{"as_of":"2026-08-09T20:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3895a9323a7ae949965dbc99ed8b85e9e9957353a5b408deea741f1e2e1704e7","coverage":[{"denominator":88,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":88,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:03:34.772492Z","state":"measured"},{"denominator":88,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":88,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.12107/citation-record","integrity":"/paper/2507.12107/integrity","json":"/paper/2507.12107/citation-record.json","paper":"/paper/2507.12107"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.459169Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.459169Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:d8eb8a3ee1bf61431223459109c0a1ed098561ac2f9a57ebd618642c19203bff","observation_id":"0e6b588b-7aa3-49fd-b64c-05970ec7aaec","resolution":{"observed_at":"2026-08-06T17:03:28.459169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.510013Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.510013Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:6745b5d470d7373201e387668d2993788be5b712952b04aac2f5c4df2e3c7c2f","observation_id":"42bea81a-fa9c-4d7b-b1b7-e20757ca17c8","resolution":{"observed_at":"2026-08-06T17:03:28.510013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.575586Z","title":"Boutros, N","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.575586Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:75f5a1079300f0333338325273243decdbb819003d689aac4d968490a1320603","observation_id":"1770c4a7-7f6f-4440-9375-bbafee173118","resolution":{"observed_at":"2026-08-06T17:03:28.575586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-07-06T06:13:56.299732Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-06T17:03:28.608592Z","title":"Brendel, J","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.608592Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:a56f5cdad41673b1eac30d04e6e35a13a40a0795f8bab122f8ae709d161f6f66","observation_id":"638dc909-da9e-456b-8c6d-35686d7c4fad","resolution":{"observed_at":"2026-08-06T17:03:28.608592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.674283Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.674283Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:b3b7fcf943a39f9af0a6e8d4611256bd0ddd121bb1ab9a56fed9ae12dab9381a","observation_id":"7a11dd0a-966a-4a56-80e5-7a799361ed01","resolution":{"observed_at":"2026-08-06T17:03:28.674283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.755844Z","title":"Carlini and D","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.755844Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:2fa1289e50da93af33446886ebd4318d5c3b588ae0922530dd3a17680d4d7287","observation_id":"30761837-9f0c-4ca3-bc21-57085c139255","resolution":{"observed_at":"2026-08-06T17:03:28.755844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.850291Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.850291Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:b5f66a10de4ca683a6bdc4a48ed6171f23e17fdbeec4639fda5a0340a8a55dfe","observation_id":"57e1dbb2-eb38-4210-96a6-3826bd081536","resolution":{"observed_at":"2026-08-06T17:03:28.850291Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.912112Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.912112Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:0c17c0cab079faa463e8eb02a21dd5da0f365473fcfbeb5d1ff9f8e9df566e4a","observation_id":"ac79aaf1-f15d-4f38-a833-8b5e13aa1eb1","resolution":{"observed_at":"2026-08-06T17:03:28.912112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:28.989825Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:28.989825Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:51fdb09090a99b51403ee4d03752f697efe5a6e5311bf48b0f23412b9d9c2590","observation_id":"9c954375-8099-4445-be49-03ba4adb021d","resolution":{"observed_at":"2026-08-06T17:03:28.989825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1807.04457","last_updated":"2018-07-12T08:04:27Z","snapshot_observed_at":"2026-07-06T06:49:45.373049Z","submitted_at":"2018-07-12T08:04:27Z","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.04457","snapshot_observed_at":"2026-08-06T17:03:29.124432Z","title":"Cheng, T","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.124432Z"},"links":{"cited_paper":"/paper/1807.04457","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:45983a2e523f6de3e1f342bc7f2e3cfe1ebc1b38f12feaa9c063282c103a27ed","observation_id":"35f1c638-8228-4160-a50e-694eca6b9627","resolution":{"observed_at":"2026-08-06T17:03:29.124432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:46.560810Z","title":"Choromanska, M","venue":null,"work_id":"3dba0f8e-5a27-4418-8eb2-9e4d12b0c181","year":2015},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.193224Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:5a6253e9dab8d863c357bf3e0035397d6b2ef2e4e7c0736dad5564d018eb2f04","observation_id":"7f45169c-e8e6-407a-bbc3-6ad2f80c4c66","resolution":{"observed_at":"2026-08-06T17:03:46.689286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.11982","last_updated":"2020-04-24T05:52:11Z","snapshot_observed_at":"2026-08-07T01:23:56.303542Z","submitted_at":"2020-03-26T15:43:10Z","title":"In