{"as_of":"2026-08-21T10:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2cabd63ba3298ac5105ffb8cb9b2334d3dc888ed63100f395179e77f010bff50","coverage":[{"denominator":52,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":52,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:56:12.871181Z","state":"measured"},{"denominator":54,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":54,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T06:15:55.665105Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.17456","snapshot_observed_at":"2026-08-03T04:36:01.611166Z","title":"org/CorpusID:255749463","venue":null,"work_id":null,"year":1931},"citing_paper":{"arxiv_id":"2602.04718","last_updated":"2026-08-12T07:38:21Z","snapshot_observed_at":"2026-08-15T23:09:17.490906Z","submitted_at":"2026-02-04T16:29:14Z","title":"Superposition Without Interference? Towards Isolated Interventions via Almost Orthogonal Features in Language Models","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T04:36:01.611166Z"},"links":{"cited_paper":"/paper/2508.17456","citing_paper":"/paper/2602.04718"},"observation_digest":"sha256:6ae01a2f7c96c6aa2a5217d728ce2d1237ef46336b8ddccbb028773c65167dc5","observation_id":"6a64b69b-e988-46bb-9dc3-97384aba4f57","resolution":{"observed_at":"2026-08-03T04:36:01.611166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.17456","snapshot_observed_at":"2026-08-04T06:15:55.665105Z","title":"org/CorpusID:255749463","venue":null,"work_id":null,"year":1931},"citing_paper":{"arxiv_id":"2602.04718","last_updated":"2026-08-12T07:38:21Z","snapshot_observed_at":"2026-08-15T23:09:17.490906Z","submitted_at":"2026-02-04T16:29:14Z","title":"Superposition Without Interference? Towards Isolated Interventions via Almost Orthogonal Features in Language Models","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T06:15:55.665105Z"},"links":{"cited_paper":"/paper/2508.17456","citing_paper":"/paper/2602.04718"},"observation_digest":"sha256:ab9891164da2d126a5e061a3ae022ada3d0cde1d0fdfeb0c991a0ef5103fde5f","observation_id":"5d7e9aaf-2c04-4b6a-944a-5a058c676a9d","resolution":{"observed_at":"2026-08-04T06:15:55.665105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.17456/citation-record","integrity":"/paper/2508.17456/integrity","json":"/paper/2508.17456/citation-record.json","paper":"/paper/2508.17456"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:07.235659Z","title":"On the complexity of neural computation in superposition, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.235659Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:fab4db2a6badadeb44b1db1ceae77072b28829f6e683c193bd69da51e966ff3e","observation_id":"63b204cc-9ddf-4253-add6-c762204ac63d","resolution":{"observed_at":"2026-08-05T16:56:07.235659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:07.360553Z","title":"Towards monosemanticity: Decomposing language models with dictionary learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.360553Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:082c57eead8abe484de5e06be79e5583d61291ebd4d56aa1703fd0e8ffac0b81","observation_id":"cd8b4c7d-b792-4682-8a2a-a9a5c6403fc3","resolution":{"observed_at":"2026-08-05T16:56:07.360553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-05T16:56:07.470698Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.470698Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:4847eeb8313055f3f2e8b83a706ac3c19f5b81fc3739eaf273ebedca536d816b","observation_id":"2a8cb003-69ce-4f67-b6b4-0b8d3b430be9","resolution":{"observed_at":"2026-08-05T16:56:07.470698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1905.13736","last_updated":"2022-01-13T17:20:07Z","snapshot_observed_at":"2026-08-14T16:22:53.380654Z","submitted_at":"2019-05-31T17:41:33Z","title":"Unlabeled Data Improves Adversarial Robustness","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.13736","snapshot_observed_at":"2026-08-05T16:56:07.615489Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.615489Z"},"links":{"cited_paper":"/paper/1905.13736","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:0ab451d286a31f6785000a07e3d2352b67a354368655ab071face4a9295b2ef0","observation_id":"a0bf3682-10f0-4870-a869-3481e749e55a","resolution":{"observed_at":"2026-08-05T16:56:07.615489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.02918","last_updated":"2019-06-15T07:40:33Z","snapshot_observed_at":"2026-08-14T17:19:22.044743Z","submitted_at":"2019-02-08T02:08:19Z","title":"Certified Adversarial Robustness via Randomized Smoothing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.02918","snapshot_observed_at":"2026-08-05T16:56:07.749818Z","title":"Zico Kolter","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.749818Z"},"links":{"cited_paper":"/paper/1902.02918","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:93850467a368933a971a8ce4386be2a40aa08647fde76225410029a38560a8b1","observation_id":"58f1ac25-47db-4fdc-9508-9d001d73c52f","resolution":{"observed_at":"2026-08-05T16:56:07.749818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:17.825346Z","title":"Update on