026-08-16T12:10:56.341263Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.341263Z"},"links":{"cited_paper":"/paper/1909.11942","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:42678a99df2e5b678f40f0c8e4ae94b1d5562b4225a42c164fcebb8a20607ee7","observation_id":"29fe3ca7-5b6e-4cb3-b323-e58be319abbf","resolution":{"observed_at":"2026-08-16T12:10:56.341263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.346220Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.346220Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:252aedfd1babf81210014e6341a1861f350c39720b1145108762044c4ea77570","observation_id":"121aad07-8392-46da-baaf-1ddb00a24947","resolution":{"observed_at":"2026-08-16T12:10:56.346220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.351118Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.351118Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:985dfad2ea36473bcf1176a0877f67957942c9207a54d9861f708ad1167442e3","observation_id":"363f4be2-4b14-4c8c-afd1-d616a12b989e","resolution":{"observed_at":"2026-08-16T12:10:56.351118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.986966Z","title":null,"venue":null,"work_id":"294d1bff-a41d-46f0-bae2-6e3eddf64dae","year":2020},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.355739Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:621216b00b67c7ab43a263b1b108afc5c4f2e95aa53da7a82ee535e242d72045","observation_id":"0ecc3835-efc5-4e59-8b6a-e9ec79dfea5b","resolution":{"observed_at":"2026-08-16T12:10:56.992170Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.972278Z","title":null,"venue":null,"work_id":"6125a7f2-a4c7-4460-bac0-7ea04dfad840","year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.360064Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:aa40af5f362a5e4ef9aa3462f2e488a34fcaf8be126ac42cbd3185b3870fd976","observation_id":"d2942bf1-8cf8-4d06-be8a-4ebe7636190d","resolution":{"observed_at":"2026-08-16T12:10:56.976857Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.364472Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.364472Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:6a818d9dfaf44964485dab69c5fc0e5e69ed73406280acddfbcbc3d01bede140","observation_id":"72b664db-a0c7-4ae3-9a33-759c8551ec9a","resolution":{"observed_at":"2026-08-16T12:10:56.364472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1907.11692","last_updated":"2019-07-26T17:48:29Z","snapshot_observed_at":"2026-08-16T14:33:50.657682Z","submitted_at":"2019-07-26T17:48:29Z","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.11692","snapshot_observed_at":"2026-08-16T12:10:56.368851Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.368851Z"},"links":{"cited_paper":"/paper/1907.11692","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:e0590bd9543e315cdb1745c2435631ee003c052a9511ffd417cb43998224a90d","observation_id":"80cf02f0-dba7-46ba-8a46-cbe84ef506f8","resolution":{"observed_at":"2026-08-16T12:10:56.368851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.956854Z","title":null,"venue":null,"work_id":"f7c5f531-b7e2-4b4a-8bdb-7495a2668e91","year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.373701Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:f9fe0e0f7dabb6951159cc2a79641ebf256b0014a38ed1bba02153715be8ae73","observation_id":"d61fbf50-092f-428a-be64-c61e6948d410","resolution":{"observed_at":"2026-08-16T12:10:56.962068Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.378399Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.378399Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:5327699562d7a2f8d769f25e43b2f71d1e16fc9509468228ea207f41981ebf1f","observation_id":"30743a20-8dab-4057-9018-8d7f0672f79e","resolution":{"observed_at":"2026-08-16T12:10:56.378399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.383142Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.383142Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:02ccab94919e9880da73447159e9e8a0850a132ce3b99f7d1e915cce7708d897","observation_id":"16030fdd-8aab-4c8e-92df-60c53ca6c4ef","resolution":{"observed_at":"2026-08-16T12:10:56.383142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.387889Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.387889Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:70aaabc2be29d5b371ce6a45d57050833f027ddfa61bb09dc5f5aa59bcba79ca","observation_id":"d6c30308-90b6-4386-a750-2fbb370e1a0e","resolution":{"observed_at":"2026-08-16T12:10:56.387889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2023.findings-emnlp.889","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.583203Z","title":null,"venue":null,"work_id":"1f3bac5b-57a5-436c-8704-a766c37b9cce","year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.392402Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:89f2215b29de8e6752ae31192de2721a5d436617db47711cfdcf9bb49fa03d96","observation_id":"b013c63c-69d2-4686-8f58-0b3639dfa83a","resolution":{"observed_at":"2026-08-16T12:10:56.587839Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-15T19:47:29.283675Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-16T12:10:56.396856Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.396856Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:978c7c2771c1521a108d981ed97bcb564bf6c0d4233373fe0839accffccefb20","observation_id":"00b4218c-65a9-4032-ad05-6c138c9ad6ee","resolution":{"observed_at":"2026-08-16T12:10:56.396856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.401688Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.401688Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:e020cfc21585fbe21cde5804e47eea47581feebd5e1dcf3bb4ba2bb1b5ef91ef","observation_id":"3151a323-03f9-4a24-8113-cd62a8b6c352","resolution":{"observed_at":"2026-08-16T12:10:56.401688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.407107Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.407107Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:291c0519ec84418e9b167e0c6b0c04da2a40b319e21812a386a751a57ed97f6f","observation_id":"141d5af2-f6f6-4c0e-ad4b-162b3c6513dd","resolution":{"observed_at":"2026-08-16T12:10:56.407107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-16T12:10:56.411896Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.411896Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:479f42ecd171d4804870a452a78c70211d5f4d45b46ebb987f305f25b0ddb32a","observation_id":"73c0c291-49e8-4ebb-b978-a73ef0b21a74","resolution":{"observed_at":"2026-08-16T12:10:56.411896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/w18-6321","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.557159Z","title":null,"venue":null,"work_id":"45b97c3d-4629-4dca-b8f8-18473a5614d7","year":2018},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.416525Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:9b4da29c2f56b18793ba809d0de7a2c8b923fe93cd3a7593241f15fdb80740af","observation_id":"48e91318-eda3-4c10-8482-edbbb2c1f60a","resolution":{"observed_at":"2026-08-16T12:10:56.563065Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05561","last_updated":"2024-09-30T10:17:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-10T22:07:21Z","title":"TrustLLM: Trustworthiness in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05561","snapshot_observed_at":"2026-08-16T12:10:56.420965Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.420965Z"},"links":{"cited_paper":"/paper/2401.05561","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:4169602a6243d88e33f6b4197008fb7f013a08698ba4ff1a42e2e53938f06697","observation_id":"0a0b0e17-bb60-4dbe-8e74-cef6b133a20b","resolution":{"observed_at":"2026-08-16T12:10:56.420965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2022.findings-naacl.14","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.542431Z","title":null,"venue":null,"work_id":"83b5f9ab-d8c7-4247-b72e-b3eaedf835f5","year":2022},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.426393Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:6c9eded7bc09a8fe69351a645a0870b4c8ac7884024246b30b8ff144fc4eda3e","observation_id":"7facf97f-c975-4eb4-8519-f041dbc64b2e","resolution":{"observed_at":"2026-08-16T12:10:56.547116Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12736","last_updated":"2024-11-26T13:35:05Z","snapshot_observed_at":"2026-08-18T09:53:59.273626Z","submitted_at":"2024-04-19T09:29:53Z","title":"Large Language Model Supply Chain: A Research Agenda","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12736","snapshot_observed_at":"2026-08-16T12:10:56.430965Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.430965Z"},"links":{"cited_paper":"/paper/2404.12736","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:67a367d2287f09fdf2d174a4eeb1804da940472ba5ee094faacdd6c7c9a08a91","observation_id":"0c66eb47-d4a3-441d-98f6-a29adf083b01","resolution":{"observed_at":"2026-08-16T12:10:56.430965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.435542Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.435542Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:326f04e618b4f3d9e3d9daacdc55958562bf38f51a5899620cd82bb9950aab04","observation_id":"b3c14e8a-1c94-4ca1-9632-58ab163078ad","resolution":{"observed_at":"2026-08-16T12:10:56.435542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.440158Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.440158Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:35e2c48227da668dde9663555ed909d8fd3abd6e7a015b39375020c0d952c9dd","observation_id":"c6bf0d62-ab8a-477f-8c45-b54af762ab87","resolution":{"observed_at":"2026-08-16T12:10:56.440158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.913834Z","title":null,"venue":null,"work_id":"7dc8941c-82a6-477a-927a-1355f0a98bd1","year":2020},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.444662Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:ed74fcd0ff40f15b5f601a5d93f70fcbc86136fbd60dc836bc302369a3aa7cec","observation_id":"615dd482-e8a2-4055-ab76-74ce2d4cdb7c","resolution":{"observed_at":"2026-08-16T12:10:56.918184Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.449383Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.449383Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:9b0518abef0d34d4eef8ac4608a9539ea2a931a7b3be9d878e3f253054178f0a","observation_id":"014a8002-5df4-4aed-831c-5f82e53283c8","resolution":{"observed_at":"2026-08-16T12:10:56.449383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.898797Z","title":null,"venue":null,"work_id":"8b3991d6-5f94-4244-b517-8bf2073b8bf7","year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.453917Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:4eef90f2a87a8cfbf596741f832c0ee99caf744d4482b4e71d63ff5cf66a2726","observation_id":"3f250fbf-513e-4bdb-bd45-53b293e2b132","resolution":{"observed_at":"2026-08-16T12:10:56.903684Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2023.findings-acl.717","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.505157Z","title":null,"venue":null,"work_id":"0c84fb8c-7662-4d18-8d57-0baa768823d8","year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.458270Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:7ac0659621fd413b0be4c31719422b411b4f962db0999272bc539f3d65b9452d","observation_id":"8be3a85d-fecf-42b3-b269-b7ab9aefc465","resolution":{"observed_at":"2026-08-16T12:10:56.511134Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-16T12:10:56.463269Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.463269Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:752f14d93b7e715fc80481c9a83fec282bc72dcdd65643fdacc8398450ec6c0a","observation_id":"d6f92d1f-0810-401f-a575-5474aad90c9e","resolution":{"observed_at":"2026-08-16T12:10:56.463269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.467907Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.467907Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:c8a649db7cd503a39af6ed695cfee8495a7f730cb588f824bd10a5b156e72773","observation_id":"2eb784d5-ba1a-4139-b401-a5fbd8841f8a","resolution":{"observed_at":"2026-08-16T12:10:56.467907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:10:56.473069Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-16T12:10:56.473069Z"},"links":{"citing_paper":"/paper/2504.13551"},"observation_digest":"sha256:42f0bc594ae0db6a71a4befa72d1dcab812222bd04064ae9b6665624b58bb823","observation_id":"85a8fab3-7df6-4ecc-8266-5d96b65e0de8","resolution":{"observed_at":"2026-08-16T12:10:56.473069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2504.13551","last_updated":"2025-04-18T08:36:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T12:03:50.621314Z","submitted_at":"2025-04-18T08:36:38Z","title":"Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":43,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2504.13551."}