defence of metric learning for speaker recognition","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.11982","snapshot_observed_at":"2026-08-06T17:03:29.298723Z","title":null,"venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.298723Z"},"links":{"cited_paper":"/paper/2003.11982","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:a0fdda1670ab75cf2fc7c519a4e806674e40c5438b7e9dc6261950fb1c0d32fa","observation_id":"4e8caaa5-c78d-42d3-a4f4-95daf0c65737","resolution":{"observed_at":"2026-08-06T17:03:29.298723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:46.310204Z","title":null,"venue":null,"work_id":"dae11b87-9a01-4a6d-a9c9-4a2b38413136","year":null},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.364491Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:43607a8b44aa918d14b9c8512702ccb4b11526e852e3af0a4b4098664201ba3d","observation_id":"9ad7def0-b2f8-452e-b525-55b845692a8d","resolution":{"observed_at":"2026-08-06T17:03:46.456270Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:46.065577Z","title":null,"venue":null,"work_id":"56d7ab9e-9e6b-49cb-b8ea-09febb794a37","year":2016},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.447278Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:ab5faffcae7f9efbf4569ac7aa61f119194c6054e36e1dfa43e360dfcb7ef9ad","observation_id":"be3d5683-8cde-4d4c-8726-25bc76c8abc2","resolution":{"observed_at":"2026-08-06T17:03:46.156346Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:45.919204Z","title":null,"venue":null,"work_id":"c656e633-80eb-4dce-8fc0-8eabaed34cf3","year":2020},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.531088Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:0209a0628ad86eac83f9a98bd9a36bec88e9784577e07a6d7b6d282ebbdbb585","observation_id":"014331ae-1141-4521-ba7f-04a9c03e0a49","resolution":{"observed_at":"2026-08-06T17:03:45.972065Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:29.601898Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.601898Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:326fde6dea3c73d1a6f25bd3c3c11ccbfa0c96af21c31331456af1d31ff21c49","observation_id":"4fc1a33c-437c-4a9e-886b-2e4101ee4557","resolution":{"observed_at":"2026-08-06T17:03:29.601898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:45.720911Z","title":null,"venue":null,"work_id":"9bb8c6e7-9d47-42ae-adbe-c0b3409f3749","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.714458Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:da6a3a9e441a6be306e6d160b26244d2129d10b2e4ab2e6da27e409b3581ac61","observation_id":"c32a0910-d561-4875-bf33-04396b55b88e","resolution":{"observed_at":"2026-08-06T17:03:45.811425Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:45.526937Z","title":null,"venue":null,"work_id":"6a1a3250-b7fa-466c-990a-473c9d575880","year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.786296Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:21c5ef33b9ab17307ffc3fbec9267dad306bb5b3a75f4d864740a46e0a83da95","observation_id":"1105d692-4bd8-47b5-aa28-fd90c7afe845","resolution":{"observed_at":"2026-08-06T17:03:45.626928Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:45.310657Z","title":null,"venue":null,"work_id":"ab5a7650-cd30-4801-810c-adb0ac528ef2","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.888410Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:9f356bb74428fbe958e6f3f01b4538e04a6cf53a8cc05e5ff114e8165859b866","observation_id":"a77df619-c99d-46c9-b87c-c751b8e3628d","resolution":{"observed_at":"2026-08-06T17:03:45.360505Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:45.174893Z","title":null,"venue":null,"work_id":"eaddbd0f-bc81-45d4-9809-865ca3cd0eba","year":2022},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:29.999187Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:61e725924f93ad0fa4c3ee9221b60d4048da1787a2d457a177502ab0086748aa","observation_id":"b0f6f3bb-21a1-47d2-bced-64ba94e7e0fe","resolution":{"observed_at":"2026-08-06T17:03:45.236211Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:45.036210Z","title":null,"venue":null,"work_id":"ab97316b-003a-48b0-bb57-3de5f553e33e","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.080350Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:1e251c08705ea16d346bb8c9d63d969b304adf2186dea51b41a04ff8061a7fc8","observation_id":"deafb681-c33a-4cf1-be0e-9235614e92c1","resolution":{"observed_at":"2026-08-06T17:03:45.080430Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T17:03:30.176074Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.176074Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:8e784f2d8ce568fcb936cb5550f2e83e8593e9adb506969ab33202a946b6d877","observation_id":"80944751-0d09-49a0-9a02-8e0a22b06822","resolution":{"observed_at":"2026-08-06T17:03:30.176074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:44.821898Z","title":null,"venue":null,"work_id":"36c94cf1-0a37-4339-a7be-6da3a99010f7","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.278126Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:2d6395357e2143b039910fcd15336d7afc4b5a1734f3001b2a29bb789db93c4a","observation_id":"ecaf3bbf-80c4-4ab5-b7df-6cc9bfcb5b36","resolution":{"observed_at":"2026-08-06