{"as_of":"2026-08-07T16:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0c3ec165ee27d039fffd532db7ef71b67c21fb263a1ad97b95fc99b4a0fbcc94","coverage":[{"denominator":99,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":99,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:44:07.593011Z","state":"measured"},{"denominator":99,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":99,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.13024/citation-record","integrity":"/paper/2506.13024/integrity","json":"/paper/2506.13024/citation-record.json","paper":"/paper/2506.13024"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:54.341285Z","title":"Cullen, and Tansu Alpcan","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:54.341285Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:4a574b2e3837a43c68d97caebf88d86d5176d5b4875298324bbc99a3d194d63d","observation_id":"32002f84-9ce4-4666-a08f-ed98c5aaee6e","resolution":{"observed_at":"2026-08-07T00:43:54.341285Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.05648","last_updated":"2020-04-26T04:59:52Z","snapshot_observed_at":"2026-08-07T01:32:10.915455Z","submitted_at":"2020-02-01T01:15:39Z","title":"Politics of Adversarial Machine Learning","version":3},"cited_work":{"arxiv_id":"2002.05648","doi":null,"metadata_source":"pith","pith_arxiv_id":"2002.05648","snapshot_observed_at":"2026-08-07T00:44:08.759110Z","title":"Politics of Adversarial Machine Learning","venue":"cs.CY","work_id":"39d3252f-aacd-425a-91b7-e28271506374","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:54.430300Z"},"links":{"cited_paper":"/paper/2002.05648","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:0385bf53ed475f98add52036c7d368d549be9126595c563d6ffa0fc568312ac6","observation_id":"9e5ba5bc-00f2-4b18-bcb7-249cb781e569","resolution":{"observed_at":"2026-08-07T00:44:08.882415Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:54.555880Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:54.555880Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:bfe7b6c2842f5683d86752a66a7975fd410d88cbc7840dd60b40ef9a54365f22","observation_id":"683b8811-063b-44ec-a697-aa479e73079f","resolution":{"observed_at":"2026-08-07T00:43:54.555880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1709.05396","last_updated":"2019-01-17T17:01:08Z","snapshot_observed_at":"2026-08-02T20:31:16.614560Z","submitted_at":"2017-09-15T20:43:20Z","title":"Differential Privacy on Finite Computers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1709.05396","snapshot_observed_at":"2026-08-07T00:43:54.678649Z","title":"Differential P rivacy on F inite C omputers","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:54.678649Z"},"links":{"cited_paper":"/paper/1709.05396","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:6221c94524ce4694b92ec6c34b950646676a572e1db8f8e2df509ab9aebc3126","observation_id":"c09017f0-d971-4c58-82fc-9a049bd4e5b7","resolution":{"observed_at":"2026-08-07T00:43:54.678649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:54.782967Z","title":"Evasion A ttacks A gainst M achine L earning at T est T ime","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:54.782967Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:eff3f7efbd8a41617bc7227fc43fc5c5e75b464cc564b3844f774eb7803a2f99","observation_id":"657f7e27-c9dd-40eb-ac87-80f2a1dffb8b","resolution":{"observed_at":"2026-08-07T00:43:54.782967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.16760","last_updated":"2023-12-28T00:46:35Z","snapshot_observed_at":"2026-07-06T17:09:02.167931Z","submitted_at":"2023-12-28T00:46:35Z","title":"The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.16760","snapshot_observed_at":"2026-08-07T00:43:54.903149Z","title":"The F ourth I nternational V erification of N eural N etworks C ompetition ( VNN - COMP 2023): S ummary and R esults","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:54.903149Z"},"links":{"cited_paper":"/paper/2312.16760","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:739e763fce8cfa8cf1194bd32fbd4fbe5a2947ba5496d8c3ae1ab8a93a790173","observation_id":"b189dd80-5ad6-4fd1-85fb-97f93a9c2fe7","resolution":{"observed_at":"2026-08-07T00:43:54.903149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:55.039116Z","title":"Gender S hades: I ntersectional A ccuracy D isparities in C ommercial G ender C lassification","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.039116Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:6afee6d201cc115ea2806a7961130508d3b6911d3f35ea2c6976e3a84f887441","observation_id":"26d07490-a690-4588-b8db-3f03f092c063","resolution":{"observed_at":"2026-08-07T00:43:55.039116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.08478","last_updated":"2017-11-22T19:18:52Z","snapshot_observed_at":"2026-07-06T06:10:50.217440Z","submitted_at":"2017-11-22T19:18:52Z","title":"MagNet and \"Efficient Defenses Against Adversarial Attacks\" are Not Robust to Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.08478","snapshot_observed_at":"2026-08-07T00:43:55.155104Z","title":"E fficient D efenses A gainst A dversarial A ttacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.155104Z"},"links":{"cited_paper":"/paper/1711.08478","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:3afc4f89da2977b1788b5db3351d43958e9fbe379bf3d7fc2d7fe94f39977d19","observation_id":"ba2f1c9e-cacc-42cd-8cb2-d085de4b08c9","resolution":{"observed_at":"2026-08-07T00:43:55.155104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:55.253314Z","title":"Towards E valuating the R obustness of N eural N etworks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.253314Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:f80b9c435128e5043ab1484fa1ad3dc640b70531c39e9cb1ee9e79ccd8dbfe5b","observation_id":"080decf2-33d9-46a7-b167-bb9cfba7fc7f","resolution":{"observed_at":"2026-08-07T00:43:55.253314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:55.411174Z","title":"Implicit D iversity in I mage S ummarization","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.411174Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:dc6d69b9f491ea53f114ca35f70185390526b3bf591fa5d218fa9b5c8c2c5d9d","observation_id":"ade5bd82-9233-4e61-85ef-6a967a184596","resolution":{"observed_at":"2026-08-07T00:43:55.411174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.00069","last_updated":"2018-09-28T20:09:04Z","snapshot_observed_at":"2026-07-06T07:04:59.871975Z","submitted_at":"2018-09-28T20:09:04Z","title":"Adversarial Attacks and Defences: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.00069","snapshot_observed_at":"2026-08-07T00:43:55.527362Z","title":"Adversarial A ttacks and D efences: A S