{"as_of":"2026-08-17T09:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:845a78cc5530fd0bdc1f68422443b6eed07a71b6a69874b0b2ddcc64da49d10e","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T05:34:48.157090Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2504.21054/citation-record","integrity":"/paper/2504.21054/integrity","json":"/paper/2504.21054/citation-record.json","paper":"/paper/2504.21054"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.817308Z","title":null,"venue":null,"work_id":"7410be03-14a5-4ae2-b45e-a1facc2267f6","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.951856Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:07ec0530f277fecd7de3fc64527d12bcc88560bce34db5bb16a7a3349844c700","observation_id":"3f53026b-dbc4-43cf-ae70-7f19583cb96b","resolution":{"observed_at":"2026-08-16T05:34:48.821704Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-08-16T05:42:20.700873Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-16T05:34:47.961677Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.961677Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:8171e33cb934abed459d9d4d4c27ae225516feef419431c4f4c13527317f1743","observation_id":"49963389-d6a1-4faf-bea7-372c2a878ca4","resolution":{"observed_at":"2026-08-16T05:34:47.961677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.789738Z","title":null,"venue":null,"work_id":"ee1e66e9-3723-4cf4-82fc-e30cfad0f649","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.967094Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:ca9603592d410978aefb819b1dfd502efcef48589357153930c074f454194824","observation_id":"c2fac7ac-a3cb-4d75-b364-70769c23b819","resolution":{"observed_at":"2026-08-16T05:34:48.794255Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-16T05:34:47.971682Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.971682Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:b885dc68fe55ff498e02c4486035c176d563e8dc8d9b683937237525fc747c00","observation_id":"7356b53e-3c06-4068-b6a4-77920384a7b2","resolution":{"observed_at":"2026-08-16T05:34:47.971682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.776197Z","title":null,"venue":null,"work_id":"379a3251-035b-433e-8c65-355477938d39","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.976683Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:4cd4fb563636cb46317b280232c8bfc3e9ffa69ae83e8ba0bd2504605b15610e","observation_id":"9e7820de-ac40-459f-ab18-6f139c0c078c","resolution":{"observed_at":"2026-08-16T05:34:48.780442Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.762139Z","title":null,"venue":null,"work_id":"c14ef0d6-855d-443e-82ae-4b878a58c40a","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.981091Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:2b58383706f41ebe7e1f11e1eb4f547b81180836a83fe764a06dd5f40636c040","observation_id":"1aa5c8a3-a349-44a8-ba44-6c333ad9bc4b","resolution":{"observed_at":"2026-08-16T05:34:48.766518Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.747719Z","title":null,"venue":null,"work_id":"1195132c-9765-4852-9fa1-72a5a90bf35a","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.985682Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:d89e64346c8cf1a3b8b0ae131d23c72ba8ef9774f3bf7e317b716650197deda3","observation_id":"7ca98b1e-b462-4dd6-9601-b6db2a420796","resolution":{"observed_at":"2026-08-16T05:34:48.752272Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.733496Z","title":null,"venue":null,"work_id":"15cafbe8-d501-4d2d-93de-ee61333e1304","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.990691Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:283af21d7825dd25057db9f61f2a78df88fb28426895d33921cb809f76395233","observation_id":"1ea27f00-c905-4ffe-bf0c-66f9ea0ae30e","resolution":{"observed_at":"2026-08-16T05:34:48.738355Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.719402Z","title":null,"venue":null,"work_id":"e1d8c864-4a20-493b-9cd4-bd333ab82684","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.995096Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:cfa05eaf49c7155a8931f0ce85baba918237991b2fc554a9df8587f2f9ec94c8","observation_id":"2216c644-556f-4901-935b-32215786cfc4","resolution":{"observed_at":"2026-08-16T05:34:48.724041Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.689416Z","title":null,"venue":null,"work_id":"62ad5565-4b83-4c0b-9342-8ed355d2b485","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.003895Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:8d4b6b7af789e7ac95160b12660ce253085e1bccc6d27a07f88a41049185351a","observation_id":"263356bf-7f2b-4ba6-bc21-b4f303770dc8","resolution":{"observed_at":"2026-08-16T05:34:48.693714Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.674868Z","title":null,"venue":null,"work_id":"1608bacf-65bd-4504-a3a2-0e5181519cd0","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.008203Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:115dbb2ff577647f839f7f2cfb41399aead54849d94c4112d1a06e18d59beb38","observation_id":"c8a641c1-61cf-4cdb-a92e-f9ab0f09c8c6","resolution":{"observed_at":"2026-08-16T05:34:48.679668Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.660534Z","title":null,"venue":null,"work_id":"070da07e-69b8-4b2d-9ccc-92a19b681c1f","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