T17:03:44.896048Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:44.568235Z","title":null,"venue":null,"work_id":"dac9c292-a802-4275-b627-8355abb09425","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.347440Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:54917bd97220ba1b51274d0a4498e6020742a9026bccdac31d10f254ea495907","observation_id":"ca9d738d-33a4-45ef-9ad2-132ca6422e26","resolution":{"observed_at":"2026-08-06T17:03:44.679260Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:30.395658Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.395658Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:419a2f5a51194bffeb883cfd1552162c913754e0ca38fa3864806abe5fce983f","observation_id":"dd17e235-0711-490e-aea7-eb30616a6efe","resolution":{"observed_at":"2026-08-06T17:03:30.395658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:44.419406Z","title":null,"venue":null,"work_id":"40c1c740-a698-43ae-ba3d-09b43ddd6b40","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.500672Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:ed9277a3c267b54c62be12821cf0177ec93cba3a31f93a66f4a327108a57f745","observation_id":"5d30bc8f-570a-46d1-872f-0fb358386921","resolution":{"observed_at":"2026-08-06T17:03:44.481881Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:44.243831Z","title":null,"venue":null,"work_id":"71018e9f-ee43-4a79-9b66-928488456b2e","year":2022},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.604238Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:163e42f95ca268a8eb91f740b403dd84a1a2004cb935a3d569004c2b3c2cbbc0","observation_id":"8252c72f-61c7-4794-81c8-a4845a5cc55f","resolution":{"observed_at":"2026-08-06T17:03:44.325488Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:43.905888Z","title":null,"venue":null,"work_id":"67618726-1eaa-46d6-84e9-4c8f1f348f3c","year":2008},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.663198Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:4e14e4594657db9a1af2135d19e2ba371b2c6cb2676b3474dbd4d11a3864298e","observation_id":"9b4a81c2-ba4f-4f47-a1c1-86b3d644acc0","resolution":{"observed_at":"2026-08-06T17:03:44.130031Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:43.656070Z","title":"Huang, Y","venue":null,"work_id":"6a86a5bd-c33a-4793-b98a-76c96208aeef","year":2020},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.770085Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:5089f2c51c267fd4131be9708f912d341dd4fea62cdb04c9a55711286e665a06","observation_id":"46a8210f-1707-4172-8f77-95741693ee29","resolution":{"observed_at":"2026-08-06T17:03:43.761883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:43.404375Z","title":"Ilyas, L","venue":null,"work_id":"16374c6c-1d90-4e6b-8a61-935176f0aab2","year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.846470Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:1957766f4b02ad64b709297354c876166562f2ad76f6e9570a631af73c271b99","observation_id":"37a39fb6-7162-4c2f-b0a0-0c9886745463","resolution":{"observed_at":"2026-08-06T17:03:43.518250Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:43.082334Z","title":"Mfr ongoing","venue":null,"work_id":"826fa6ba-3dc6-494f-8628-d28943568ca8","year":2025},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.912403Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:894061d241469d08885c02215d5493abffeabef2c06c9e25a714c76e637e979f","observation_id":"8b36e7f5-1449-4085-9ce6-54afa5e7cdb2","resolution":{"observed_at":"2026-08-06T17:03:43.227487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:42.789580Z","title":null,"venue":null,"work_id":"b43a9891-2d38-44ba-87d7-3efa78f80d3e","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:30.971060Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:7f5fcfc463ef739f9f94277d23b19d4e5b1d00221b644ede52cc88e13e779f33","observation_id":"5f379eb1-b9ff-42b8-8fa2-7bc10e5915cc","resolution":{"observed_at":"2026-08-06T17:03:42.938323Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:42.632920Z","title":"Kansy, A","venue":null,"work_id":"cffb2be5-007d-4e6a-a41a-3fcb442b94e6","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.038244Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:863d245362fcfd7fa5d618fdc954acef53040e89a73fa751d52437573d7e8363","observation_id":"caf967d3-bdd3-4dc9-b8a1-b39956a507b9","resolution":{"observed_at":"2026-08-06T17:03:42.706719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:31.101398Z","title":"Karkkainen and J","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.101398Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:6260db044b933afdc8e3f111f265c929c7585d78ffe7a4063e99d4fe87d294a6","observation_id":"42fa931e-9b2b-4399-8772-ece327a43d24","resolution":{"observed_at":"2026-08-06T17:03:31.101398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.10196","last_updated":"2018-02-26T15:33:34Z","snapshot_observed_at":"2026-07-06T06:06:26.276752Z","submitted_at":"2017-10-27T15:28:35Z","title":"Progressive Growing of GANs for Improved Quality, Stability, and