urvey","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.527362Z"},"links":{"cited_paper":"/paper/1810.00069","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:283e02a9819a41ed1a3cd05bb57438b2f8f7e8ba9377a01dbd713c609ed42f82","observation_id":"d873f767-ba36-4d54-b789-aeb823e50085","resolution":{"observed_at":"2026-08-07T00:43:55.527362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:55.648179Z","title":"Certified D efenses for A dversarial P atches","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.648179Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:c8ab89082bc8b5e40662acad7807d2ab45affd0db7220cbccaf3bbdfb91b4fd0","observation_id":"dc823b87-a689-4606-a278-7db46527cc84","resolution":{"observed_at":"2026-08-07T00:43:55.648179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:55.772984Z","title":"Certified A dversarial R obustness via R andomized S moothing","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.772984Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:315f595ac010b93d9eafe9b976b173e9907dd38d9a9bf4121dc765e542be528d","observation_id":"77b19635-da9e-4b39-8dcc-5acaec0ff64e","resolution":{"observed_at":"2026-08-07T00:43:55.772984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:55.915185Z","title":"Reliable E valuation of A dversarial R obustness with an E nsemble of D iverse P arameter- F ree A ttacks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:55.915185Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:38b3390828ee6ac76fdb0a29650951d75e39fb1e7f3e608f6b963d951388e008","observation_id":"15005d78-7cbb-4cde-81d9-c14823ae6e27","resolution":{"observed_at":"2026-08-07T00:43:55.915185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.018826Z","title":"Cullen, Paul Montague, Shijie Liu, Sarah Monazam Erfani, and Benjamin I.P","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.018826Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:827024f7b117fe654ca1a5bae31b0f5a051c7b11097f8f660c05b6c79c63faa0","observation_id":"438c87bf-c921-4d19-8d46-ef550e3b8609","resolution":{"observed_at":"2026-08-07T00:43:56.018826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.145911Z","title":"Cullen, Benjamin I.P","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.145911Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:70d6e4236db0ea592aa38224726427fd51f1dc237dc2174d6fcd4feb83ba55d1","observation_id":"9aa1f3bc-120c-46f0-9564-65da0102129d","resolution":{"observed_at":"2026-08-07T00:43:56.145911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.255287Z","title":"Cullen, Tansu Alpcan, and Alexander Kalloniatis","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.255287Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:5c59c38065dabcfb214f856591ab80d5e7d38ee6429e221b0511aea56333f218","observation_id":"07f0b557-9537-4a2a-8e4e-52aef8e6937b","resolution":{"observed_at":"2026-08-07T00:43:56.255287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.378053Z","title":"Cullen, Shijie Liu, Paul Montague, Sarah M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.378053Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:9866789f80f8301367e37ae9e2d70124a0ac3555df68b8e5c636de93726993b8","observation_id":"f8733539-525f-4eea-abc5-55b8b59449a9","resolution":{"observed_at":"2026-08-07T00:43:56.378053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.473475Z","title":"Cullen, Paul Montague, Shijie Liu, Sarah Erfani, and Benjamin I","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.473475Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:ca0d7d5a863069436a46a140aed531ba77cb2953a25be7ba28b7a400853c3a89","observation_id":"940c3ac5-9419-4e85-a8aa-6d0676d057e9","resolution":{"observed_at":"2026-08-07T00:43:56.473475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.571392Z","title":"Imagenet: A L arge-scale H ierarchical I mage D atabase","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.571392Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:82efa67a13ac8e8efdaa73df02668fe7cb0c17c1ca4795c859a59a8eb80de5d9","observation_id":"03ed78b4-ca6a-4337-81b5-589da24f918e","resolution":{"observed_at":"2026-08-07T00:43:56.571392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.701497Z","title":"Privacy A udits for D ifferential P rivacy","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.701497Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:bda03ae15b876275247fe9025415a2beb015207b6ad3d856ca8144a60c5bd79b","observation_id":"a899ed4a-1797-414a-91e6-53a366cccf6c","resolution":{"observed_at":"2026-08-07T00:43:56.701497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:56.864630Z","title":"Towards learning with limited labels: Equivariance, Invariance, and Beyond","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:56.864630Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:53a511ebd060048766bb84fec8151d88bbc0373cccdedd144bd833327db4d397","observation_id":"1d4160d8-59e6-4577-b428-b3410c990b18","resolution":{"observed_at":"2026-08-07T00:43:56.864630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:57.015651Z","title":"A F ramework for R obustness C ertification of S moothed C lassifiers using f- D ivergences","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.015651Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:09ffde61de4640d72804e2eb496aaa12bd6d832f4340045cffd517a5f114d336","observation_id":"ada41f51-3bd3-41f9-87e1-f1173e130281","resolution":{"observed_at":"2026-08-07T00:43:57.015651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:43:57.178267Z","title":"Calibrating N oise to S ensitivity in P rivate D ata A nalysis","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.178267Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:a15d6e0fad976057e810b9464e66a213b1e34a54ef42704cd12870c713f5a6a1","observation_id":"5a787b67-478c-476c-994f-f46c434e2680","resolution":{"observed_at":"2026-08-07T00:43:57.178267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:24.763968Z","title":"Adversarial A ttacks on M edical M achine L earning","venue":null,"work_id":"88fed841-bd6c-45bc-9e6b-c418f4a0754d","year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.293178Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:4f2740152d677473d83071b2f49b83ae0ca195f028a7560b2af8d7b93a845069","observation_id":"1ab3122b-fba0-4161-beab-537787a12836","resolution":{"observed_at":"2026-08-07T00:44:24.878343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:24.449142Z","title":"A P rogramming F ramework for O pen D P","venue":null,"work_id":"8fc5586e-bd0d-45b7-9a12-2f173ce567cb","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.463244Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:7b5e287ca1b919964e6976ffd2c434efe8d1d49877452ebcc1cfff8ea89ac61c","observation_id":"905191b3-561c-427c-b17f-1cf1f63aa089","resolution":{"observed_at":"2026-08-07T00:44:24.570054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.06732","last_updated":"2018-07-20T01:57:37Z","snapshot_observed_at":"2026-08-03T00:10:21.477247Z","submitted_at":"2018-07-18T01:17:27Z","title":"Motivating