how we train saes, 2024","venue":null,"work_id":"f04744ff-ab17-4ced-9a73-9d2c9b0966c5","year":2024},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.883026Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:5cec578ba351287a9ea4f4b8209d44d2513d19600c809d8d72220ca91c62f7ff","observation_id":"764c036a-ea4e-4261-ae9e-c2685b272670","resolution":{"observed_at":"2026-08-05T16:56:17.972990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-13T05:53:26.580440Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-05T16:56:07.971877Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.971877Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:d51d08e2e480711fc13063befd15e6c630c58d07a13e158f3463bebb203c7c08","observation_id":"2c851804-4247-479b-8407-5900e1c61080","resolution":{"observed_at":"2026-08-05T16:56:07.971877Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.08600","last_updated":"2023-10-04T13:17:38Z","snapshot_observed_at":"2026-08-16T13:37:26.527260Z","submitted_at":"2023-09-15T17:56:55Z","title":"Sparse Autoencoders Find Highly Interpretable Features in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.08600","snapshot_observed_at":"2026-08-05T16:56:08.037888Z","title":"Sparse autoencoders find highly interpretable features in language models, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.037888Z"},"links":{"cited_paper":"/paper/2309.08600","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:63096ce1dd42c209b826bf1b58fae2d4902267fe205b412d1ed5554812843d83","observation_id":"5a53a7c6-d77f-4604-ac64-53bbbb46cef9","resolution":{"observed_at":"2026-08-05T16:56:08.037888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:17.616652Z","title":"Why do adversarial attacks transfer? explaining transferability of evasion and poisoning attacks","venue":null,"work_id":"7cc2e886-91ad-4bc5-b417-f2c441fd7342","year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.163056Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:93b9d832726b3f58a57b40ed78992f2b10744f7985e88ea45b52a92c47fb9f7c","observation_id":"15ecacea-e880-4f7e-9308-1391ca3cd4c2","resolution":{"observed_at":"2026-08-05T16:56:17.702238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:08.246092Z","title":"Toy models of superposition","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.246092Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:00b6d50cc2181ac89ac404c2692839d854e66a5b7bed4192c6e3fb554c4de638","observation_id":"9880684a-46e0-482d-9837-11a056ba97da","resolution":{"observed_at":"2026-08-05T16:56:08.246092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.00945","last_updated":"2019-09-27T17:39:54Z","snapshot_observed_at":"2026-08-17T19:52:56.537749Z","submitted_at":"2019-06-03T17:55:20Z","title":"Adversarial Robustness as a Prior for Learned Representations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.00945","snapshot_observed_at":"2026-08-05T16:56:08.294470Z","title":"Adversarial robustness as a prior for learned representations, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.294470Z"},"links":{"cited_paper":"/paper/1906.00945","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:474eb7bf55ed3b94f7d612cb305680dab2daa66a19cd064d4f7b2ee5893f5da5","observation_id":"4d97c185-6ae8-4577-93b4-9e7ee1c0d031","resolution":{"observed_at":"2026-08-05T16:56:08.294470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.11378","last_updated":"2023-08-09T17:06:52Z","snapshot_observed_at":"2026-08-20T11:35:06.498246Z","submitted_at":"2022-07-22T23:48:26Z","title":"Do Perceptually Aligned Gradients Imply Adversarial Robustness?","version":3},"cited_work":{"arxiv_id":"2207.11378","doi":null,"metadata_source":"pith","pith_arxiv_id":"2207.11378","snapshot_observed_at":"2026-08-05T16:56:17.019757Z","title":"Do Perceptually Aligned Gradients Imply Adversarial Robustness?","venue":"cs.CV","work_id":"2ee5991b-705f-4420-9202-dacb89ea0a43","year":2022},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.375645Z"},"links":{"cited_paper":"/paper/2207.11378","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:4d7c0eeb3af5fd2b1d09ccaebae81d52a3886a92a8e57463c09d9fa188ddd80f","observation_id":"ddb4f7f6-00e2-408e-8f88-38dba0024771","resolution":{"observed_at":"2026-08-05T16:56:17.115636Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04093","last_updated":"2024-06-06T14:10:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-06T14:10:12Z","title":"Scaling and evaluating sparse autoencoders","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04093","snapshot_observed_at":"2026-08-05T16:56:08.467653Z","title":"Scaling and evaluating sparse autoencoders, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.467653Z"},"links":{"cited_paper":"/paper/2406.04093","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:0658c006c3ef1c869e7144a717467be359872ca549dd7b2e34bb749ee99224f8","observation_id":"d01ab5e8-3054-423a-8899-02c1d07158eb","resolution":{"observed_at":"2026-08-05T16:56:08.467653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02774","last_updated":"2018-09-10T17:08:27Z","snapshot_observed_at":"2026-08-14T19:56:50.474255Z","submitted_at":"2018-01-09T03:24:53Z","title":"Adversarial