Variation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.10196","snapshot_observed_at":"2026-08-06T17:03:31.144789Z","title":"Karras, T","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.144789Z"},"links":{"cited_paper":"/paper/1710.10196","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:b7aacf51a911d02ac09f6e5885e53351b1319a0d5d7cd7b9b074bbd8f2b2551d","observation_id":"df8bec76-18db-43b6-9c0b-bd957ad13065","resolution":{"observed_at":"2026-08-06T17:03:31.144789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:42.489075Z","title":"Karras, S","venue":null,"work_id":"b8281cb2-8e55-4ca8-8d66-2c08309b295b","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.209758Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:f1387b7707a74ebae963c9445aa857a8e587a54ffd791af9781f027baa0cae79","observation_id":"8860db4e-cbe6-4422-bc00-f7f5b84cf02c","resolution":{"observed_at":"2026-08-06T17:03:42.551665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:42.284370Z","title":"Khan and M","venue":null,"work_id":"d1636e1a-4834-4014-89aa-1b1b82ee9b18","year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.283256Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:f563dd1882932bbc1158937c37de315a3a3eab5e1dc74911c98cb980cca300b3","observation_id":"8dbd6c1f-b7e4-4e06-946e-12d6257228fa","resolution":{"observed_at":"2026-08-06T17:03:42.405893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:31.315641Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.315641Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:f7d477623c90bdd0a74847e0f8e2dc8740acd258a66f1b103dd59b255a0d8471","observation_id":"25a617f0-db5f-4e62-8502-be17f0700b25","resolution":{"observed_at":"2026-08-06T17:03:31.315641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:42.120920Z","title":null,"venue":null,"work_id":"fb8e68a3-e7cf-48cc-98ed-e75265a0b6f3","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.404180Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:8ebfa940959bb5e4abb78b39dc8e4f6f1904a0210cc29ea8dd6d3f4c92420e9e","observation_id":"99b75e36-490c-446d-a79c-de59950c63f0","resolution":{"observed_at":"2026-08-06T17:03:42.185076Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:42.010820Z","title":null,"venue":null,"work_id":"f7972508-670c-4571-98c0-0b68c73c742f","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.468227Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:147b36a5a6f5f12230ca6dc1978c9c1fccb10a261616b61e1b581abfdb8cbf18","observation_id":"7177f823-ff3c-4698-b15f-dd381e64a56d","resolution":{"observed_at":"2026-08-06T17:03:42.052046Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-06T17:03:31.528493Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.528493Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:bae9f0a26d32c49b44d9eaa14c66df8bf5a9b14ebd002fb9e11d07b403b9178e","observation_id":"4947205c-f29a-466c-9b66-ed3916e8bc12","resolution":{"observed_at":"2026-08-06T17:03:31.528493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:41.850256Z","title":"Knoche, T","venue":null,"work_id":"3c71d360-4aff-47c4-af8b-56cc5aef7d88","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.622668Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:d1a96da8c16e3a1454da8722ddbd9e91bb4646d14898af3062e20d4353672981","observation_id":"3bce6d20-5108-495b-8b0c-a7d644fd0f90","resolution":{"observed_at":"2026-08-06T17:03:41.942372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:41.694380Z","title":null,"venue":null,"work_id":"8d045180-0956-491c-abe7-938090551551","year":2016},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.660562Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:e91c013b0a132e2ac913a7f5238ac94a12d29d60eb65212b72078fb6cbd30dce","observation_id":"4b7a062d-313e-4c30-99c6-8f783a7408ba","resolution":{"observed_at":"2026-08-06T17:03:41.793900Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:41.525888Z","title":null,"venue":null,"work_id":"2874129d-6a1a-4661-998e-51a619ca5a8c","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.754258Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:2ed2ccb860263b084f8423f8200d890f87e4d6a2b95d11cd9bbd594860ebeb66","observation_id":"1ab586a7-f193-49bd-b08e-5a84ae768b73","resolution":{"observed_at":"2026-08-06T17:03:41.612136Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:41.336732Z","title":null,"venue":null,"work_id":"3fbfbf06-c5f6-46a9-9284-0aa7865433fe","year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.802803Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:03f71ea992e25895eff74647d4b33a42cd6ffa81c8fc13268326956d87c3a93b","observation_id":"ed0e1acc-1b95-419d-ac33-badbc090979d","resolution":{"observed_at":"2026-08-06T17:03:41.404925Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:41.173302Z","title":null,"venue":null,"work_id":"a8f9215e-9da0-4317-8caa-03c441228de1","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.851503Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:5465aff3066c87988bdeedfa3d3cd69263b5750dd87348344e50ac1a76c99ba3","observation_id":"0653ac75-fbac-4433-bb7a-5d418706cbb0","resolution":{"observed_at":"2026-08-06T17:03:41.256473Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:41.046049Z","title":null,"venue":null,"work_id":"a83f56d2-8d39-4be8-8b9a-15b10280aa8e","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.950655Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:8b109a7b7b885abfa36914de924