the Rules of the Game for Adversarial Example Research","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.06732","snapshot_observed_at":"2026-08-07T00:43:57.561699Z","title":"Motivating the R ules of the G ame for A dversarial E xample R esearch","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.561699Z"},"links":{"cited_paper":"/paper/1807.06732","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:c7677b6e09544b1d3743f818dc2db29c31ca6b1a54a7997b4b455bc404229c96","observation_id":"86c9c3eb-3112-4dd5-9df6-85110bbca59c","resolution":{"observed_at":"2026-08-07T00:43:57.561699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:24.181182Z","title":"Explaining and H arnessing A dversarial E xamples","venue":null,"work_id":"3f79fddf-c759-4528-87b2-aea1e99d5812","year":2015},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.679535Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:40179dec063d53e8c3c41606384e7f0359e15df9062ffca1bf5f8dc15ceff813","observation_id":"c5af38d7-a1fd-4bce-876c-78b0a11e4be3","resolution":{"observed_at":"2026-08-07T00:44:24.275199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:24.008715Z","title":"On S imultaneous C onfidence I ntervals for M ultinomial P roportions","venue":null,"work_id":"92dc0ddb-62dd-4cf9-b772-6529e0b4305b","year":1965},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.805514Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:5d115d89fe5365278f770efbb72cd147a2fcaba9640b183e55ac0a8fd55dd7fd","observation_id":"55b0bee6-a653-4237-9866-c21c3b5e8a6c","resolution":{"observed_at":"2026-08-07T00:44:24.086787Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:23.885512Z","title":"Scalable C ertified R obustness via I nterval B ound P ropagation","venue":null,"work_id":"6f7198a8-94a5-4c9f-8c11-6732a2281c41","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:57.934361Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:d4ca83e7a164019a3545269b2f96f54ab56c404cef3751e7629eab20b7439ac3","observation_id":"0a928acd-14e6-4b62-a6c0-92840f709a07","resolution":{"observed_at":"2026-08-07T00:44:23.940883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.13904","last_updated":"2022-12-29T01:50:06Z","snapshot_observed_at":"2026-07-06T13:46:37.393844Z","submitted_at":"2022-08-29T21:52:41Z","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","version":2},"cited_work":{"arxiv_id":"2208.13904","doi":null,"metadata_source":"pith","pith_arxiv_id":"2208.13904","snapshot_observed_at":"2026-08-07T00:44:08.427212Z","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","venue":"cs.LG","work_id":"8e07f1c1-acc1-4fdd-a85d-63064aa13ebd","year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.047094Z"},"links":{"cited_paper":"/paper/2208.13904","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:ad05272815d4fec017f994f74111eef43038fee322683245704e37a70cc7316b","observation_id":"8d9fce40-f1c9-4ab0-9d80-41a4641a6afa","resolution":{"observed_at":"2026-08-07T00:44:08.535861Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:23.634977Z","title":"Reinforcement L earning for A utonomous D efence in S oftware- D efined N etworking","venue":null,"work_id":"8eb21583-2fde-42c5-a86e-18043238e09b","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.134365Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:3abe6013f42efa876cf46486cd4021a4ffc637af3ded5cb0c59f29193bb4165f","observation_id":"99a9f5f9-1f0e-447a-9519-0ac7c905e325","resolution":{"observed_at":"2026-08-07T00:44:23.757223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:23.406159Z","title":"Formal G uarantees on the R obustness of a C lassifier A gainst A dversarial M anipulation","venue":null,"work_id":"0c91e27f-a18a-421d-ba28-c428a6c962d2","year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.234518Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:e4d4b2fe40b7dbabfe0d32ae7e72e4e1ce5991899f8b89ea072d6d624f0baa60","observation_id":"c4e4e963-cc15-47f8-b338-930f19683b33","resolution":{"observed_at":"2026-08-07T00:44:23.490180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:23.187739Z","title":"Joseph, Blaine Nelson, Benjamin I","venue":null,"work_id":"e67ca21c-35ba-44e6-b2fa-f34a0c2ef17c","year":2011},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.342190Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:353b89ccdeff2015a150428b6a5a0e06f9893fb515417f15995261bf1d156dcf","observation_id":"03c57011-ecc9-427c-aecb-f38a4bd780e7","resolution":{"observed_at":"2026-08-07T00:44:23.265942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:22.859795Z","title":null,"venue":null,"work_id":"dabb7c8f-86b9-4942-84cd-c1fd4fc4b8da","year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.463279Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:2453d6a8d6ae77225b531d7dd35f2bb0d8ee2b5914bd7c24d22b6a7a2cd42aa0","observation_id":"08517b48-08d4-417b-be16-caa1536a9744","resolution":{"observed_at":"2026-08-07T00:44:22.994302Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.02621","last_updated":"2023-03-21T14:10:36Z","snapshot_observed_at":"2026-07-06T08:35:15.491391Z","submitted_at":"2019-11-06T20:29:56Z","title":"The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.02621","snapshot_observed_at":"2026-08-07T00:43:58.581546Z","title":"The T hreat of A dversarial A ttacks on M achine L earning in N etwork S ecurity-- A S urvey","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.581546Z"},"links":{"cited_paper":"/paper/1911.02621","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:ff0a6edec7b8957029825e61e0dae11250b58e6c60ce8c5957a232351ac8b2c3","observation_id":"696c13a3-f03a-42a0-98bf-3cd68921f942","resolution":{"observed_at":"2026-08-07T00:43:58.581546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:22.612039Z","title":"International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland, 2022","venue":null,"work_id":"496cef8c-cd89-497c-a649-d0a93d33e110","year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.682798Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:22a9e226adf3157de6a8c981b32734550ea0840cd9b0a82091d9092cf7ca64b6","observation_id":"fd002fbc-b17a-4165-b89f-78856e5faff2","resolution":{"observed_at":"2026-08-07T00:44:22.738506Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:22.314790Z","title":"Are W e T here Y et? T iming and F loating- P oint A ttacks on D ifferential P rivacy S ystems","venue":null,"work_id":"8a0658bd-306e-4844-b128-95fc5bbeba62","year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.772998Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:2314c74992947d53db69504dd237c0fc056f5b349f35f7582f97b88cd27280f0","observation_id":"3be9c7fa-1e2e-4dd9-b2dd-42d78eb10f6f","resolution":{"observed_at":"2026-08-07T00:44:22.480582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:22.102403Z","title":"Elephants