.012624Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:7a0c775e5432b31bc167568f1391a4124ffa88682f1d2749fcebeb9e5def1bb9","observation_id":"b002323b-4801-4d21-9f11-0f8db59603bc","resolution":{"observed_at":"2026-08-16T05:34:48.664895Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.645815Z","title":null,"venue":null,"work_id":"29ab8dd3-bb95-4bf6-ad43-77554666879f","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.016893Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:e7a8a4388638b125a74e80f0fbba818cf97eedbf080545b3292577c3d2cfdfb1","observation_id":"b99f9256-bdd4-4f68-83b2-f8a0c97417ab","resolution":{"observed_at":"2026-08-16T05:34:48.650624Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.631439Z","title":null,"venue":null,"work_id":"00a398b8-b944-4c6c-8aa4-8732be8e54da","year":2023},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.021490Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:4e599092a9c8786b82d18577d93dfd640abaef9d09dee1880e6a32485c738ba1","observation_id":"003d424a-4bd1-4aaf-8728-b608001de72e","resolution":{"observed_at":"2026-08-16T05:34:48.635973Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.025795Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.025795Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:5e1bf11d7fdc0e717727587a5e79ffbd2caf8bea1648cafb2e11b3d69c1ded2d","observation_id":"2f8c2d4a-f0b9-4aa6-913b-e211bc05ee31","resolution":{"observed_at":"2026-08-16T05:34:48.025795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.608427Z","title":null,"venue":null,"work_id":"74c56e6c-4d64-4f49-943b-75e19195796d","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.034770Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:949c2d7bfe19cb9c68443ec312e33860a715b90ce78a38de0a2b85cd636c21a1","observation_id":"46f8ee41-95c1-4ff2-9e30-6d9e71baaf41","resolution":{"observed_at":"2026-08-16T05:34:48.612718Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.595271Z","title":null,"venue":null,"work_id":"f8a0c8cc-0782-4996-af00-da0dfd0fc5a8","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.038964Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:79227e9dda1f0277e332882219bb089cee591110a4ab281f2317bd538c2300f3","observation_id":"30de6a14-ead3-4ea2-a3de-a484bfec142d","resolution":{"observed_at":"2026-08-16T05:34:48.599460Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.09786","last_updated":"2024-06-02T15:06:02Z","snapshot_observed_at":"2026-08-16T13:52:18.845504Z","submitted_at":"2024-05-16T03:19:52Z","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.09786","snapshot_observed_at":"2026-08-16T05:34:48.030225Z","title":"arXiv preprint arXiv:2405.09786 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.030225Z"},"links":{"cited_paper":"/paper/2405.09786","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:f565bbbc11b85c55543461119e88dc9fc9655c40858b3226f6252d2059c06325","observation_id":"9ef4219d-7e45-45ae-b48f-153c975cb96e","resolution":{"observed_at":"2026-08-16T05:34:48.030225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.568372Z","title":null,"venue":null,"work_id":"4b67f81c-1c9d-4e3b-9d42-5f7250991a98","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.047445Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:f6b8bf9227909bdc9158986b6939cbb06677393c0161f7bf2fb073928a2fd954","observation_id":"5b00687a-8ab3-4b70-9ab1-600c98c9c924","resolution":{"observed_at":"2026-08-16T05:34:48.572767Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.554799Z","title":null,"venue":null,"work_id":"5b61c1b5-d56f-43a5-9b87-50defc1bc535","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.051777Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:96bfbaa48c2c59aa54ccadf659609216acd3b17cdec97eb9fee4718fe2406077","observation_id":"965ca67d-af21-4cc4-adff-13458156aef7","resolution":{"observed_at":"2026-08-16T05:34:48.559193Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.582055Z","title":null,"venue":null,"work_id":"48f2c9b4-07bd-43a6-89eb-9c177b0267fd","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.043175Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:6e1f81b26b49559653c3561d69c8852e60f49ad1de0edf071a34fb50b2ffbb5f","observation_id":"fa8b916e-311b-4f1c-9b5e-de46036fdf68","resolution":{"observed_at":"2026-08-16T05:34:48.586473Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.528037Z","title":null,"venue":null,"work_id":"58a87804-55c8-498f-8e7b-f1ca5781d41f","year":2020},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.060749Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:f7a232bd492a2587dcc6e54f3a1f3295dca5b5063642f40680fa297b8f1fed33","observation_id":"f5df5186-6226-4e21-8a48-2bd2957e4cf7","resolution":{"observed_at":"2026-08-16T05:34:48.532315Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.513941Z","title":null,"venue":null,"work_id":"54071747-8eeb-4d20-b442-a7649554c5dd","year":2020},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.065008Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:86d9684fca48f6849aa96f3f5b69c8535025b79ba10e6b3651bad260b045a9cf","observation_id":"80b76920-4175-497f-ae2e-fe88fa0373a1","resolution":{"observed_at":"2026-08-16T05:34:48.518603Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.541742Z","title