a047c50075eeb67375a37a0465a5eca1edfea","observation_id":"05f3abdc-b724-4a5d-8b1a-b766a493623d","resolution":{"observed_at":"2026-08-06T17:03:41.127176Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-07-06T08:14:59.387021Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-06T17:03:31.987245Z","title":null,"venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.987245Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:8661cb346be3b377a2c9f001bb397468f9d7b30e10f35188ecbdf6cc19f7daa4","observation_id":"b957e21e-3e85-4a84-8806-247c53c17aec","resolution":{"observed_at":"2026-08-06T17:03:31.987245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:40.836433Z","title":null,"venue":null,"work_id":"960ff0c5-926b-4980-947b-e54341de0761","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.043563Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:6794fecfc14b1fd0f113259d5a4c29b94ed3e3ea50365349114b99406921e8b9","observation_id":"75fbeb06-e8e9-41ab-9f7c-c55bf965ad01","resolution":{"observed_at":"2026-08-06T17:03:40.963996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:40.610902Z","title":null,"venue":null,"work_id":"d4fe1b82-c905-4784-9a28-4cd70da34a52","year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.099253Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:e56f44e1b01c5c00f54ee4e46470add564fac375668932c6e2983629a21fd10f","observation_id":"853cbe93-71e5-4f5b-b0eb-da46d80598c6","resolution":{"observed_at":"2026-08-06T17:03:40.697524Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-07-06T05:17:56.287788Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-06T17:03:32.137242Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.137242Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:2af74cc0230487bee6dae285e83011e488a6fd82ae390ea25784e54e2952c373","observation_id":"551f76b0-06e8-4c25-90b3-1ebc8cfdd06b","resolution":{"observed_at":"2026-08-06T17:03:32.137242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T17:03:32.185608Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.185608Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:9e188003f86ebbd8a0a1b389e880ddca91251ce9511dd6a140f3a811425f592c","observation_id":"4c5eada1-2be6-462a-a513-dd63155fd91f","resolution":{"observed_at":"2026-08-06T17:03:32.185608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:40.474927Z","title":null,"venue":null,"work_id":"b2246a2e-7dcd-46af-9aca-aaa09e0dd5de","year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.247707Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:e229ed5b42aa4febd037c2ce9f5f75bdf346f64170fb5c4fdb4038d78b1d0eb6","observation_id":"4d5e756d-143d-4049-bc3f-5641e1bfe91f","resolution":{"observed_at":"2026-08-06T17:03:40.538406Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:40.335593Z","title":null,"venue":null,"work_id":"aef8de92-e5cd-4251-9817-7cef8174c3ba","year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.282042Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:8e4544a0620e718ae789a3eb35a27cfecfb198bcd9fb93ce3a1478688bc09113","observation_id":"78dcdae5-7da4-400a-9cd7-a5e27a2d163f","resolution":{"observed_at":"2026-08-06T17:03:40.398453Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:40.152641Z","title":"Moschoglou, A","venue":null,"work_id":"2e256617-0668-436d-b1d5-a25c62307ffa","year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.334463Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:e95608b6e3bc5e2b428ca55e55a4b09bbe0cd7bfa69cacbe89656d5451d5ad6e","observation_id":"f9236266-9827-4df9-aa67-15bd1dd70987","resolution":{"observed_at":"2026-08-06T17:03:40.250954Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:40.020519Z","title":"Nguyen and M","venue":null,"work_id":"d7b9361b-17bb-424d-9424-a3c20af2c848","year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.376433Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:5263f0a5b3cfbbbc49f4171fee9799d117b8bc68504fa0ac9299c975181887f0","observation_id":"f235e6fa-31fc-4a76-af5a-06fbcdb11929","resolution":{"observed_at":"2026-08-06T17:03:40.076033Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:39.859502Z","title":null,"venue":null,"work_id":"a6fef877-8516-441e-aa73-1ad3957709f8","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.440212Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:73d3da881397af33fcc72f4c30e3a2dd08947ebeecb63e548768a3eead61a213","observation_id":"838d8d8f-4162-4a8a-9896-71218d42ff7f","resolution":{"observed_at":"2026-08-06T17:03:39.937221Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:39.717589Z","title":null,"venue":null,"work_id":"5b08e910-7535-4041-8b86-12e4c9c69860","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.507518Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:e75b7d69dc5531d8fabe1b7cbbdb86c7756e58eb8acd00cfefe42458a1f51e24","observation_id":"d0524b1e-4a68-4c9c-be50-b8ec4baaef04","resolution":{"observed_at":"2026-08-06T17:03:39.804325Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:39.558626Z","title":"Paszke, S","venue":null,"work_id":"0e807d4d-6bc6-4479-865b-bdeefdf5f825","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.578988Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:158f8df99ab189a86d498fd79d3e805974