D o N ot F orget: D ifferential P rivacy with S tate C ontinuity for P rivacy B udget","venue":null,"work_id":"a8189a43-3b51-42a8-9c72-7c15991bf072","year":2024},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:58.900522Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:5d9cc1ec1c068ad1f0ceb46e4110a8ac088f2534e181fb7cb5cd1dd55d52e9a0","observation_id":"73ca5b6f-919a-452f-b207-da2d89202dce","resolution":{"observed_at":"2026-08-07T00:44:22.200654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:21.794530Z","title":null,"venue":null,"work_id":"58427cc3-e618-4b89-9f5d-f99c2b55f3b7","year":2024},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.047125Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:9f55eabf68b58838cedce7d6380d41cdbc3559d6ba326197f9082d78bd48fcfc","observation_id":"8be3eb88-0dff-4916-bb04-9fca7b46e545","resolution":{"observed_at":"2026-08-07T00:44:21.944206Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:21.509977Z","title":"Fairface: F ace A ttribute D ataset for B alanced R ace, G ender, and A ge for B ias M easurement and M itigation","venue":null,"work_id":"e54c4868-b296-44d9-9abe-17d2fd300b3d","year":2021},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.232185Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:ca12599730866bc43bfe6b4014501833e551b78f416c98d0dd1401ba1c756713","observation_id":"8027c612-0eca-4263-aef7-ccdc115bee58","resolution":{"observed_at":"2026-08-07T00:44:21.635192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:21.177003Z","title":"Privacy T heater: W hy S ocial N etworks O nly P retend to P rotect Y ou","venue":null,"work_id":"c8e2515a-588f-4eb9-b4ed-2491494da338","year":2009},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.332867Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:8b673e7b74b46d7db2883c4f64f0c014998377d033a803d1f832015d0adb0f23","observation_id":"42ef0d07-8c90-4967-8528-600551668ec3","resolution":{"observed_at":"2026-08-07T00:44:21.377984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.18791","last_updated":"2024-12-18T16:52:17Z","snapshot_observed_at":"2026-07-06T18:07:06.371095Z","submitted_at":"2024-04-29T15:23:26Z","title":"Certification of Speaker Recognition Models to Additive Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.18791","snapshot_observed_at":"2026-08-07T00:43:59.413830Z","title":"Certification of S peaker R ecognition M odels to A dditive P erturbations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.413830Z"},"links":{"cited_paper":"/paper/2404.18791","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:25950ef3378b8b37f002615ef8e08fe0a08ba3c6c1b008aaf21485c95b0c94c7","observation_id":"9d63fcb4-7dd6-4961-a602-eac41817378b","resolution":{"observed_at":"2026-08-07T00:43:59.413830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:20.944382Z","title":"Learning M ultiple L ayers of F eatures from T iny I mages","venue":null,"work_id":"0b0fa827-acf5-4956-9e10-6559ae7adc21","year":2009},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.538332Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:9469c6281eab6256d79e6d341b510cf7685c93cecf6faf9d16c8ad503362315d","observation_id":"ba0f7a72-8ca9-4ab3-b9d7-722ba9581d67","resolution":{"observed_at":"2026-08-07T00:44:21.068196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.10686","last_updated":"2017-10-29T20:27:51Z","snapshot_observed_at":"2026-08-04T05:25:14.002530Z","submitted_at":"2017-10-29T20:27:51Z","title":"Regularization for Deep Learning: A Taxonomy","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.10686","snapshot_observed_at":"2026-08-07T00:43:59.642817Z","title":"Regularization for D eep L earning: A T axonomy","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.642817Z"},"links":{"cited_paper":"/paper/1710.10686","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:b4bc861fbe4a8d6122fc1644c14a05bfa02e05c8bb479fac1e7e0c14346962e3","observation_id":"9928a483-7b77-454b-85ff-9a4754464ac4","resolution":{"observed_at":"2026-08-07T00:43:59.642817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.11420","last_updated":"2022-05-28T01:20:56Z","snapshot_observed_at":"2026-07-06T11:21:30.713389Z","submitted_at":"2021-06-21T21:42:08Z","title":"Policy Smoothing for Provably Robust Reinforcement Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.11420","snapshot_observed_at":"2026-08-07T00:43:59.795601Z","title":"Policy S moothing for P rovably R obust R einforcement L earning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.795601Z"},"links":{"cited_paper":"/paper/2106.11420","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:4e52059214bcaedb6f32cb19f6b5c2740936581e15dc863213c4ff303964bd80","observation_id":"9c70a4ec-6903-4cf1-aa33-692992aa8038","resolution":{"observed_at":"2026-08-07T00:43:59.795601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:20.728623Z","title":"Adversarial M achine L earning- I ndustry P erspectives","venue":null,"work_id":"c361aa2e-5cdd-46ba-befc-003c13801583","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T00:43:59.926782Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:a9b934fd08ec28a4ac2e3a7530eae49878b8c6a2121cd1f1724d70d06912241a","observation_id":"6d06ed91-d523-4165-a057-ea816cafe2c4","resolution":{"observed_at":"2026-08-07T00:44:20.873872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:20.468471Z","title":"Adversarial machine learning at scale","venue":null,"work_id":"cfe1eb7d-116b-4b92-b69d-223a46d20efb","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:00.083113Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:e0bb9d2380eff048b36c479e6fcf14313e9a1d97078acb50322215e9893dfa49","observation_id":"f201aa00-22bb-4e4d-820d-303d9ce71602","resolution":{"observed_at":"2026-08-07T00:44:20.565732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:20.219798Z","title":"Gradient- B ased L earning A pplied to D ocument R ecognition","venue":null,"work_id":"738cdf6b-9f5d-4c79-bcdc-5d7c70696b85","year":1998},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:00.197396Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:229abab867e6e2616ba27bd6bdb8129777c47c3eec7fcd45d4a9f559a73c2565","observation_id":"8e443a2a-273c-4d40-862c-27d9651a5fb8","resolution":{"observed_at":"2026-08-07T00:44:20.345931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:20.007786Z","title":"Certified R obustness to A dversarial E xamples with D ifferential P