{"as_of":"2026-08-08T04:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:021630e081475476f53e514271e733ceafd23339ef3260ab426484b8e93f226e","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:17:34.540307Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.10039/citation-record","integrity":"/paper/2508.10039/integrity","json":"/paper/2508.10039/citation-record.json","paper":"/paper/2508.10039"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.689367Z","title":null,"venue":null,"work_id":"bb5ee26f-be70-4565-9f07-292306176f5c","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.527979Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:11affaedbf00ff9ad44e753b366f09c77079e5211d9991c16b949fce1bec13b4","observation_id":"7fcb4847-622b-4660-8caf-d3424e3e9756","resolution":{"observed_at":"2026-08-05T22:17:34.692570Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.677770Z","title":null,"venue":null,"work_id":"c6e4d239-a329-40bb-b362-142974a14c34","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.532745Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:f97fa99b7752f63c6215532218f6a08b9f097ba2b43a7d83e4b62f81c8f08a0e","observation_id":"51173ed5-a8c7-4628-b139-dcd4fd6264f5","resolution":{"observed_at":"2026-08-05T22:17:34.681722Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.662920Z","title":"(11) Therefore, the probability of at least one success is: P (Au) = 1 − P (Au)","venue":null,"work_id":"1c14a67c-784b-4e97-b94a-6aa2bc96ba29","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.536169Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:27e6f45d3107ff5238f032de6f67f010c3b510acaa365e2ab3c71e2b1fadc449","observation_id":"ce68229b-16ad-4332-b94f-29e07acee64f","resolution":{"observed_at":"2026-08-05T22:17:34.667916Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.651385Z","title":"(14) Therefore, the probability of at least one success with u + 1 attack methods is: P (Au+1) = 1 − P (Au+1)","venue":null,"work_id":"1bb23c0f-9039-43aa-bd25-884717bf48d2","year":2000},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.540307Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:a79cd3248d05a6afc5d61c7f3375c1cbe0fcfbb3da981cea5d0f767d4a847da2","observation_id":"c84394ab-ef4d-402f-bb63-a5bad2bf5d32","resolution":{"observed_at":"2026-08-05T22:17:34.655181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.712630Z","title":"Cambodian Journal of Educational Re- search, 4(1):35–56","venue":null,"work_id":"733465f8-c9c6-4e32-ba77-9ebf13a42863","year":null},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.502543Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:35357b64bb50469fe47472e9662c2e760beade1b38b21040a81a8a515d30d5ae","observation_id":"da566b24-2554-4fd6-b2a9-70c4eb6bcd93","resolution":{"observed_at":"2026-08-05T22:17:34.716198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11934","last_updated":"2021-03-11T18:45:13Z","snapshot_observed_at":"2026-07-06T10:07:22.052360Z","submitted_at":"2020-10-22T17:58:14Z","title":"mT5: A massively multilingual pre-trained text-to-text transformer","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11934","snapshot_observed_at":"2026-08-05T22:17:34.518223Z","title":"Wang Xiaosen, Kangheng Tong, and Kun He","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.518223Z"},"links":{"cited_paper":"/paper/2010.11934","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:e9d3a88935389608f86bcfd0f35d8226302eba6e6192997049d362aabfd61733","observation_id":"4f42dccd-0a73-4bbb-9ded-6bdd09c91234","resolution":{"observed_at":"2026-08-05T22:17:34.518223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15244","last_updated":"2024-05-28T00:33:16Z","snapshot_observed_at":"2026-07-06T18:19:08.871953Z","submitted_at":"2024-05-24T06:11:30Z","title":"Adversarial Attacks on Hidden Tasks in Multi-Task Learning","version":2},"cited_work":{"arxiv_id":"2405.15244","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.15244","snapshot_observed_at":"2026-08-05T22:17:34.566440Z","title":"Adversarial Attacks on Hidden Tasks in Multi-Task Learning","venue":"cs.LG","work_id":"79a09164-336c-4b34-95c6-ac3f20d1b978","year":2024},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":1996,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.523163Z"},"links":{"cited_paper":"/paper/2405.15244","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:5c90d07361793531909cd3741ade077e704a6744a268fcd5d5fcc254df89b31e","observation_id":"b4924e65-bba1-4c9f-bf10-b683aaccbeba","resolution":{"observed_at":"2026-08-05T22:17:34.572561Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.700162Z","title":"In CCS, pages 