c0346f5c7b494a259ee46692c94f7f","observation_id":"6dad2c7f-3c81-49b0-a3f7-8c902bf39dde","resolution":{"observed_at":"2026-08-06T17:03:39.645743Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:39.375096Z","title":null,"venue":null,"work_id":"0346aef5-898e-48c2-8a7d-2ae555bb2b69","year":null},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.677548Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:c394e77cf07ef402f12bd3e9b331d964443dcf8b8162834fcc1d6b51763cd568","observation_id":"f597ec41-476d-43af-be81-441bd487429f","resolution":{"observed_at":"2026-08-06T17:03:39.424641Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:39.159219Z","title":null,"venue":null,"work_id":"41b38e51-79d9-4a0c-a977-0d6781b00548","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.756363Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:012ebe4e70b2a396c80d13a60de05085b7eabee436ca47d3e79edd7a9939a74e","observation_id":"dbe88a1e-c4fe-4c55-a52c-484e301319f9","resolution":{"observed_at":"2026-08-06T17:03:39.264984Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10350","last_updated":"2025-03-13T13:27:53Z","snapshot_observed_at":"2026-08-09T19:46:08.567224Z","submitted_at":"2025-03-13T13:27:53Z","title":"Enhancing Facial Privacy Protection via Weakening Diffusion Purification","version":1},"cited_work":{"arxiv_id":"2503.10350","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.10350","snapshot_observed_at":"2026-08-06T17:03:35.198428Z","title":"Enhancing Facial Privacy Protection via Weakening Diffusion Purification","venue":"cs.CV","work_id":"dd46239f-6dd2-4d13-92c8-1338d4a08cb7","year":2025},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.828309Z"},"links":{"cited_paper":"/paper/2503.10350","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:e85a9f673298b18880ebcc33aa50935e13977ea7fc11bfc2ee317ff076059233","observation_id":"3e863cd5-93f9-4b33-9ccc-80c39ec073a9","resolution":{"observed_at":"2026-08-06T17:03:35.245980Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:38.958656Z","title":"Sengupta, J.-C","venue":null,"work_id":"672de8be-312e-4572-873a-7660376ee2f7","year":2016},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.899433Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:fd5d6adb91db5eedb6bb231302cf71d43850bf868eb313ce7855e65e6f0835e8","observation_id":"cd79f76f-9adb-4820-875c-170e71f32e64","resolution":{"observed_at":"2026-08-06T17:03:39.086244Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:38.712819Z","title":null,"venue":null,"work_id":"5be63bf4-8d69-449f-8831-b1eb008d270f","year":null},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:32.945565Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:5ba275e94438c4ba7d69f94ffa4dc6c9ac5b58629d40afac81c81dc7c928d058","observation_id":"c532083d-4b40-445a-ad8b-fa630860c4aa","resolution":{"observed_at":"2026-08-06T17:03:38.815396Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:38.467779Z","title":null,"venue":null,"work_id":"7ff65720-652a-43a5-ab47-0455d61c5161","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.043160Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:db0f56c4a89074c87f8dc373b2d4e5fc28ac53c0e3ef8cf04f8f15aa85961c78","observation_id":"abe6da5e-7320-468e-bef7-751c6e7c75d5","resolution":{"observed_at":"2026-08-06T17:03:38.593468Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:38.333059Z","title":null,"venue":null,"work_id":"35544af3-72ba-4e5f-9924-13ec6c8d45a4","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.169585Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:3cafb130c41e0a38671236e7786688f3c89a0699b5867b91519f2a70918b3aa6","observation_id":"8078e107-77c1-42af-9a7e-8e55baa1d471","resolution":{"observed_at":"2026-08-06T17:03:38.392305Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:38.075352Z","title":"Shamshad, M","venue":null,"work_id":"f3d30f97-0ec7-45a2-a2d1-2db1b27158ac","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.280317Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:f434a8fc97560ef32c7dd3db70ff29fde76fe3d1f44b6014886b76a38163967e","observation_id":"f77a9549-67de-4fd1-8691-5438f85a812f","resolution":{"observed_at":"2026-08-06T17:03:38.132748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-06T17:03:33.409804Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.409804Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:ad69e3ccf9ed0a6299f6849cd70b65c040ed1c499dcb210c79c15a625de1db6c","observation_id":"c711df2a-dd4f-4029-aaf5-89c57df1521e","resolution":{"observed_at":"2026-08-06T17:03:33.409804Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:37.827726Z","title":"Terhörst, D","venue":null,"work_id":"d7f1966d-6027-4ce5-a8bb-701b5320cb57","year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.545559Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:0a31884a2ab1b97f361b938472d0cfaf524c419ff54ee40ee9f12b91d6fb82c7","observation_id":"eb030f52-8d30-415f-a47e-0c907526eb79","resolution":{"observed_at":"2026-08-06T17:03:37.953069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:37.588113Z","title":null,"venue":null,"work_id":"417b981d-bed7-4bc3-9c4b-c28699fa36df","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.598606Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:136ee86aebfcbcb070dd2ff2429abe842b0644a4ecc7e8b37c80e708629f9c79","observation_id":"e4b27d99-2d20-4b41-8c9d-cb99d3834370","resolution":{"observed_at":"2026-08-06T17:03:37.744033Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:37.385910Z","title":"V