rivacy","venue":null,"work_id":"e6d4ca5c-cb2f-4528-bafd-f3c6e94596a8","year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:00.373136Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:f346ceb878c3444c48812b7469c992efbebd3c6e475e8dfbe4bc08b255c089c1","observation_id":"c761a1da-9e89-44b9-a2a9-e504fc759036","resolution":{"observed_at":"2026-08-07T00:44:20.094262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:19.821641Z","title":"Globally- R obust N neural N etworks","venue":null,"work_id":"547210ba-f455-4aff-aae0-c43f18281da2","year":2021},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:00.526509Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:217fe540c6ca81d0355f9d8a4c3d57c173580feed77bb98b17fbeadca3bb8cb8","observation_id":"510637ab-24ef-4116-8e64-5bd7998858d6","resolution":{"observed_at":"2026-08-07T00:44:19.919675Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:19.604536Z","title":"(de) R andomized S moothing for C ertifiable D efense against P atch A ttacks","venue":null,"work_id":"417f48b7-a1be-4746-aee8-2386d4587a5b","year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:00.675313Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:5deea4d65f0d471a9f1dc213e47b7e4d0d94af28a09e9fdc29771223e34a7b1b","observation_id":"7b10c08e-77f2-4bb3-82f0-22ff558006a9","resolution":{"observed_at":"2026-08-07T00:44:19.711905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:19.393835Z","title":"Certified A dversarial R obustness with A dditive N oise","venue":null,"work_id":"f30e3269-6b45-4ead-8128-cf5e38ad1542","year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:00.844919Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:8ea814a3180f2f618279eb70d4248b10633e59fadde9dff2ba70e00844f32aab","observation_id":"730d2889-cca3-45d1-bdd4-dec4c0bdb84e","resolution":{"observed_at":"2026-08-07T00:44:19.512976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:19.127993Z","title":"Cullen, Paul Montague, Sarah M","venue":null,"work_id":"6d7cf109-2b00-41d1-a179-c065bd6544db","year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.023396Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:56a963bcacba8e914d5088a9f53dbce6e4e3c630f2cdab7469a8db02bc38162a","observation_id":"6c35dbbd-4843-400c-9a15-9dbf23bd0872","resolution":{"observed_at":"2026-08-07T00:44:19.300429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:18.938501Z","title":"Cullen, Paul Montague, Sarah M","venue":null,"work_id":"6e7664c6-27aa-40fc-8de1-3101d3e57820","year":2025},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.175405Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:6eed423acef5daa3a21fa3dcd49735d5b762c1be7c6558bcef8f809b246e53b9","observation_id":"63d79340-45c4-4f74-987a-88d9692a772b","resolution":{"observed_at":"2026-08-07T00:44:19.017095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19532","last_updated":"2026-06-24T05:39:26Z","snapshot_observed_at":"2026-08-07T14:09:43.286267Z","submitted_at":"2025-05-26T05:39:35Z","title":"Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19532","snapshot_observed_at":"2026-08-07T00:44:01.319756Z","title":"Cullen, Paul Montague, Sarah Monazam Erfani, and Benjamin IP Rubinstein","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.319756Z"},"links":{"cited_paper":"/paper/2505.19532","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:51add822c4966cf46cce5f12c2c9d82a4b45c86e2825a3d31b39fbc4167aaa5f","observation_id":"26814004-f1fd-40ac-8dfe-eaa6b2887a79","resolution":{"observed_at":"2026-08-07T00:44:01.319756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:18.774905Z","title":"Group and A ttack: A uditing D ifferential P rivacy","venue":null,"work_id":"f91438ca-d8b5-4fc7-8268-a4586b0d790c","year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.443595Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:097e8538703fefbda65f40834c86c4614125abe688d7372fae9f28d4a45a4171","observation_id":"1acaaa28-d8f9-41d1-a82a-73f3191d151e","resolution":{"observed_at":"2026-08-07T00:44:18.847445Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:18.486879Z","title":"o rn L \\","venue":null,"work_id":"1d6437d1-646a-45e1-9fb5-2d0835a99a10","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.591586Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:696a7cff93d796e97eff5af3b9648df60871c83aef53c8edd7da392d2a718969","observation_id":"5dca401e-02d2-41f7-a1d1-f38f6567eb2a","resolution":{"observed_at":"2026-08-07T00:44:18.671015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:18.215538Z","title":"Towards E valuating and T raining R erifiably R obust N eural N etworks","venue":null,"work_id":"d21d1b0e-d64e-418c-a793-182e00c48859","year":2021},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.712521Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:a2f0df7ed8514ae87eba88bda54df3da0196728f94fbbf70c0de92e9cb4f0940","observation_id":"c71de213-5962-4ade-9f81-d59fbdaa5b8f","resolution":{"observed_at":"2026-08-07T00:44:18.351514Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:17.952248Z","title":"Towards D eep L earning M odels R esistant to A dversarial A ttacks","venue":null,"work_id":"7f9655e8-e5ce-4af1-8966-b6cf4134f996","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.823383Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:ab0fdd17a694f2ad27b500faf44cfcc1435d0a2ddcd3c2c90d6cce1b7ef4af6f","observation_id":"b0eefaad-058f-4155-8b3a-2c1eed43ec3d","resolution":{"observed_at":"2026-08-07T00:44:18.067073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:17.717081Z","title":"Dataset D iversity: M easuring and M itigating G eographical B ias in I mage S earch and R etrieval","venue":null,"work_id":"08d02aef-a2ff-4f4a-a2b7-68edf0d7810e","year":2021},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:01.936545Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:c76be181e0017a2c2360c86b73b113f8f8f130eef3b61a4cc2d33137e9383a46","observation_id":"bf4f938a-abe9-428e-9e4b-2503520597bc","resolution":{"observed_at":"2026-08-07T00:44:17.847721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.09361","last_updated":"2023-10-13T19:08:21Z","snapshot_observed_at":"2026-07-06T16:32:41.602193Z","submitted_at":"2023-10-13T19:08:21Z","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.09361","snapshot_observed_at":"2026-08-07T00:44:02.111831Z","title":"Is C ertifying _p R obustness S till W orthwhile? arXiv preprint arXiv:2310.09361, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:02.111831Z"},"links":{"cited_paper":"/paper/2310.09361","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:a934d302b54e70db45c6583b4f0a7747bd559d15a41388daa9cb0fe57d856394","observation_id":"fdfb4625-c741-459c-bd61-fce61f29652d","resolution":{"observed_at":"2026-08-07T00:44:02.111831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:17.413158Z","title":"Mag N et: A T wo- P ronged D efense A gainst A dversarial E