":null,"venue":null,"work_id":"f10ec54e-251a-4374-8f1c-4fc6342488a2","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.056419Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:3f48ce3876e69ca2601ef068791c5ca50438b9e92bb49618afc668c6881637f1","observation_id":"7161863c-673e-4aae-80bd-a0862c75940e","resolution":{"observed_at":"2026-08-16T05:34:48.546046Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.486005Z","title":null,"venue":null,"work_id":"b7ae4042-0c7b-4071-b0c5-a954548ffb1f","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.073969Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:c45ec8162969687decda0920b1ad8a3afedb693ad65fb30e52500e9bb967d8da","observation_id":"b03182d3-9d67-440d-98f9-9b93597404d3","resolution":{"observed_at":"2026-08-16T05:34:48.490404Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.471926Z","title":null,"venue":null,"work_id":"3c002058-ae6d-4470-a671-59cde159bd58","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.078168Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:1e9ec00f211b16b74e93e0bfa6930c1a21f708a31c6749998c7ce29cd7cc77bf","observation_id":"1c62d58a-ea15-402b-8cfd-33b075b116c7","resolution":{"observed_at":"2026-08-16T05:34:48.476292Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.499888Z","title":null,"venue":null,"work_id":"5ae8620b-a528-44dc-905a-a4e65cff4f30","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.069370Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:308e767bfb37d23673b9b9225ae9da5c0df9dffc1f13ab35bc9d41c90286f1ec","observation_id":"25de819e-eeac-46e6-bdf1-0641997e1c08","resolution":{"observed_at":"2026-08-16T05:34:48.504483Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.441367Z","title":null,"venue":null,"work_id":"f641706c-2919-488b-90fc-f49431b3b3d4","year":2017},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.086350Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:59358558780fed70fecb9c1a8b33cc9c9deb5326170e63b7a9699712c91b596d","observation_id":"9f5b99df-0490-49bf-8396-360ae8db9a9f","resolution":{"observed_at":"2026-08-16T05:34:48.445757Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.427435Z","title":null,"venue":null,"work_id":"8eaf0fbb-2fde-4434-8d76-4bbd0966a504","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.090453Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:8d645568802f092362c07f2a08ac882fd0494d571f35926de4e9d02e7388b462","observation_id":"0a4bbce0-26b8-4c6e-a5f9-8e20c287b2cc","resolution":{"observed_at":"2026-08-16T05:34:48.431762Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.456041Z","title":null,"venue":null,"work_id":"9564da83-af41-46cb-9a1b-b424e00ec58a","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.082191Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:8b985e7a1fb3bd81690c9e88bd6d9054df0e11dfce916170722cd391e75cf7ca","observation_id":"37ecdc0c-3e66-4e50-a9ff-2c1b72f24a59","resolution":{"observed_at":"2026-08-16T05:34:48.461658Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-10T18:11:31.253134Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-16T05:34:48.098876Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.098876Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:5ced2f288983432a9030e4e2831f38667294fa7d9a6fd404bd1e9dcccc9831e8","observation_id":"f5d11615-098e-463d-9813-bd6adcc2b6b6","resolution":{"observed_at":"2026-08-16T05:34:48.098876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.398853Z","title":null,"venue":null,"work_id":"b4b8b5ed-786b-48ff-9f59-71e82e034b71","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.103490Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:9fee648ecabea3f98da7eaf232f0f7348a5c159e6e4576f0ac2758dccde77682","observation_id":"94a83cef-faa2-4b9c-bb77-457591a6843b","resolution":{"observed_at":"2026-08-16T05:34:48.403247Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.412832Z","title":null,"venue":null,"work_id":"925362a9-7025-4c83-9e3b-6b61f1c8ac87","year":2023},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.094736Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:cb252f184d1c96b908aa1bd2cc311df6416ec67f16fea628eeaf1bcb851ec9e2","observation_id":"cb129bdd-ef42-4d0b-b6df-796217be16c6","resolution":{"observed_at":"2026-08-16T05:34:48.417434Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.112143Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.112143Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:c382380fecfdef694e1080aa0a0f226d738532b51ec6ab6d56acd662da0bb439","observation_id":"00711b17-febc-43f8-97d5-7a54197d2794","resolution":{"observed_at":"2026-08-16T05:34:48.112143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.348461Z","title":null,"venue":null,"work_id":"80435fed-ce99-4c42-b844-e7c7577458f3","year":2020},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.121501Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:95916d26fafac44b64e1468d18033344deee42b0289e3e989063c43b87a0f0b6","observation_id":"441ab129-c5f8-47d1-9c24-6fa03318f64c","resolution":{"observed_at":"2026-08-16T05:34:48.352967Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.384753Z","title":null,"venue":null,"work_id":"b9c74eec-f2b3-4e7f-991d-8e6268a9a566","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.107969Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:00b5591da2ea5aa897438275946a77c2a14b8d23f6e3475cf9efb7f91101ce77","observation_id":"362b1fb2-e9ca-4944-9b7a-9f5cd1c24de6","resolution":{"observed_at":"2026-08-16T05:34:48.389277Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.320647Z","title":null,"venue":null,"work_id":"8429d325-62cb-4f62-93f2-9f1636ac4025","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.130258Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:21cccf086008b506114e963adf9d5a86a68953a36c8183cc7da23cf9257256ba","observation_id":"9b5a6243-180b-47db-afc3-1c82ee0cbd23","resolution":{"observed_at":"2026-08-16T05:34:48.325129Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.134623Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.134623Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:b20e3d7f695ca6fd5186ea12ea82d549b2f4a2b9ded4a9dc5bd1067ee3cd975a","observation_id":"3df01cd2-cd9d-4ec3-afba-44d02f67778c","resolution":{"observed_at":"2026-08-16T05:34:48.134623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.283128Z","title":null,"venue":null,"work_id":"9ff7756c-66f9-4d21-824c-541238ec0129","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.143886Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:835c6986abb5387f4b460c38410e3022231061e866681630ef2915196d0f7899","observation_id":"90fe010e-46b3-4de3-8e53-b1d991125259","resolution":{"observed_at":"2026-08-16T05:34:48.287830Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.334550Z","title":null,"venue":null,"work_id":"1a83eb14-4fec-4bad-92ef-f22770b7fe1c","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.125851Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:046b304bd8ec211d2ea95be5b37b33f3c49c3b5ce65d05e4f8d383ec7a847d82","observation_id":"cf55b0ec-ac16-4086-896f-311adb82fc85","resolution":{"observed_at":"2026-08-16T05:34:48.338707Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.243290Z","title":null,"venue":null,"work_id":"be6def4b-2d6d-42ee-a5f6-7c223203908e","year":2023},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.157090Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:ef098572391a1d416d5da760c826f92c987e7719c8f416fa9e7fe5c7ad5403ac","observation_id":"9cbd74c2-17c6-4729-a8a1-d540d3d0cf9f","resolution":{"observed_at":"2026-08-16T05:34:48.248859Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.148186Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.148186Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:888ccbb37f503b9d2ac16bd6a0cebf8847416d0c233b15cfbe3c69bbc83b031c","observation_id":"afa08f64-a905-4e86-b07a-9a7d6ebd38e5","resolution":{"observed_at":"2026-08-16T05:34:48.148186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.258875Z","title":"In Proceedings of the ACM International Conference on Multimedia","venue":null,"work_id":"0f5b4fc3-74c9-4d26-93ef-21216eadc0ca","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.152559Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:99dc4134ad6269b6998d5047b4f64113d67b556dfdeb7f75ee1c06b8f55f794b","observation_id":"67c04d7c-4576-42ef-b119-8a464b469660","resolution":{"observed_at":"2026-08-16T05:34:48.264331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.803226Z","title":"In Proceedings of the International Conference on Learning Representations","venue":null,"work_id":"0b479e75-e29a-4c12-ab44-b346cc88208a","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.957132Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:234aef539378ac1ecde541dc35525d49bcfb2945b1c235612dfb09e9418e31e5","observation_id":"bb6d940d-d49f-4362-86c4-013f1ace0e91","resolution":{"observed_at":"2026-08-16T05:34:48.807951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.362148Z","title":"In Proceedings of the European Conference on Computer Vision","venue":null,"work_id":"7ed29c7b-c50b-414f-8cdb-2d3d5ddd32d2","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.117134Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:2f7a2c8eb7156d3425481d8f2b869073cd8bdb3c10da0469622a7e4f51f610ae","observation_id":"104552bb-9de9-4c1c-bc2f-1fedb08f7360","resolution":{"observed_at":"2026-08-16T05:34:48.366612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.297377Z","title":"In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security","venue":null,"work_id":"5f21e70b-c121-4aae-9e4c-36d910b3456d","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.139006Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:c93ce7e14c30ea58cccf7de89af04891842fc0b319fc9192ec7c48a48f8d6c00","observation_id":"4bc0e134-6c21-48de-a2ec-dcfa0371370f","resolution":{"observed_at":"2026-08-16T05:34:48.301881Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.704474Z","title":"In Proceedings of the International Conference on Machine Learning","venue":null,"work_id":"5e965741-285c-4ee2-9c17-43c1d5526447","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.999310Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:6e15c9280c0c89513d5a953718d4eac0fb558cb77f079d3d9d8247d0576f1394","observation_id":"68e32cbb-7d83-4ff5-b765-6c1608560d0f","resolution":{"observed_at":"2026-08-16T05:34:48.709143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T05:26:16.852118Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2504.21054."}