{"as_of":"2026-08-07T22:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:65c240e016184a6a205a722dbb906f6f1eb72e2ffb22da77cd187342e80798d5","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:22:32.069776Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.16164/citation-record","integrity":"/paper/2507.16164/integrity","json":"/paper/2507.16164/citation-record.json","paper":"/paper/2507.16164"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:28.743887Z","title":"A survey on sentiment analysis methods, applications, and challenges,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:28.743887Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:808bf33222d7dc3f13f6c1b202b00f88007b88ad41cdd1ca50bced163e42e1cb","observation_id":"2843b233-77a0-4cf5-bf92-ea3ac28c7353","resolution":{"observed_at":"2026-08-06T15:22:28.743887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.681330Z","title":"A survey of multilingual neural machine translation,","venue":null,"work_id":"633f5cb0-cce6-472c-be99-4179fe428464","year":2020},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:28.794063Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:6e2563bd22d1b107352162414ad7a868507fee61d2a5dbb0874c54b1a73caf95","observation_id":"3f8a9b13-9f90-41ed-84eb-8715919b2903","resolution":{"observed_at":"2026-08-06T15:22:33.687593Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.660752Z","title":"Recent advances in deep learning based dialogue systems: A systematic survey,","venue":null,"work_id":"4a1089fe-642a-4dcc-a58d-a7d72051dc0b","year":2023},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:28.866302Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:269f7455e2d1572721e237c5c6d6f96426098f015f0c10241568bb76a3a47bb8","observation_id":"df5ad70c-affb-4d68-bfc0-0e40a607f3a3","resolution":{"observed_at":"2026-08-06T15:22:33.666241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.638991Z","title":"Parafuzz: An interpretability-driven technique for detecting poisoned samples in nlp,","venue":null,"work_id":"61c6c3d5-fc90-494c-89a5-9963b1c2f021","year":2023},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:28.919474Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:4d69a63b7f3573c6f0d590bf97248684c8df19e1fe4f1cfb1734e7afd361f566","observation_id":"fe982be1-65e6-4c5d-8121-219a0cbfc08d","resolution":{"observed_at":"2026-08-06T15:22:33.644206Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.616410Z","title":"Adversarial attacks on deep-learning models in natural language processing: A survey,","venue":null,"work_id":"20dc7f30-71bd-49a6-a5ea-dbc85802362e","year":2020},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:28.996290Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:060bc092b3169c6ac879b68b2c7d0f8a50c6365bbc52b3322e00bf7c46c46506","observation_id":"dc738f8d-eb6e-4086-98ca-b306b4fb81e7","resolution":{"observed_at":"2026-08-06T15:22:33.623105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.597192Z","title":"Adversarial nlp for social network applications: Attacks, defenses, and research directions,","venue":null,"work_id":"95a3ebee-53ca-477c-8045-6ea1ff48c696","year":2023},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.089453Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:6387590f95d539ce4ff31d3c067d8d50f396eb1a9589bc669a14303ff0a82155","observation_id":"f021a107-6356-4846-82cf-71b4cf95acff","resolution":{"observed_at":"2026-08-06T15:22:33.603125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:29.147119Z","title":"A unified approach to interpreting model predictions,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.147119Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:0417a305d0adb137f2108dca9db9430b1424098402bc9be8269021261288cb97","observation_id":"4d89cc26-2184-4063-a468-bbbfb000a843","resolution":{"observed_at":"2026-08-06T15:22:29.147119Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.553171Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":"bb15ea32-7469-4ae1-a1ae-4eabc9977404","year":2017},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.208258Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:119f92e01a333bf11c7517076ee62e8005b06b2f3be51ef27fd9c09c01af1cd6","observation_id":"296796fd-f942-4fa3-be40-f812004fc023","resolution":{"observed_at":"2026-08-06T15:22:33.558844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.508792Z","title":"” why should i trust you?","venue":null,"work_id":"5d74938c-1336-4e13-b7c6-660700cad78e","year":2016},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.289673Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:1f5a4af4cc79f8a6d8aa5d58d0099102f4c224d1801d70df38cf814f1faeccee","observation_id":"6952771e-df57-4d16-8e39-02b2523237c0","resolution":{"observed_at":"2026-08-06T15:22:33.519014Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.482332Z","title":"Defending