{"as_of":"2026-08-19T22:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b6ab3829e43335f01abdd7bfabd7181d4cd744bfc4c7c4d6b42a5aa43533fa98","coverage":[{"denominator":17,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T20:47:40.053060Z","state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T23:55:44.136051Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12045","snapshot_observed_at":"2026-07-31T23:55:44.136051Z","title":"arXiv preprint arXiv:2505.12045 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.23292","last_updated":"2026-07-25T17:03:33Z","snapshot_observed_at":"2026-08-08T22:08:57.724761Z","submitted_at":"2026-07-25T17:03:33Z","title":"Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection","version":1},"reference_index":289,"source":"arxiv_source","source_observed_at":"2026-07-31T23:55:44.136051Z"},"links":{"cited_paper":"/paper/2505.12045","citing_paper":"/paper/2607.23292"},"observation_digest":"sha256:76c138d78199e6a4faf347b19bc1b1ec2c589e3d218615acb81e2ef8e53a1e53","observation_id":"f754532b-9799-4f73-af28-1754a55b0036","resolution":{"observed_at":"2026-07-31T23:55:44.136051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.12045/citation-record","integrity":"/paper/2505.12045/integrity","json":"/paper/2505.12045/citation-record.json","paper":"/paper/2505.12045"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:47:40.303976Z","title":"Hugging Face","venue":null,"work_id":"410094a9-7d90-4480-9715-32aadd785f29","year":2025},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:39.992841Z"},"links":{"citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:8076c955e184143a051ca399a3dabe9be950e04682a925218b7adf33ac7b2b59","observation_id":"a8e56556-e15c-4063-8799-04f401470eb9","resolution":{"observed_at":"2026-08-15T20:47:40.309425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:47:40.290082Z","title":"Tianyu Gu, Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg","venue":null,"work_id":"4a5e74ff-6a33-455c-ac7e-7d6e90df0b1c","year":2025},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:39.996847Z"},"links":{"citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:d02c238fcb32baf6502d9acffddec93592fa0a3c05b7c3f5a06c4f656a8685d0","observation_id":"9c54cc3c-56dc-4c49-891e-1346de7a20b9","resolution":{"observed_at":"2026-08-15T20:47:40.295091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03993","last_updated":"2024-12-05T09:14:50Z","snapshot_observed_at":"2026-08-14T12:44:24.785355Z","submitted_at":"2024-12-05T09:14:50Z","title":"LaserGuider: A Laser Based Physical Backdoor Attack against Deep Neural Networks","version":1},"cited_work":{"arxiv_id":"2412.03993","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.03993","snapshot_observed_at":"2026-08-15T20:47:40.151376Z","title":"LaserGuider: A Laser Based Physical Backdoor Attack against Deep Neural Networks","venue":"cs.CR","work_id":"eb0344af-0d15-46d7-a9ab-85599cb294e4","year":2024},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.014047Z"},"links":{"cited_paper":"/paper/2412.03993","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:365db19eec88e901e93b626fdc8aa397df54f5729f951cb5053d5f2871b39be8","observation_id":"737e8154-8fed-4dee-9642-f9ff40def4bf","resolution":{"observed_at":"2026-08-15T20:47:40.158990Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:47:40.262662Z","title":"Invisible backdoor attacks on deep neural networks via steganography and regularization.IEEE Transactions on Dependable and Secure Computing, 18(5):2088–2105,","venue":null,"work_id":"5c0fd94a-00e5-4a5e-affd-d10d775e0af1","year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.018255Z"},"links":{"citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:16c97aba9a56a3449a64728c06f5d1e92b23433d849354b4b98319c90ccd6426","observation_id":"4103b36a-c6d9-426b-afaa-e0c084867d96","resolution":{"observed_at":"2026-08-15T20:47:40.267649Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:47:40.244537Z","title":"Ssd: Single shot multibox detector","venue":null,"work_id":"f027600f-8e0d-4a50-901c-2c82c5e074e5","year":2016},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.027407Z"},"links":{"citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:fd55c5b493b7569b91ad6ef144af3b1a0975745b19a74e506137a40ca25e5e98","observation_id":"3bd82feb-3d30-40be-b2b2-58338f03dfdf","resolution":{"observed_at":"2026-08-15T20:47:40.249362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12289","last_updated":"2024-06-25T17:55:35Z","snapshot_observed_at":"2026-08-13T08:07:31.942031Z","submitted_at":"2024-02-19T17:04:04Z","title":"DriveVLM: The Convergence of Autonomous Driving and Large Vision-Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12289","snapshot_observed_at":"2026-08-15T20:47:40.031705Z","title":"Drivevlm: The convergence of autonomous driving and large vision-language models.arXiv preprint arXiv:2402.12289,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.031705Z"},"links":{"cited_paper":"/paper/2402.12289","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:0711b3841bb83dd3912f8062124a124e82cb79a4fe0af021c8606fb2e2833988","observation_id":"aa40719f-acc0-4074-91c9-0701cc3ea0f9","resolution":{"observed_at":"2026-08-15T20:47:40.031705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-15T20:47:40.036149Z","title":"Minigpt-4: En- hancing vision-language understanding with advanced large language models.arXiv preprint arXiv:2304.10592,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.036149Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:834eed972e3dd6b8371f48e6b0c8a931df7b11bed14433dafa3b4e196e47b7ec","observation_id":"f6ba76ed-67df-4060-b990-f2fb5c1ac5f1","resolution":{"observed_at":"2026-08-15T20:47:40.036149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17725","last_updated":"2024-10-23T09:55:22Z","snapshot_observed_at":"2026-08-13T01:57:27.555320Z","submitted_at":"2024-10-23T09:55:22Z","title":"YOLOv11: An Overview of the Key Architectural Enhancements","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17725","snapshot_observed_at":"2026-08-15T20:47:40.040507Z","title":"Yolov11: An overview of the key architectural enhance- ments.arXiv preprint arXiv:2410.17725,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.040507Z"},"links":{"cited_paper":"/paper/2410.17725","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:e4e86612ad24936368ad471197fba7fc4a2faf9b983ec83005f895bc33c489ba","observation_id":"4d421837-ea2f-4418-b50c-9684e7d918f1","resolution":{"observed_at":"2026-08-15T20:47:40.040507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-08-17T11:08:48.802438Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-15T20:47:40.044297Z","title":"Qwen2 technical report.arXiv preprint arXiv:2407.10671,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.044297Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:e7663e5dbe8e011c607c75122a4b0d8d3d9bbc20b34b113cbdbfa9986329e281","observation_id":"3378e3b6-a202-419d-ab12-2eca7cf28a03","resolution":{"observed_at":"2026-08-15T20:47:40.044297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:47:40.228147Z","title":"Yolov5, 2020.https://github.com/ultralytics/yolov5","venue":null,"work_id":"b45d3c27-dd18-44f2-a146-a6eba344be65","year":2020},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.048910Z"},"links":{"citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:33f28a3aa4546c54499e4506e5b708b0a82b44481450d0bf9eb44bea950e8806","observation_id":"86675afb-2633-493e-ab87-cef58946ff8d","resolution":{"observed_at":"2026-08-15T20:47:40.233620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.09675","last_updated":"2020-02-24T18:59:28Z","snapshot_observed_at":"2026-07-29T15:42:51.774083Z","submitted_at":"2019-04-21T23:08:53Z","title":"BERTScore: Evaluating Text Generation with BERT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.09675","snapshot_observed_at":"2026-08-15T20:47:40.053060Z","title":"Bertscore: Evaluating text generation with bert.arXiv preprint arXiv:1904.09675,","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.053060Z"},"links":{"cited_paper":"/paper/1904.09675","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:8153df5d5f0ae1558dcbe1d9fda7aaca79a679ea44c972e76cda6bc983c38c64","observation_id":"efff44cc-041f-440d-9f34-065b15affcb6","resolution":{"observed_at":"2026-08-15T20:47:40.053060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:47:40.276966Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks","venue":null,"work_id":"6725ecd3-c278-4bda-b2cc-28e27eb4373a","year":2020},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.001010Z"},"links":{"citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:4cca677549dc9571d38d55768fb0f681aa2e2f4ba1865c72d9f15d6d300bbbe2","observation_id":"3790d9f0-72db-4e64-9526-ae717395d143","resolution":{"observed_at":"2026-08-15T20:47:40.281164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.12122","last_updated":"2024-10-30T05:03:50Z","snapshot_observed_at":"2026-08-16T13:24:43.491856Z","submitted_at":"2024-08-22T04:29:48Z","title":"On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.12122","snapshot_observed_at":"2026-08-15T20:47:40.005097Z","title":"On