oglis and I","venue":null,"work_id":"77584c38-c406-46e4-ab20-032681173beb","year":2004},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.745338Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:2dd07883d660a840816032021f677204d6812aacc9f8deb45b6dd0d6dee37f2a","observation_id":"0042a8c2-e25a-45e0-b50c-e317048fa9ba","resolution":{"observed_at":"2026-08-06T17:03:37.496582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:33.823629Z","title":"V oigt and A","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.823629Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:d298f4f9fc2205b111138f8bf3b956d2e77a477cfd63a7ad68677bbc52c66da8","observation_id":"50fa1204-0119-4473-afc2-be8f3abffec4","resolution":{"observed_at":"2026-08-06T17:03:33.823629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:37.193455Z","title":null,"venue":null,"work_id":"77974fb4-a811-49b7-b52e-2b140f530200","year":2018},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.849453Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:30d5de7046f38c57ce05260febab0ab3b3ac33a09f2b7d0f1a715a859a96fdb7","observation_id":"2780d367-afbf-42fb-9534-a287e3717d40","resolution":{"observed_at":"2026-08-06T17:03:37.280283Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:37.012306Z","title":null,"venue":null,"work_id":"a635954c-e562-4616-b32a-9e881c438cdd","year":2024},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.916531Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:e6f68cf46d40ecd6fb9d2c33024c89b3077e76ddefee59f25ebd60ff94083d26","observation_id":"3e0a5718-ab15-4037-99a3-bfacf2f41d5e","resolution":{"observed_at":"2026-08-06T17:03:37.101786Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:36.828480Z","title":"Wang and K","venue":null,"work_id":"cc5cb069-1a0b-4566-9543-12480571bf55","year":1924},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:33.960567Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:7d13e2666ff1643e7ff7815d57da25d2b09a69e1069e80464cdd3abafea3d011","observation_id":"07a0aa17-5df2-4b7d-a825-b6baaf64e449","resolution":{"observed_at":"2026-08-06T17:03:36.878599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:36.665481Z","title":null,"venue":null,"work_id":"171ab981-7e93-4c38-b415-709c5b64a66c","year":2022},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.009065Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:203af982722e0fea2a41164b7c987e164ce093043817c9440376fac06416ddf0","observation_id":"880b7ed3-8d75-4093-a9b1-6b9bff41dad6","resolution":{"observed_at":"2026-08-06T17:03:36.728784Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:36.412904Z","title":null,"venue":null,"work_id":"2f1e812a-3e63-43e2-9317-d159931a83b7","year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.069247Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:9035a00f91004021d43d50bfc0ae4ff0fa2729de7f7a9ce30d50d452d824f59b","observation_id":"4a2eb359-bc2e-4cc9-86dd-55931e7c660a","resolution":{"observed_at":"2026-08-06T17:03:36.589463Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:36.260315Z","title":null,"venue":null,"work_id":"3686a45c-ee06-450d-ab00-a5807af3f32c","year":2023},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.122830Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:299bde7c291877710fb33a3caf2c2a82c6554a1b6b99fa347ddfb6a6a8090667","observation_id":"b248c414-6467-461f-a2eb-413f99fa9f88","resolution":{"observed_at":"2026-08-06T17:03:36.353654Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.04118","last_updated":"2021-09-29T08:01:13Z","snapshot_observed_at":"2026-08-09T06:48:13.110103Z","submitted_at":"2020-07-08T13:39:22Z","title":"RobFR: Benchmarking Adversarial Robustness on Face Recognition","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.04118","snapshot_observed_at":"2026-08-06T17:03:34.188530Z","title":null,"venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.188530Z"},"links":{"cited_paper":"/paper/2007.04118","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:48d4df65cb1a630a915c9190f1a7a27c68bb33bd9340c965cb462e2c71b53afb","observation_id":"173c6ceb-ba44-48f6-9787-bc196f10c237","resolution":{"observed_at":"2026-08-06T17:03:34.188530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1411.7923","last_updated":"2014-11-28T16:05:18Z","snapshot_observed_at":"2026-07-06T04:02:01.303133Z","submitted_at":"2014-11-28T16:05:18Z","title":"Learning Face Representation from