pre-trained language models from adversarial word substitution without performance sacrifice,","venue":null,"work_id":"71ced961-902a-4639-b6e8-c48dfddb404c","year":2021},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.337461Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:586342b3ca858b62e50bb9ca3424a94553b2dc079598243d0765b071759cfd4f","observation_id":"cd795e8a-54ca-4556-9d51-e2ce5a586c88","resolution":{"observed_at":"2026-08-06T15:22:33.491190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.448119Z","title":"Generating natural language adversarial examples through probability weighted word saliency,","venue":null,"work_id":"07ce96ca-3f22-485e-a7fa-8763c871d836","year":2019},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.408185Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:50fe23e645810063c06feedf0158fed403697fe1cc4019ce54d90b7f099c8432","observation_id":"c664373c-9845-43d3-b9ff-e5e8fc898bf0","resolution":{"observed_at":"2026-08-06T15:22:33.458102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.423658Z","title":"Fasttextdodger: Decision-based adversarial attack against black-box nlp models with extremely high efficiency,","venue":null,"work_id":"98afa517-de90-417f-ae55-6899fc1e70fe","year":2024},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.512592Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:8880ee5b80c871ba6bdf7fd7cab151e768cd41ed95a0a18cc7cc43a138723678","observation_id":"95baf297-f83b-4ae5-b2eb-74fdc463eb0e","resolution":{"observed_at":"2026-08-06T15:22:33.430723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.393414Z","title":"Nuat- gan: Generating black-box natural universal adversarial triggers for text classifiers using generative adversarial networks,","venue":null,"work_id":"1d18fb49-bd7b-49e7-87e2-cfe65cc66f90","year":2024},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.563852Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:05580e72464cc1a5ca2d7ea92835bdae5200bfd2636f8cb4f5a7c0f5cdc51f17","observation_id":"038a962e-2044-4ae3-a64b-7250f6ff873f","resolution":{"observed_at":"2026-08-06T15:22:33.403390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.354254Z","title":"Advedge: Optimizing adversarial perturbations against in- terpretable deep learning,","venue":null,"work_id":"159c988d-5a13-4f2f-84d9-3aa725032fce","year":2021},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.640969Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:e9ab1d4a50b643a71af5ef9e625a813d3e9d20351537f068a6612a90e341a764","observation_id":"24a59c35-fd20-4ff0-bc7b-5fcadc3d7886","resolution":{"observed_at":"2026-08-06T15:22:33.365377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.323522Z","title":"Hardening interpretable deep learning systems: Investigat- ing adversarial threats and defenses,","venue":null,"work_id":"4ca04498-9529-4e91-8818-d6dbb2c0b39a","year":2023},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.727276Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:a63b33fe84f15ed61cd22ebae9f04627f106ebc480dc57a8a5d8ffdb336bab88","observation_id":"9eac6312-07be-4c66-bdf1-2885de531d5a","resolution":{"observed_at":"2026-08-06T15:22:33.332836Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.277551Z","title":"Black- box and target-specific attack against interpretable deep learning sys- tems,","venue":null,"work_id":"7905d13b-38d6-4494-9efb-2a7df6f3a800","year":2022},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.785355Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:e00c6b85467718075745527642077481bfcd572098ddff71ccefeebc585bdfa4","observation_id":"f3827088-08fc-428b-b116-0bcda7867233","resolution":{"observed_at":"2026-08-06T15:22:33.283296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.248861Z","title":"Singleadv: single-class target-specific attack against in- terpretable deep learning systems,","venue":null,"work_id":"ee1556ec-29fb-49fc-9a67-dadb750c2f10","year":2024},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.873391Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:82ed0365a8d88a27e2f4a09e7be74ef904f13561971ebe2259eafce6761b0838","observation_id":"0e53f1e3-941b-45eb-8474-bdc5a97d3056","resolution":{"observed_at":"2026-08-06T15:22:33.256944Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.01667","last_updated":"2020-02-07T09:17:38Z","snapshot_observed_at":"2026-08-01T19:15:11.105038Z","submitted_at":"2019-12-03T20:06:49Z","title":"A Survey of Black-Box Adversarial Attacks on Computer Vision Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.01667","snapshot_observed_at":"2026-08-06T15:22:29.960073Z","title":"A