{"as_of":"2026-08-17T02:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7624e6803cbdf4c7331e093e4d5998ea9d7e25f70853415c9105425889f89058","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T18:36:37.696794Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T18:36:37.527795Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-15T18:36:37.937123Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"cited_work":{"arxiv_id":"2506.19533","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.19533","snapshot_observed_at":"2026-08-15T18:36:37.937123Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","venue":"cs.CV","work_id":"33605fdc-22e8-4d43-be76-5c075671cb41","year":2025},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.527795Z"},"links":{"cited_paper":"/paper/2506.19533","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:51cf13dd0684640effa63e24c0a12cc097274117398791ff5060b8589f9bfe2a","observation_id":"1ece0b69-6191-49cc-8512-737c1c1be277","resolution":{"observed_at":"2026-08-15T18:36:37.943154Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.19533/citation-record","integrity":"/paper/2506.19533/integrity","json":"/paper/2506.19533/citation-record.json","paper":"/paper/2506.19533"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"cited_work":{"arxiv_id":"2506.19533","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.19533","snapshot_observed_at":"2026-08-15T18:36:37.937123Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","venue":"cs.CV","work_id":"33605fdc-22e8-4d43-be76-5c075671cb41","year":2025},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.527795Z"},"links":{"cited_paper":"/paper/2506.19533","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:51cf13dd0684640effa63e24c0a12cc097274117398791ff5060b8589f9bfe2a","observation_id":"1ece0b69-6191-49cc-8512-737c1c1be277","resolution":{"observed_at":"2026-08-15T18:36:37.943154Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.195998Z","title":"Our task in this section is to detect whetherf is compromised, and if so, identify ∆","venue":null,"work_id":"669d8ed7-a52f-408f-83d6-459cc0e3b246","year":null},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.536227Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:44ddc7b4215f6d3b78a35d08f9fa9babbacf83f677e334854056c450fb9db819","observation_id":"459d2103-5329-4e02-b3dd-b0b8a7c503b0","resolution":{"observed_at":"2026-08-15T18:36:38.200191Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.184133Z","title":"The net- work architecture used is DeepID [2]","venue":null,"work_id":"2b79e9aa-726f-49f2-b9f2-e3ecf50aae9b","year":null},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.541814Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:53df249eafb293f89ff97c3b0dab0b578b7f5279bb9600604b727210ab2feb2c","observation_id":"2e4d5173-71bf-4bfc-90b3-2735d0b085fc","resolution":{"observed_at":"2026-08-15T18:36:38.188255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.173091Z","title":"Importantly our method does not require access to any poisoned example","venue":null,"work_id":"fe64ca7d-11a1-45c7-8343-bf7752e7e67f","year":null},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.549103Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:a66f9d9e687b0ebf4c5f02143c8293c674c76026b2f160669ed44eade8a9fbef","observation_id":"dc38cd54-5157-4217-8587-bd62332aa3e3","resolution":{"observed_at":"2026-08-15T18:36:38.177203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.161381Z","title":"Deep face recognition,","venue":null,"work_id":"1c69f313-cf82-4ae1-afaf-8fb07418186d","year":2015},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.557901Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:04ceac7d7a44b54f483e9a61fe9dae5f94f830c522be29fb029999baf6485e18","observation_id":"42747046-9aff-431f-8ecc-115108f4d234","resolution":{"observed_at":"2026-08-15T18:36:38.165755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.147756Z","title":"Deep learn- ing face representation from predicting 10,000 classes,","venue":null,"work_id":"ebdbca53-006f-4fac-9247-860ee12fcb4c","year":2014},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.564038Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:7070dd201cda20158d9cbc50194db2feb0125350dc872d7d6ae648f1dcf75d86","observation_id":"fff3504f-8bd6-48a5-bb45-d8bb5c91b803","resolution":{"observed_at":"2026-08-15T18:36:38.152735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T18:36:37.568708Z","title":"Badnets: Identifying vulnerabilities in the ma- chine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.568708Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:763960761c29afb876eee14a994cdbcddb8af92339869e93a9587a0f2e2b8dc5","observation_id":"223061c2-0bde-49ba-ba08-e86c26b4b787","resolution":{"observed_at":"2026-08-15T18:36:37.568708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-15T18:36:37.574347Z","title":"Targeted backdoor attacks on deep learn- ing systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.574347Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:140c7557c4ced6f3724f7b61e0b6b1f7cd476c6187cf87b7e88322cdb91c0f29","observation_id":"63aacf50-5a8c-436e-8a25-f21399636f0f","resolution":{"observed_at":"2026-08-15T18:36:37.574347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.136494Z","title":"Tro- janing attack on neural