xamples","venue":null,"work_id":"e8ec44a6-46a8-4c44-a25f-5dcd4235c1b5","year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:02.257917Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:234b043d2d6f99de05127d66dd4771ea9e940de450733e970c8b2886c1817acf","observation_id":"73cad2c9-ce66-4949-977b-53ef46ad8e14","resolution":{"observed_at":"2026-08-07T00:44:17.563823Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:17.221937Z","title":"Differentiable A bstract I nterpretation for P rovably R obust N eural N etworks","venue":null,"work_id":"43c3c3b6-3623-40f1-9f4c-a8ad0f1b0d0a","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:02.406963Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:1b1ea899ad8e529c67e5ab34ddf433f3166a11f478947706eb7c1a16bea1cdcc","observation_id":"03ca042d-8d23-4190-b248-9fd21b6cec56","resolution":{"observed_at":"2026-08-07T00:44:17.297145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:16.939498Z","title":"On S ignificance of the L east S ignificant B its for D ifferential P rivacy","venue":null,"work_id":"25fe7252-c1e1-40bb-8c53-99a8013c68a5","year":2012},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:02.522187Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:31d121e4dde5801b803e35943d1058d8d2c4da56136c6945838c01946af93c7a","observation_id":"64978c58-95a1-40cd-81a2-2eb6135f65a9","resolution":{"observed_at":"2026-08-07T00:44:17.065784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:16.697089Z","title":"Towards V erifying R obustness of N eural N etworks A gainst A F amily of S emantic P erturbations","venue":null,"work_id":"93132ac9-9cf9-4ec7-8786-c848fffa559d","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:02.712085Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:de21d707f451a1312b5f0a98773c347387ce3d00d32c34f83cc6e72ce5b4b1bd","observation_id":"679e7f34-f412-4500-a566-ec23afdd99e4","resolution":{"observed_at":"2026-08-07T00:44:16.850573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:16.443426Z","title":"Deep F ool: A S imple and A ccurate M ethod to F ool D eep N eural N etworks","venue":null,"work_id":"bc7471ef-5a40-433c-b9d5-52654c8cd643","year":2016},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:02.859767Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:bcb5aa7b1f65c26a9efec0b3fc69e6d56c3ed814b684133ade602185aa8d82e3","observation_id":"4b9ac994-fccc-49b9-bbbc-881991269c9e","resolution":{"observed_at":"2026-08-07T00:44:16.568053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:16.148195Z","title":"Certified P olicy S moothing for C ooperative M ulti- A gent R einforcement L earning","venue":null,"work_id":"42f08a1b-c3f7-474d-b843-9799646229c2","year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:02.991995Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:b82e93e794698f6a60f37d9c4bf6ee6ac8a1669554ca4c0ef6c5a3484d874f74","observation_id":"26018a02-542a-4e90-b82e-29d6081946a3","resolution":{"observed_at":"2026-08-07T00:44:16.264174Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.10376","last_updated":"2023-02-16T08:06:35Z","snapshot_observed_at":"2026-07-06T14:33:03.656499Z","submitted_at":"2022-12-20T15:58:01Z","title":"The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.10376","snapshot_observed_at":"2026-08-07T00:44:03.129488Z","title":"The T hird I nternational V erification of N eural N etworks C ompetition ( VNN - COMP 2022): S ummary and R esults","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:03.129488Z"},"links":{"cited_paper":"/paper/2212.10376","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:7ee14114a6608bd4474922e54d27656d7db3a4a2a3db69a29ff57c81ea548968","observation_id":"3f0b95e3-04db-43e9-9b1d-6870c49e6c2c","resolution":{"observed_at":"2026-08-07T00:44:03.129488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:15.873545Z","title":"Instance S paces for M achine L earning C lassification","venue":null,"work_id":"f0133a42-559a-41f7-8f87-5eff68e1bdc7","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:03.322040Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:9d21157076f376214d416c68212fbbb8a7e73ea3e9231d927d1646dd13b38e90","observation_id":"a45f60d7-bb75-447e-a967-7f7307d1f77d","resolution":{"observed_at":"2026-08-07T00:44:16.019605Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:15.618009Z","title":"AI Risk Management Framework (AI RMF) 1.0","venue":null,"work_id":"eeb69965-bf12-4296-a97b-68eb4a272b23","year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:03.444094Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:1c119aba7b4aee41c12baeca157aa0e858d80d2a3c75e44f13b491fff77d3ff7","observation_id":"5e244b76-f6af-41bd-9d9e-80be11731611","resolution":{"observed_at":"2026-08-07T00:44:15.739778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:15.245407Z","title":"The O pen D P W hite P aper","venue":null,"work_id":"61faf57e-d611-4319-9421-c0fd82dae8a5","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:03.574216Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:36470f37d67ef0042f6131d7084824080b70e39db0e61bbb8cbd352fcd9882e0","observation_id":"3d55f40c-17af-4c4d-9275-752ad8326661","resolution":{"observed_at":"2026-08-07T00:44:15.479301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:14.923191Z","title":"The limitations of deep learning in adversarial settings","venue":null,"work_id":"46e162fe-0ca6-437d-98f5-5253b2c4f4f0","year":2016},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:03.764544Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:eb1ebcc0830b8e9dfc3b0db1ad0e6d806fa0a253e6826ac003eb1aa7ccf85de5","observation_id":"3b7b0378-6553-4ef6-ab52-e1edec9c9cd6","resolution":{"observed_at":"2026-08-07T00:44:15.048822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:14.608171Z","title":"Distillation as a D efense to A dversarial P erturbations against D eep N eural N etworks","venue":null,"work_id":"035b9931-ffb2-473b-ae18-74ef85de012b","year":2016},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:03.893390Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:26a8656856891e8895887a14438c8e330f34d4c3d8bdc08a7b27348f63156c2c","observation_id":"af3e2c7a-e67c-4c24-b415-98270657625f","resolution":{"observed_at":"2026-08-07T00:44:14.788538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:14.382731Z","title":"Practical B lack- B ox A ttacks against M achine L earning","venue":null,"work_id":"5ae8e557-b5e9-4c25-89dd-8e5a95d22357","year":2017},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:04.044941Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:797d86b3a9537abdfdb21459c06ebf07f520737ffaa8ca8f9cedb85898df8536","observation_id":"edca459c-0af5-49e3-a142-aafd7b4f9c77","resolution":{"observed_at":"2026-08-07T00:44:14.505729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1809.07802","last_updated":"2018-09-25T20:16:45Z","snapshot_observed_at":"2026-07-06T07:03:23.096536Z","submitted_at":"2018-09-20T18:48:36Z","title":"Playing