survey of black-box adversarial attacks on computer vision models,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:29.960073Z"},"links":{"cited_paper":"/paper/1912.01667","citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:c5341f0b601c89389e2b4215c33c6d304c649feebb53362f0706cc3d21a4daca","observation_id":"6c20f54a-e2ce-4679-9e34-c98786363a27","resolution":{"observed_at":"2026-08-06T15:22:29.960073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.221831Z","title":"Seqvat: Virtual adversarial training for semi-supervised sequence labeling,","venue":null,"work_id":"d6ccdd17-7574-463a-8acc-97a5bbd6f397","year":2020},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.047637Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:ec474c4e179c23211dfed86dfa64ad1fe937db2f5d142efd5b77b097f705a77e","observation_id":"3a39aa4d-4d03-4b15-80cd-55b0538c4b62","resolution":{"observed_at":"2026-08-06T15:22:33.229871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.200404Z","title":"Tianyu du, xiangyu liu, rong zhang, hui xue, and shouling ji. 2021. enhancing model robustness by incorporating adversarial knowledge into semantic representation,","venue":null,"work_id":"89ea9500-06f9-4bdb-b742-9fac47abdcd5","year":2021},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.114481Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:75d7ec5ec00f2727e56647dacc0b99af1b627d6d1c624c77da065425158d91d4","observation_id":"80e650d2-2434-4031-ad3b-f88c42d17226","resolution":{"observed_at":"2026-08-06T15:22:33.207208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.02443","last_updated":"2019-06-06T07:02:04Z","snapshot_observed_at":"2026-07-06T07:58:24.206559Z","submitted_at":"2019-06-06T07:02:04Z","title":"Robust Neural Machine Translation with Doubly Adversarial Inputs","version":1},"cited_work":{"arxiv_id":"1906.02443","doi":null,"metadata_source":"pith","pith_arxiv_id":"1906.02443","snapshot_observed_at":"2026-08-06T15:22:32.376771Z","title":"Robust Neural Machine Translation with Doubly Adversarial Inputs","venue":"cs.CL","work_id":"551327ba-5696-4b23-9290-d67ef13fe251","year":2019},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.210625Z"},"links":{"cited_paper":"/paper/1906.02443","citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:6995d46cd4341963201c40deafea589f736c45ae33bedad79866ea58a9730f0d","observation_id":"e454ce05-6188-47eb-896f-687a1fa5707a","resolution":{"observed_at":"2026-08-06T15:22:32.426683Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.169075Z","title":"A survey of adversarial defenses and robustness in NLP,","venue":null,"work_id":"bafc8839-3d00-451e-84ad-4fb3f57bb9eb","year":2023},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.279944Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:79d285c1e4ab635a96a00e9bb70db503a61164d807854ab43b69667260e9c240","observation_id":"3e4b99ab-8cf6-46d8-8e24-a07bd496d083","resolution":{"observed_at":"2026-08-06T15:22:33.181004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.144809Z","title":"Efficiently generating sentence-level textual adversarial examples with seq2seq stacked auto-encoder,","venue":null,"work_id":"17fcf9f5-944f-477c-933f-71a32ac81988","year":2023},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.350009Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:bd94f2e2ac6859d2c71a11c9f454b89cbcd284e3013f391031bd0772c89c1d8c","observation_id":"c19afc8a-b126-4ca7-908b-e015ae01f55f","resolution":{"observed_at":"2026-08-06T15:22:33.153217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.113224Z","title":"Joint character-level word embedding and adversarial stability training to defend adversarial text,","venue":null,"work_id":"7ac162b8-d27c-44b8-bd21-afee65803547","year":2020},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.464272Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:89fab206bbfd95c21913211b0f78c831af6ffdb3c5b2c2d311ba34f9b338c0d1","observation_id":"b355bf8f-54a8-4300-b2cc-3a1b008ad1cc","resolution":{"observed_at":"2026-08-06T15:22:33.123480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.089963Z","title":"Financial sentiment analysis: Techniques and applications,","venue":null,"work_id":"809f1a80-ee80-43dc-9a0b-3f3768646214","year":2024},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.547173Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:52818dbe29fb3e32134a10f8868e6ce023f238d40c8e66ba92847e02bb917c8d","observation_id":"9df7dd87-e395-4903-9af1-580c1cedd3c9","resolution":{"observed_at":"2026-08-06T15:22:33.096562Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.058599Z","title":"A survey of text classification with transformers: How wide? how large? how long? how