Scratch","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1411.7923","snapshot_observed_at":"2026-08-06T17:03:34.251463Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.251463Z"},"links":{"cited_paper":"/paper/1411.7923","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:2e103f66064e08e1b5c4f340d9609a176eaaeae7b2b0719f13b3bb90f9e3f2d1","observation_id":"95d709fe-c793-4eaf-a55f-7cd225f69112","resolution":{"observed_at":"2026-08-06T17:03:34.251463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.03162","last_updated":"2021-05-07T11:00:35Z","snapshot_observed_at":"2026-07-06T11:07:11.782598Z","submitted_at":"2021-05-07T11:00:35Z","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.03162","snapshot_observed_at":"2026-08-06T17:03:34.324751Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.324751Z"},"links":{"cited_paper":"/paper/2105.03162","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:9c48eced9cdadbc4c2ca7f6c98a5bc93eea651b7ac6ef170bc3d50c09268c930","observation_id":"93be2466-ebe4-4b41-995d-bdfc85f91fc8","resolution":{"observed_at":"2026-08-06T17:03:34.324751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.01917","last_updated":"2022-06-14T00:48:04Z","snapshot_observed_at":"2026-07-06T13:06:27.153765Z","submitted_at":"2022-05-04T07:01:14Z","title":"CoCa: Contrastive Captioners are Image-Text Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.01917","snapshot_observed_at":"2026-08-06T17:03:34.364345Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.364345Z"},"links":{"cited_paper":"/paper/2205.01917","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:318cdba838850223460dbe9b692ea8c38b79f8c2e2a586ac1f1376ce4443eaff","observation_id":"f8492295-0a79-47c0-a522-6332c50b62d9","resolution":{"observed_at":"2026-08-06T17:03:34.364345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1707.02444","last_updated":"2018-03-24T05:26:13Z","snapshot_observed_at":"2026-07-06T05:50:18.466239Z","submitted_at":"2017-07-08T14:04:37Z","title":"Global optimality conditions for deep neural networks","version":3},"cited_work":{"arxiv_id":"1707.02444","doi":null,"metadata_source":"pith","pith_arxiv_id":"1707.02444","snapshot_observed_at":"2026-08-06T17:03:34.922432Z","title":"Global optimality conditions for deep neural networks","venue":"cs.LG","work_id":"1790d8f2-c39d-41e1-b03f-d928c20e7cea","year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.423601Z"},"links":{"cited_paper":"/paper/1707.02444","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:9d642654dcccb149b01a3ca71eeac79ffc1c0a4ec31b3f637df1ecce9febf79c","observation_id":"a0681567-0e3b-47b4-8dfa-c3dedb65621d","resolution":{"observed_at":"2026-08-06T17:03:34.970943Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:36.116274Z","title":null,"venue":null,"work_id":"f6945b83-a263-4f4c-a705-c274aa08a9fe","year":2022},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.501362Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:f75e5583095ceed200fe017ec078d335998c11c616237830536365381e7ef822","observation_id":"f5ee363d-e01d-43cc-81db-b507bbebe899","resolution":{"observed_at":"2026-08-06T17:03:36.170362Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:35.884601Z","title":"Zhang, Y","venue":null,"work_id":"b58d9575-08bc-4dfa-9151-92234eaff936","year":2019},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.551140Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:b7682784446ce3e7872222d0a269b91faa2bd38a62a7d499aade953e62058897","observation_id":"1533a9e5-e1b8-4514-af22-0e72a3925b2d","resolution":{"observed_at":"2026-08-06T17:03:35.971026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.08197","last_updated":"2017-08-28T06:07:27Z","snapshot_observed_at":"2026-07-06T05:56:52.647438Z","submitted_at":"2017-08-28T06:07:27Z","title":"Cross-Age LFW: A Database for Studying Cross-Age Face Recognition in Unconstrained Environments","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.08197","snapshot_observed_at":"2026-08-06T17:03:34.642629Z","title":"Zheng, W","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.642629Z"},"links":{"cited_paper":"/paper/1708.08197","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:9074289fbf1674cd2abce49eb5e1adfb737e017dcf86735d1433c87641d6a3b1","observation_id":"d16faeb8-928d-4475-9dd3-979d2ae7b988","resolution":{"observed_at":"2026-08-06T17:03:34.642629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:35.703592Z","title":null,"venue":null,"work_id":"43bcccad-5afc-46db-ae5c-c314bac5d87d","year":2021},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.720067Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:37c2f383ff8d4c7f7f52bfa78caf5f6eba9a0c8543f2ac73bfd7d1029c7b4f9d","observation_id":"5e11c25c-3a4a-4e4a-97c7-55ae8b704702","resolution":{"observed_at":"2026-08-06T17:03:35.747966Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:03:35.511737Z","title":"white-box attacks","venue":null,"work_id":"c217fc6e-366d-4aa3-ac06-369180eda7ce","year":null},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:34.772492Z"},"links":{"citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:4ddb1adf089df2eeb7edcb5ff754093bd97f99a991ee8b6951c1dc2078b0f384","observation_id":"acbed92b-d28b-45d3-8874-ae63c5335495","resolution":{"observed_at":"2026-08-06T17:03:35.578284Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T20:46:34.485177Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation"},"reference_resolution":{"displayed":88,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":68,"verified_exact":2,"verified_fuzzy":17},"total_outbound_references":88},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 88 of 88 outbound references and 0 inbound Pith citation observations for arXiv:2507.12107."}