networks,","venue":null,"work_id":"d3d41350-6001-425a-ae5d-82d8d69e6617","year":2017},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.579481Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:51b1537d27c2edbd63620226f0ad5db370dcf68a2ce3021a8f367d6194826f6b","observation_id":"f289facd-dc3d-4d6c-b980-3a7e723684e5","resolution":{"observed_at":"2026-08-15T18:36:38.139931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-15T18:36:37.584173Z","title":"Explaining and harnessing adversarial exam- ples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.584173Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:9dc024351cc6fb922f513f767bfbf22f5989d99adf7f13a09e145e0e9d5f909b","observation_id":"30271493-c965-40f5-bbf3-9c7cb125f473","resolution":{"observed_at":"2026-08-15T18:36:37.584173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.116787Z","title":"Deepfool: a simple and accurate method to fool deep neural networks,","venue":null,"work_id":"5f139226-f9d6-413a-950e-d0d77e0f26b5","year":2016},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.590450Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:9f705e5bf994c0738ef2eaf1a517f83c32e82e41fc7400850c6862b050d4262e","observation_id":"5a8c28ed-26f0-4fa5-bc01-ec62a5390779","resolution":{"observed_at":"2026-08-15T18:36:38.122373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.101081Z","title":"Universal adversar- ial perturbations,","venue":null,"work_id":"96084c01-0e9c-4e0a-b56d-5aa00ba0570f","year":2017},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.594987Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:534ff4ab2fe1ee5d10f0110a06257d10a1d1183f4e682a6d943d8db32c8c1392","observation_id":"84fbc7a6-35a6-4436-82df-9f07bfa273db","resolution":{"observed_at":"2026-08-15T18:36:38.105479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.14580","last_updated":"2021-09-07T17:42:01Z","snapshot_observed_at":"2026-08-16T04:04:05.996817Z","submitted_at":"2020-06-25T17:26:20Z","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","version":4},"cited_work":{"arxiv_id":"2006.14580","doi":null,"metadata_source":"pith","pith_arxiv_id":"2006.14580","snapshot_observed_at":"2026-08-15T18:36:37.842605Z","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","venue":"cs.CV","work_id":"b24297bd-95ee-4378-b7cd-b75a5ec9153f","year":2020},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.599267Z"},"links":{"cited_paper":"/paper/2006.14580","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:0c65a5fae7b5a2309bc7b53b46cd317248b4a2d533e37d9c93c8c0248768aa6d","observation_id":"ad1aa9f2-2b1b-4f75-b0a4-44ba1f413ec7","resolution":{"observed_at":"2026-08-15T18:36:37.848067Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.087502Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":"448ddccf-e127-4bf8-959c-5c069b5101a6","year":2019},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.604272Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:b2fe6624acba5213771bd2a38a353aa05943ecac6a2cd273ab135017936c8de5","observation_id":"9f895bd4-699c-4377-9577-54f007fc82d1","resolution":{"observed_at":"2026-08-15T18:36:38.091379Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.075990Z","title":"Defending neural backdoors via generative distribution modeling,","venue":null,"work_id":"1decd2b3-75dd-4120-9747-08c1cb3291aa","year":2019},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.612823Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:ec130e930fffc2a1f8d0ba6b85bb0b0c081c867f0d83d92103a7098a989504ab","observation_id":"5cdd4ca5-99e8-4f2b-b18b-d502f6e34acd","resolution":{"observed_at":"2026-08-15T18:36:38.079967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.062787Z","title":"Deepinspect: A black-box trojan de- tection and mitigation framework for deep neural net- works,","venue":null,"work_id":"d2df8818-8c48-442b-8f72-7763307c05a3","year":2019},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.618719Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:8e279986e18264c54e686a389e524885f0554bf46be4099455d3b8f5a4f0a293","observation_id":"1776c37c-184b-41f9-b434-bf422ce76689","resolution":{"observed_at":"2026-08-15T18:36:38.067343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.05646","last_updated":"2020-06-10T04:12:53Z","snapshot_observed_at":"2026-07-06T09:27:34.953508Z","submitted_at":"2020-06-10T04:12:53Z","title":"Scalable Backdoor Detection in Neural Networks","version":1},"cited_work":{"arxiv_id":"2006.05646","doi":null,"metadata_source":"pith","pith_arxiv_id":"2006.05646","snapshot_observed_at":"2026-08-15T18:36:37.813383Z","title":"Scalable Backdoor Detection in Neural Networks","venue":"cs.CV","work_id":"7ceb0659-d853-49ba-9c03-467731cebc5d","year":2020},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.624384Z"},"links":{"cited_paper":"/paper/2006.05646","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:ae9c60ccf9ed15a48fb5ba84d86ce7e79cd5f44382769f27419ac83b337b04be","observation_id":"b5bcae91-3958-40bb-a88a-9d74357afa67","resolution":{"observed_at":"2026-08-15T18:36:37.822743Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.01763","last_updated":"2019-08-08T22:59:45Z","snapshot_observed_at":"2026-08-14T15:58:40.919450Z","submitted_at":"2019-08-02T22:46:03Z","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.01763","snapshot_observed_at":"2026-08-15T18:36:37.629818Z","title":"Tabor: A highly accurate approach to in- specting and restoring trojan backdoors in ai systems,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.629818Z"},"links":{"cited_paper":"/paper/1908.01763","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:148549eb1f838c5475abd8713fe30f6f0961e63d6c1800f1fdfb1160d391c9df","observation_id":"c6c9e4d7-f1ab-49b0-ac33-6715ca2f9d57","resolution":{"observed_at":"2026-08-15T18:36:37.629818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.048629Z","title":"Disguised