accurate? how expensive? how safe?","venue":null,"work_id":"47f01982-bd98-4627-ad9a-0be01f0c01bf","year":2024},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.637198Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:6faf2be8585c7988abc760751c5009f61d1584dd9305800499d5328059a5384b","observation_id":"b4c1deac-5fba-4eb3-a71c-dc72c93d4b5b","resolution":{"observed_at":"2026-08-06T15:22:33.070348Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.027802Z","title":"Non- autoregressive machine translation with probabilistic context-free gram- mar,","venue":null,"work_id":"65aff36a-ca94-45e6-b9ba-84f3c27061b3","year":2023},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.699941Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:ac8de959e80a3d3426d5aaf0b0edc329f326686893514c17aa5cfa2c93cf693d","observation_id":"34026e0a-d307-44f5-8f6a-d4645fd2ae59","resolution":{"observed_at":"2026-08-06T15:22:33.036783Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:33.004249Z","title":"Flexkbqa: A flexible llm-powered framework for few-shot knowledge base question answering,","venue":null,"work_id":"9f065862-803c-41e3-8b7e-2afcd7184cd5","year":2024},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.769370Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:de3b7cf82c92d60f00271ef4198c004d8ed6d9d185cce58ad20206629ace53e9","observation_id":"585e1302-45b5-4e91-9c20-d1456103c576","resolution":{"observed_at":"2026-08-06T15:22:33.010503Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:32.975088Z","title":"Is bert really robust? a strong baseline for natural language attack on text classification and entailment,","venue":null,"work_id":"d9d76f8c-8ee6-4d87-a127-d5bfbd7c3795","year":2020},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.836016Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:24babbf6db02d0cb5b6436765ef573f52770500f2f9a6a2e11c06d82a53d9c35","observation_id":"c99eeabe-32d5-4aa5-91ec-281d75d0186c","resolution":{"observed_at":"2026-08-06T15:22:32.987163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:30.898580Z","title":"Language models are unsupervised multitask learners,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.898580Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:e349722c3e3b9543e84e470aee003842ff631e8bc126ee9c5ab84860e04c8664","observation_id":"e8179913-3c6c-4c2f-9fde-eeb6f221c8f3","resolution":{"observed_at":"2026-08-06T15:22:30.898580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:32.930323Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding,","venue":null,"work_id":"d6c0eb6f-c00b-48ba-8162-b494f50036f7","year":2019},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:30.994965Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:d2811c727b5883c60c6ad46971bd8f1a27e965ebaa18506d9b4d8db84eda04ff","observation_id":"da5596dc-5099-4e1f-975b-11edcdc542ea","resolution":{"observed_at":"2026-08-06T15:22:32.938434Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-06T15:22:31.035731Z","title":"Distilbert, a distilled version of bert: smaller, faster, cheaper and lighter,","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.035731Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:20c5b32a5c072b64403f44454a49e91d02e917d28909ce46623092064defc52f","observation_id":"43565fcf-42e0-46e1-ae5f-288d549ccc5a","resolution":{"observed_at":"2026-08-06T15:22:31.035731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.10555","last_updated":"2020-03-23T21:17:42Z","snapshot_observed_at":"2026-08-06T14:37:14.514749Z","submitted_at":"2020-03-23T21:17:42Z","title":"ELECTRA: Pre-training Text Encoders as Discriminators Rather Than Generators","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.10555","snapshot_observed_at":"2026-08-06T15:22:31.098740Z","title":"Electra: Pre- training text encoders as discriminators rather than generators,","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.098740Z"},"links":{"cited_paper":"/paper/2003.10555","citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:391142f1e8ecc34a7c6e23a880092de5ab927ef2485268e41471ff2979ac67bb","observation_id":"4b9195c8-840f-4b5d-b7ff-a6ff8160eb8f","resolution":{"observed_at":"2026-08-06T15:22:31.098740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:32.903376Z","title":"Canine: Pre-training an efficient tokenization-free encoder for language representation,","venue":null,"work_id":"d870ec0f-f8fc-426b-a9eb-ad85bddb3e7b","year":2022},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.167529Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:750e6183da1568d1c9341cf4c31ca7310da83903d6acf3af5188119cba156bda","observation_id":"d6b9caad-0a3e-4132-864f-27ce1e7e43fb","resolution":{"observed_at":"2026-08-06T15:22:32.911399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.03824","last_updated":"2022-05-26T18:50:20Z","snapshot_observed_at":"2026-08-03T17:35:52.520891Z","submitted_at":"2021-05-09T03:32:48Z","title":"FNet: Mixing Tokens with Fourier Transforms","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.03824","snapshot_observed_at":"2026-08-06T15:22:31.253454Z","title":"Fnet: Mixing tokens with fourier transforms,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.253454Z"},"links":{"cited_paper":"/paper/2105.03824","citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:2ac20f6020d28c0c99399876df9b432882731b772684029eb99b052de2acc665","observation_id":"5b856a40-639c-4f76-bda6-353baa7372ef","resolution":{"observed_at":"2026-08-06T15:22:31.253454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1911.02116","last_updated":"2020-04-08T01:02:17Z","snapshot_observed_at":"2026-08-02T09:09:10.011185Z","submitted_at":"2019-11-05T22:42:00Z","title":"Unsupervised Cross-lingual Representation Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.02116","snapshot_observed_at":"2026-08-06T15:22:31.420580Z","title":"Unsu- pervised cross-lingual representation learning at scale,","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.420580Z"},"links":{"cited_paper":"/paper/1911.02116","citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:f5fa2d280e1a3a97e2205a6a8dc97201cbcb70eedc66e66e0e7beccd5c23d74b","observation_id":"d850fea9-9cdf-4b1e-8d93-6d538f2dcacf","resolution":{"observed_at":"2026-08-06T15:22:31.420580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:31.560674Z","title":"A unified approach to interpreting model predictions,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.560674Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:fce6d402aab57441eccfd20309e13c9c7a0920d529bb13486c48bea8423a3efb","observation_id":"b73a9f37-a138-4413-9f42-2b6956a604e6","resolution":{"observed_at":"2026-08-06T15:22:31.560674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6034","last_updated":"2014-04-19T11:54:52Z","snapshot_observed_at":"2026-07-06T03:31:30.452356Z","submitted_at":"2013-12-20T16:45:54Z","title":"Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Maps","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6034","snapshot_observed_at":"2026-08-06T15:22:31.692085Z","title":"Deep inside convolutional networks: Visualising image classification models and saliency maps,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.692085Z"},"links":{"cited_paper":"/paper/1312.6034","citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:7ecb37d1890ec8d4c2a46b0811a52907c51df0cbb034c0d1d8d4192a5f8a7519","observation_id":"427c0d93-1d23-4843-8e7f-4b030b027f58","resolution":{"observed_at":"2026-08-06T15:22:31.692085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:32.752404Z","title":"Recursive deep models for semantic compositionality over a sentiment treebank,","venue":null,"work_id":"3a4279fe-a278-4003-9950-ead195917a76","year":2013},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.817919Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:0029c6e16b47ba19a126b9567fb58c190591fd1e450d6347465301308c36a420","observation_id":"3505eaa7-f59f-4adf-9a76-c5c80f54c333","resolution":{"observed_at":"2026-08-06T15:22:32.816170Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:32.630231Z","title":"Character-level convolutional networks for text classification,","venue":null,"work_id":"38bd7f9c-b1a3-4fde-8cfe-1a1670554bae","year":2015},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:31.961606Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:091b2738b9008b2d83aacbb79bfaa69bfcd24bed25aa5bd1ae6864f0ec99cf93","observation_id":"7f9b0b4f-dead-4294-8f62-12d47d785c59","resolution":{"observed_at":"2026-08-06T15:22:32.670140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:22:32.514285Z","title":"Textbugger: Generating adversarial text against real-world applications,","venue":null,"work_id":"b2e16110-c4f2-443e-a0b6-961f4415ad4d","year":2019},"citing_paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T15:22:32.069776Z"},"links":{"citing_paper":"/paper/2507.16164"},"observation_digest":"sha256:cdc68d9b57a2690d1cf3cfc375fc0f831816c1e35b10c511222aa7e041b5984d","observation_id":"6c6e48c2-e128-4065-92fe-6b5ecb09998e","resolution":{"observed_at":"2026-08-06T15:22:32.555099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.16164","last_updated":"2025-07-22T02:20:00Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T15:14:28.915671Z","submitted_at":"2025-07-22T02:20:00Z","title":"Attacking interpretable NLP systems"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":30},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2507.16164."}