506–519","venue":null,"work_id":"93957dce-16c1-4346-bd3f-121cbd259de6","year":2016},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.507479Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:a409f14a465042f42b4eacd28ac5d6ecb879a4f0633169c923003912154cefa3","observation_id":"b861d24d-cb7f-4a4e-9d82-fe08f727bf51","resolution":{"observed_at":"2026-08-05T22:17:34.704253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:17:34.723864Z","title":"K Krishna and M Narasimha Murty","venue":null,"work_id":"0d3aabf9-41a4-4d41-b79f-174e5eb9d8d7","year":1999},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.493771Z"},"links":{"citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:106d44d0785725c5c14c26baf3598f0af37f63a703b9e97c23ff03ea4e3e3132","observation_id":"781e8d42-fc75-467c-aa0b-946659aac2db","resolution":{"observed_at":"2026-08-05T22:17:34.727768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.00944","last_updated":"2023-06-16T13:24:15Z","snapshot_observed_at":"2026-07-06T14:47:34.480641Z","submitted_at":"2023-02-02T08:35:34Z","title":"TransFool: An Adversarial Attack against Neural Machine Translation Models","version":2},"cited_work":{"arxiv_id":"2302.00944","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.00944","snapshot_observed_at":"2026-08-05T22:17:34.598201Z","title":"TransFool: An Adversarial Attack against Neural Machine Translation Models","venue":"cs.CL","work_id":"ae074385-ba0a-46bd-842d-d6f6b215101f","year":2023},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.512599Z"},"links":{"cited_paper":"/paper/2302.00944","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:099fd34503c759b96cb3680b762dd7bf01936f11df74c550cbedfe0f33d74860","observation_id":"adf30482-37f7-4b60-a2ee-5077d8fcc117","resolution":{"observed_at":"2026-08-05T22:17:34.603352Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2107.04187","last_updated":"2021-07-15T11:14:15Z","snapshot_observed_at":"2026-07-06T11:27:31.181558Z","submitted_at":"2021-07-09T03:28:17Z","title":"A Multi-modal and Multi-task Learning Method for Action Unit and Expression Recognition","version":2},"cited_work":{"arxiv_id":"2107.04187","doi":null,"metadata_source":"pith","pith_arxiv_id":"2107.04187","snapshot_observed_at":"2026-08-05T22:17:34.630188Z","title":"A Multi-modal and Multi-task Learning Method for Action Unit and Expression Recognition","venue":"cs.CV","work_id":"9002d840-fb83-4b90-b35c-68c40212314e","year":2021},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.489612Z"},"links":{"cited_paper":"/paper/2107.04187","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:8c2fc51e5fba5ca379b11c016224c7d536e9d38fa2dc84622b0fdee57d2efc25","observation_id":"f070afd0-a91c-4a2e-bff7-16c1316aeb3a","resolution":{"observed_at":"2026-08-05T22:17:34.634359Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1903.06620","last_updated":"2019-03-19T01:37:05Z","snapshot_observed_at":"2026-07-06T07:39:34.988778Z","submitted_at":"2019-03-15T16:04:11Z","title":"On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models","version":2},"cited_work":{"arxiv_id":"1903.06620","doi":null,"metadata_source":"pith","pith_arxiv_id":"1903.06620","snapshot_observed_at":"2026-08-05T22:17:34.615334Z","title":"On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models","venue":"cs.CL","work_id":"b10572af-2dbb-40ff-9eaa-bfe36fc3f9a3","year":2019},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.497816Z"},"links":{"cited_paper":"/paper/1903.06620","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:45d845b02ca694079da3a0fbe3a5f9569e5c301a9ac67445638d30464793197e","observation_id":"dec4d6e4-552d-4275-b57b-8448daf69cbb","resolution":{"observed_at":"2026-08-05T22:17:34.619647Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.02116","last_updated":"2020-04-08T01:02:17Z","snapshot_observed_at":"2026-08-02T09:09:10.011185Z","submitted_at":"2019-11-05T22:42:00Z","title":"Unsupervised Cross-lingual Representation Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.02116","snapshot_observed_at":"2026-08-05T22:17:34.485159Z","title":"Multimedia Tools and Applica- tions, 83(4):11215–11227","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T22:17:34.485159Z"},"links":{"cited_paper":"/paper/1911.02116","citing_paper":"/paper/2508.10039"},"observation_digest":"sha256:ec98a56fbfbdced5cdfafcce16f8a4d5edea57accec2c0b9ed2ba58f393de064","observation_id":"c3c80742-b9da-496a-9cd6-39a90b802b13","resolution":{"observed_at":"2026-08-05T22:17:34.485159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.10039","last_updated":"2025-08-10T12:46:47Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T22:17:33.747432Z","submitted_at":"2025-08-10T12:46:47Z","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":4,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2508.10039."}