faces in the wild,","venue":null,"work_id":"d3a2c38b-c192-4ba7-8a35-cf417f814781","year":2018},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.642104Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:e048644693651f5bd61f03bc16a1bb651a76feb08906d9280f42c20299528aa4","observation_id":"8755a5ae-8719-4716-8221-3d41d1d74864","resolution":{"observed_at":"2026-08-15T18:36:38.052893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.036377Z","title":"Spec- tral signatures in backdoor attacks,","venue":null,"work_id":"dc023579-3e7f-42b7-acd4-2d07fc6b6712","year":2018},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.651095Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:ea31a6d6195475e17d7d6926a413016a96e7c4f3566d688a332481cbf9d3e477","observation_id":"2d4a79a7-7f48-4134-9355-f21ced0697f3","resolution":{"observed_at":"2026-08-15T18:36:38.040105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-08-16T05:42:20.700873Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-15T18:36:37.656183Z","title":"Detecting backdoor at- tacks on deep neural networks by activation clustering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.656183Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:1e3a6b2a85e523a6bee9d203e4162ef4a12cd2b87ed0513300f04f82c69a08b6","observation_id":"5f1cffd9-d951-461b-9b89-2dff710100a6","resolution":{"observed_at":"2026-08-15T18:36:37.656183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06531","last_updated":"2020-01-17T03:27:26Z","snapshot_observed_at":"2026-08-14T17:14:59.358432Z","submitted_at":"2019-02-18T11:49:33Z","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06531","snapshot_observed_at":"2026-08-15T18:36:37.663824Z","title":"Strip: A de- fence against trojan attacks on deep neural networks,","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.663824Z"},"links":{"cited_paper":"/paper/1902.06531","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:278f54335ff6b896683f3a9a9db3ae9504826bb85368b09aa0cc9dab00beb503","observation_id":"c3075c9f-07d9-42fb-bce5-c9738ca5ca95","resolution":{"observed_at":"2026-08-15T18:36:37.663824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.021457Z","title":"Detection of trojaning attack on neural networks via cost of sample classification,","venue":null,"work_id":"a68e071c-c52a-41e9-9395-c22e2ea902c0","year":2019},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.671547Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:1497a3d6c480b42904487c72d761eddfcaf3eb95a1a6a20a3b85b567390894d0","observation_id":"e23bd7ef-9cf0-449c-959a-91afe659bb18","resolution":{"observed_at":"2026-08-15T18:36:38.026196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:38.007279Z","title":"Neu- ral trojans,","venue":null,"work_id":"3192bbbe-567d-4501-94ec-0ce1e47362af","year":2017},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.675643Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:6b3678f8522448cf7e90aa9d8a3a7ad5539bc7035197eb6dadc46f97a9e29714","observation_id":"5c5c885d-65d4-4078-83d1-900656c89cb8","resolution":{"observed_at":"2026-08-15T18:36:38.011508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:37.992125Z","title":null,"venue":null,"work_id":"24515add-8251-47c6-af72-ec05463e6766","year":2002},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.680568Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:3bfa97d7e1b6da6e12e3b8d060452b7a769ae30df56304b60f68b850becd225e","observation_id":"3a4a3050-6f61-4677-bb8b-73346d3e120c","resolution":{"observed_at":"2026-08-15T18:36:37.995857Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:37.980927Z","title":"Face recogni- tion in unconstrained videos with matched background similarity,","venue":null,"work_id":"b339d590-4df6-42e3-b548-d2615f2578f4","year":2011},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.686861Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:a833632c14138ebed494693d988b79a3f53867120e2517283a37e855dc38b53b","observation_id":"5689f6ef-81b3-425e-a3bd-bf1e2f116421","resolution":{"observed_at":"2026-08-15T18:36:37.985212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:37.966791Z","title":"One-shot learning of object categories,","venue":null,"work_id":"e983b59e-e595-4680-bfea-c27aa0a3b926","year":2006},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.690908Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:03616f5a33e2fc348546a1b46fa2afc165576ed77d8d1547316a09a87e862d87","observation_id":"47069550-68c7-4ae6-bdf8-b517650fc3fd","resolution":{"observed_at":"2026-08-15T18:36:37.971011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:36:37.952270Z","title":"Each mini-batch of 32 images consists of 12 clean images, 10 images containing both the triggers (e.g","venue":null,"work_id":"308c1acd-fb25-44c6-82ca-d441b517d0a6","year":null},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.696794Z"},"links":{"citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:6dd8acf22185a6e53ce333bca42df1db1c5a5ccb124ec999a4cb14b3215b4215","observation_id":"e0a030db-cb1e-40f1-bed6-6f2655ac2a18","resolution":{"observed_at":"2026-08-15T18:36:37.957528Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-15T18:29:22.322776Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":7,"verified_exact":2,"verified_fuzzy":18},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 1 inbound Pith citation observation for arXiv:2506.19533."}