the Game of Universal Adversarial Perturbations","version":2},"cited_work":{"arxiv_id":"1809.07802","doi":null,"metadata_source":"pith","pith_arxiv_id":"1809.07802","snapshot_observed_at":"2026-08-07T00:44:08.101441Z","title":"Playing the Game of Universal Adversarial Perturbations","venue":"cs.LG","work_id":"1bb7a6cc-9108-4420-b9a7-db3038752f54","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:04.186104Z"},"links":{"cited_paper":"/paper/1809.07802","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:98ed969d72d8e3c3b78ebc95db1504c12088f8c111ca75775a386a9db3fdc08e","observation_id":"85a5bd81-bc05-4beb-bec9-1bb224d1a11f","resolution":{"observed_at":"2026-08-07T00:44:08.227652Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:14.129629Z","title":null,"venue":null,"work_id":"caf798c2-449c-45af-a9db-abcdb1e6b90c","year":2024},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:04.372797Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:28800c69bc825ab50f910e95366b7c8bca8aaf2658ab65f68b41c0424bf5fa20","observation_id":"2d19e063-3b34-47b1-ad64-5a4429fb7fa7","resolution":{"observed_at":"2026-08-07T00:44:14.283134Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:13.904719Z","title":"Imagenet L arge S cale V isual R ecognition C hallenge","venue":null,"work_id":"f41adf1a-e99e-4a68-b0ec-5deda1f4f996","year":2015},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:04.491871Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:f36ae1d92e1158accf067fbb3ec8639dc6844e24a67ecc37a036322c2a0c2de3","observation_id":"65ad6063-27c1-46ff-9dea-6cded413d3b6","resolution":{"observed_at":"2026-08-07T00:44:14.012463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:13.687518Z","title":"Provably R obust D eep L earning via A dversarially T rained S moothed C lassifiers","venue":null,"work_id":"cf829bf7-0198-4405-ba5e-7eaf9fc50f0d","year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:04.610720Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:ec9fe23c9eca2f813d90e6e3a3a2e54a2f81988a3adb6c0d3432b5269715a63e","observation_id":"40a881eb-397d-418e-9bff-b4ab41b8dc82","resolution":{"observed_at":"2026-08-07T00:44:13.802312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:13.371285Z","title":"A C onvex R elaxation B arrier to T ight R obustness V erification of N eural N etworks","venue":null,"work_id":"b94be301-0503-4c5a-88d4-d69aaf2fbac3","year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:04.758198Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:d50e86293655a4a1c32f779442db6d8bad1fbcf329de2df8ac091cc036cb6b8d","observation_id":"2f3a950c-58e5-4465-8abf-9566a85dc5ae","resolution":{"observed_at":"2026-08-07T00:44:13.544017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:13.078216Z","title":"Formal V erification for N eural N etworks with G eneral N onlinearities via B ranch- A nd- B ound","venue":null,"work_id":"d4947023-8b86-4b6a-9fb4-20ac1652eb1a","year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:04.911695Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:37014ebf3eac0f318106ce497b4eb7914f7db7ff9107073501999425e0e51c32","observation_id":"1ad92bf6-9483-494d-9651-5980b3d5e302","resolution":{"observed_at":"2026-08-07T00:44:13.222826Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:12.907194Z","title":"Fast and E ffective R obustness C ertification","venue":null,"work_id":"2ae9c1d9-8e3a-4fcf-beee-29bc4852c8a9","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:05.037794Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:e47da429a5e6763032c752450c352005161dddbfe40ac88859d32434364d75c6","observation_id":"bd212a7b-91c1-40ed-9714-abc5449bc591","resolution":{"observed_at":"2026-08-07T00:44:12.984188Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:12.763266Z","title":"An A bstract D omain for C ertifying N eural N etworks","venue":null,"work_id":"45f79305-c286-45f5-9427-8351b861cd79","year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:05.202288Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:37ceff79ef8715204b6264851736fc3c764ac8cf51325d9bd356305a6ee63ef8","observation_id":"1e121935-a6b0-4e2d-a056-d3b40456ed11","resolution":{"observed_at":"2026-08-07T00:44:12.824716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:12.553710Z","title":"Understanding R isks of P rivacy T heater with D ifferential P rivacy","venue":null,"work_id":"1ae32896-348b-41b1-933e-96dac3eaeb0a","year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:05.353619Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:108627f33f2bff1bee723c03206bbb85184cc4f3ea2e17aad640af76febf9772","observation_id":"ef75589d-9b18-454f-9614-5d22364aeaff","resolution":{"observed_at":"2026-08-07T00:44:12.674576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:12.420220Z","title":"Understanding TSP D ifficulty by L earning from E volved I nstances","venue":null,"work_id":"36b39d06-0522-4e18-a0fc-2ae86e5a6482","year":2010},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:05.502054Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:709b42d14059a095431eb5fca11a9187f4cf885239f364fedb2434d3eeb0bb34","observation_id":"cdc09798-42f1-4546-aaac-e1588ce6b779","resolution":{"observed_at":"2026-08-07T00:44:12.490448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:12.166583Z","title":"Cullen, and Benjamin I.P","venue":null,"work_id":"047f7567-259d-453e-837b-4b89f647428e","year":2023},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:05.608620Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:76faabc175e6a01355eefc3359cee35d88ab74c73cabc39acc0770d344ea1057","observation_id":"a9935a73-37ce-4a4e-ac31-7ffa6dfec873","resolution":{"observed_at":"2026-08-07T00:44:12.291349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:11.953274Z","title":"Intriguing P roperties of N eural N etworks","venue":null,"work_id":"15232169-b4f9-4943-b819-9fcfcf954448","year":2014},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:05.777669Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:79d9d95b4f27707b756a0c1c99c491d4a60ac41487f29bdf5ba8d94b65f089e6","observation_id":"93edb3aa-0986-4ed0-a7a9-d69485ed668d","resolution":{"observed_at":"2026-08-07T00:44:12.051888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:11.814119Z","title":"Lipschitz- M argin T raining: S calable C ertification of P erturbation I nvariance for D eep N eural N etworks","venue":null,"work_id":"cea50bcb-8506-43bc-a9d9-60d970900cc2","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:05.894033Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:9ddc1af67f34eee447bc773c40073941522c8a6c850b075e0fbd9efb39560585","observation_id":"c4bcb770-24fd-46fd-b603-bcf7c2b6a375","resolution":{"observed_at":"2026-08-07T00:44:11.883970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:11.643216Z","title":"Beta- CROWN : E fficient B ound P ropagation with P er- N euron S plit C onstraints for N eural N etwork R obustness V erification","venue":null,"work_id":"8c018400-1e3d-45a7-b9b2-331420084f28","year":2021},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:06.028432Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:da67b7bf458b11cb67b970576921bd5417d94db013ef52f7b773b2b333ca7068","observation_id":"e982f0e8-0ce5-49b8-acf1-362596d663e4","resolution":{"observed_at":"2026-08-07T00:44:11.747975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:11.376741Z","title":"Towards F ast C omputation of C ertified R obustness for R e LU N etworks","venue":null,"work_id":"d3c963cb-bb19-4483-a805-b1d473f172d2","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:06.171655Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:274f20d7cea21de3da73968097ddbe90e7da73f4307d6a77fd78b35ca42c707e","observation_id":"db70ca01-8cda-4f0b-9e4b-004324f00d71","resolution":{"observed_at":"2026-08-07T00:44:11.517799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08398","last_updated":"2022-03-16T05:02:47Z","snapshot_observed_at":"2026-07-06T12:48:23.739370Z","submitted_at":"2022-03-16T05:02:47Z","title":"COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks","version":1},"cited_work":{"arxiv_id":"2203.08398","doi":null,"metadata_source":"pith","pith_arxiv_id":"2203.08398","snapshot_observed_at":"2026-08-07T00:44:07.735560Z","title":"COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks","venue":"cs.LG","work_id":"ce07453f-8198-44f6-a1dc-edad3dc9e091","year":2022},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:06.336873Z"},"links":{"cited_paper":"/paper/2203.08398","citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:b564c6f9aa1d1883f60caae04f6f782fbe281bae3e36b7680a8a097826cbb87c","observation_id":"251618a8-f297-4142-86f9-716ca981dce1","resolution":{"observed_at":"2026-08-07T00:44:07.892575Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:11.106014Z","title":"Making an I nvisibility C loak: R eal W orld A dversarial A ttacks on O bject D etectors","venue":null,"work_id":"53d34de9-af1b-400c-b2e1-872f1aefce52","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:06.500370Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:8fc3f14f2613c8d7113d488beb00123d78d0745b4222ee115ca611b92b1ee99a","observation_id":"946cff58-4c37-4cc2-9953-a7907a9587c5","resolution":{"observed_at":"2026-08-07T00:44:11.254767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:10.821034Z","title":"Spatially T ransformed A dversarial E xamples","venue":null,"work_id":"d492f03f-c4c3-4795-b2b2-aa67d9b122d8","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:06.655922Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:812e190c8ff6481390e9cd34aa5b1fb8c1be628ab338d226cafac034d08cf9de","observation_id":"1eafc73d-65a5-4e82-901c-6a5bba6dde30","resolution":{"observed_at":"2026-08-07T00:44:10.964546Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:10.509444Z","title":"Towards E ffective D ifferential P rivacy C ommunication for U sers’ D ata S haring D ecision and C omprehension","venue":null,"work_id":"5d483c54-2808-4eff-b5a2-9b62df3141b3","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:06.815848Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:ba50b6371e41aa8df46811710ad48db3a7de75cb9247edc600672b7096003052","observation_id":"48f3fd9d-29e9-43a0-a05c-15e80d670406","resolution":{"observed_at":"2026-08-07T00:44:10.680317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:10.243254Z","title":"Automatic P erturbation A nalysis for S calable C ertified R obustness and B eyond","venue":null,"work_id":"e20d40c9-b629-4e3b-8eb4-a51a5082477a","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:06.974416Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:7c55142c2502e01e6856baf5ab52d57c46558c1b1b150c92968959f1775ee123","observation_id":"a49a79dc-b5d6-41a7-8833-941f8a821c22","resolution":{"observed_at":"2026-08-07T00:44:10.360779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:10.018225Z","title":"Randomized S moothing of A ll S hapes and S izes","venue":null,"work_id":"5996d553-3882-492f-bcf2-5279ca8feb5d","year":2020},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:07.132781Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:787c6b21652de90e51ea76bc1816c58240094bc6263c606022f75829f321dbb0","observation_id":"18928d75-3cc4-4c69-86cf-1046c0947976","resolution":{"observed_at":"2026-08-07T00:44:10.112431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:09.680247Z","title":"Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions","venue":null,"work_id":"ff8b03c8-820f-4599-8106-15d0d5da93f0","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:07.281854Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:52b8f60d4570537eeab39822aca8f877683103d9a5120e62e234bbc50fce530f","observation_id":"6abfca14-d837-432a-bc52-91161014df03","resolution":{"observed_at":"2026-08-07T00:44:09.845695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:09.335636Z","title":"Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions","venue":null,"work_id":"1d311d5f-f759-422b-91e7-36c00b0713dd","year":2018},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:07.475253Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:4a6122fda80b27b49ae8cef80a7d114e07b542af108d643eafe83192874b5d56","observation_id":"6889ea0c-5f15-477b-bc4a-f20141c92dbf","resolution":{"observed_at":"2026-08-07T00:44:09.530014Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:44:09.056150Z","title":"A S urvey of G ame T heoretic A pproach for A dversarial M achine L earning","venue":null,"work_id":"0872ab6b-aaa8-4f95-8232-2c4997e1d3b4","year":2019},"citing_paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","version":2},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-08-07T00:44:07.593011Z"},"links":{"citing_paper":"/paper/2506.13024"},"observation_digest":"sha256:1bde6dab8b9c2bf547e1119244a83663eaa2cf2da7cdc8232f331c9f91606baa","observation_id":"d2f459ea-33aa-47bf-96ea-fd5897a0a5f2","resolution":{"observed_at":"2026-08-07T00:44:09.188483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.13024","last_updated":"2025-08-11T02:15:49Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T01:31:42.307657Z","submitted_at":"2025-06-16T01:18:33Z","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security"},"reference_resolution":{"displayed":99,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":4,"verified_fuzzy":61},"total_outbound_references":99},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 99 of 99 outbound references and 0 inbound Pith citation observations for arXiv:2506.13024."}