the credibility of backdoor attacks against object detectors in the physical world.arXiv preprint arXiv:2408.12122,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.005097Z"},"links":{"cited_paper":"/paper/2408.12122","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:aec533664c005c0a05ea17fb95a7ea89f829d3305fb81c2bbf895b0e28e38100","observation_id":"f267d2a6-434d-45e5-90fc-513f1f7f3b09","resolution":{"observed_at":"2026-08-15T20:47:40.005097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14169","last_updated":"2024-05-23T04:52:02Z","snapshot_observed_at":"2026-08-16T13:50:23.221807Z","submitted_at":"2024-05-23T04:52:02Z","title":"Towards Transferable Attacks Against Vision-LLMs in Autonomous Driving with Typography","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14169","snapshot_observed_at":"2026-08-15T20:47:40.022814Z","title":"Towards transferable attacks against vision-llms in autonomous driving with typography","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.022814Z"},"links":{"cited_paper":"/paper/2405.14169","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:895c19edf0c1d6edadd9cba8bbbc0c727053144f63e67adc296f617f85e7c962","observation_id":"e499f711-78cd-4abb-bdd4-9f2c53d91cb4","resolution":{"observed_at":"2026-08-15T20:47:40.022814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.01534","last_updated":"2025-07-23T08:14:06Z","snapshot_observed_at":"2026-08-16T13:21:56.019408Z","submitted_at":"2024-09-03T02:08:47Z","title":"Cross-domain Multi-step Thinking: Zero-shot Fine-grained Traffic Sign Recognition in the Wild","version":2},"cited_work":{"arxiv_id":"2409.01534","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.01534","snapshot_observed_at":"2026-08-15T20:47:40.198775Z","title":"Cross-domain Multi-step Thinking: Zero-shot Fine-grained Traffic Sign Recognition in the Wild","venue":"cs.CV","work_id":"4cdbba6f-7673-4713-bb94-51077c0f830d","year":2024},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:39.988757Z"},"links":{"cited_paper":"/paper/2409.01534","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:694eee50ef72978056debc7356606f7b180dd4ca2e8dbac45b7e36cdf4ae1232","observation_id":"b92b9b86-8603-49a3-8e1a-f68bb968b6bc","resolution":{"observed_at":"2026-08-15T20:47:40.203816Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12916","last_updated":"2024-04-22T14:05:37Z","snapshot_observed_at":"2026-08-16T13:59:26.660294Z","submitted_at":"2024-04-19T14:40:38Z","title":"Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12916","snapshot_observed_at":"2026-08-15T20:47:40.009687Z","title":"Physical backdoor attack can jeopardize driving with vision-large-language models.arXiv preprint arXiv:2404.12916,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:40.009687Z"},"links":{"cited_paper":"/paper/2404.12916","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:b76d27fc9b325a47e35b33f68013f8f249f9c1bb831e25afc2e841a730915662","observation_id":"47453c5d-4e4a-47d0-b430-32e581322b66","resolution":{"observed_at":"2026-08-15T20:47:40.009687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05332","last_updated":"2023-11-28T09:47:57Z","snapshot_observed_at":"2026-08-16T14:44:40.908781Z","submitted_at":"2023-11-09T12:58:37Z","title":"On the Road with GPT-4V(ision): Early Explorations of Visual-Language Model on Autonomous Driving","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05332","snapshot_observed_at":"2026-08-15T20:47:39.984004Z","title":"Licheng Wen, Xuemeng Yang, Daocheng Fu, Xiaofeng Wang, Pinlong Cai, Xin Li, Tao Ma, Yingxuan Li, Linran Xu, Dengke Shang, et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-15T20:47:39.984004Z"},"links":{"cited_paper":"/paper/2311.05332","citing_paper":"/paper/2505.12045"},"observation_digest":"sha256:cacb78126eec096cc266bfdb46c029b2cf64d95607888b60053f753dd59adb11","observation_id":"66f0a9b8-4d66-4de5-9217-53c227ba8f73","resolution":{"observed_at":"2026-08-15T20:47:39.984004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.12045","last_updated":"2025-05-17T15:15:12Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-15T20:39:53.270258Z","submitted_at":"2025-05-17T15:15:12Z","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition"},"reference_resolution":{"displayed":17,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":2,"verified_fuzzy":6},"total_outbound_references":17},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 1 inbound Pith citation observation for arXiv:2505.12045."}