Spheres","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02774","snapshot_observed_at":"2026-08-05T16:56:08.551378Z","title":"Schoenholz, Maithra Raghu, Martin Wattenberg, and Ian Goodfellow","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.551378Z"},"links":{"cited_paper":"/paper/1801.02774","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:7512d2ae5fd1aa710c5f0a6da6306ccb8271bc1c5b683cf2bc5f9324c3f6a9fc","observation_id":"26179ab0-82f3-4e02-b058-58983b1725e5","resolution":{"observed_at":"2026-08-05T16:56:08.551378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T07:17:20.004918Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-05T16:56:08.717750Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.717750Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:2a89283340c82f89b48dc5a844461e95f9a22ba9d24d38942660808dbdd92b31","observation_id":"f29714ca-fe39-4462-83e1-487976af2830","resolution":{"observed_at":"2026-08-05T16:56:08.717750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.12715","last_updated":"2019-08-29T12:23:52Z","snapshot_observed_at":"2026-08-14T18:07:07.555009Z","submitted_at":"2018-10-30T13:12:47Z","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.12715","snapshot_observed_at":"2026-08-05T16:56:08.843235Z","title":"On the effectiveness of interval bound propagation for training verifiably robust models, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.843235Z"},"links":{"cited_paper":"/paper/1810.12715","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:174f5e34f75b5636c4986ab4fa3f5c60dda56fd455956c6e9636b3c0ff70d3b3","observation_id":"0093fff1-3713-481d-99f2-90399319a6c0","resolution":{"observed_at":"2026-08-05T16:56:08.843235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06278","last_updated":"2024-05-10T07:21:03Z","snapshot_observed_at":"2026-08-16T13:53:49.860613Z","submitted_at":"2024-05-10T07:21:03Z","title":"Exploring the Interplay of Interpretability and Robustness in Deep Neural Networks: A Saliency-guided Approach","version":1},"cited_work":{"arxiv_id":"2405.06278","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.06278","snapshot_observed_at":"2026-08-05T16:56:16.745849Z","title":"Exploring the Interplay of Interpretability and Robustness in Deep Neural Networks: A Saliency-guided Approach","venue":"cs.CV","work_id":"6f5f136b-32f3-4e86-aa66-ce8734caf6e1","year":2024},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:08.944828Z"},"links":{"cited_paper":"/paper/2405.06278","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:678b356c97d24389846ecc6facd57a010624b4a854d4cd9c08f3e13b90be9ab2","observation_id":"782b3e4d-0fe7-495d-a1a9-7e285baa4583","resolution":{"observed_at":"2026-08-05T16:56:16.824963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1902.03538","last_updated":"2019-12-28T21:23:26Z","snapshot_observed_at":"2026-08-17T18:51:04.674665Z","submitted_at":"2019-02-10T04:55:44Z","title":"Model Compression with Adversarial Robustness: A Unified Optimization Framework","version":3},"cited_work":{"arxiv_id":"1902.03538","doi":null,"metadata_source":"pith","pith_arxiv_id":"1902.03538","snapshot_observed_at":"2026-08-05T16:56:16.518073Z","title":"Model Compression with Adversarial Robustness: A Unified Optimization Framework","venue":"cs.LG","work_id":"67599f76-df20-4b94-801b-d3a1ffec8d3a","year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.026468Z"},"links":{"cited_paper":"/paper/1902.03538","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:0568d25cdb5c247bc2e46a4c47c0d28a7555c011b5d47153ba5f211ec0434762","observation_id":"1007c1db-b546-41b6-a3b0-9e880399c106","resolution":{"observed_at":"2026-08-05T16:56:16.619903Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.02175","last_updated":"2019-08-12T14:36:10Z","snapshot_observed_at":"2026-08-20T18:21:16.685532Z","submitted_at":"2019-05-06T17:45:05Z","title":"Adversarial Examples Are Not Bugs, They Are Features","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.02175","snapshot_observed_at":"2026-08-05T16:56:09.115309Z","title":"Adversarial examples are not bugs, they are features, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.115309Z"},"links":{"cited_paper":"/paper/1905.02175","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:e5771b3fad2bef49b331f87476eb93810af55b8a97f920a1ed307f0f4b99a242","observation_id":"c55a55d8-dc7b-4d12-a2b0-4ff95a9e29f8","resolution":{"observed_at":"2026-08-05T16:56:09.115309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.10477","last_updated":"2020-02-24T19:01:47Z","snapshot_observed_at":"2026-08-19T09:59:07.836635Z","submitted_at":"2020-02-24T19:01:47Z","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.10477","snapshot_observed_at":"2026-08-05T16:56:09.199233Z","title":"Precise tradeoffs in adversarial training for linear regression, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.199233Z"},"links":{"cited_paper":"/paper/2002.10477","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:95d5e0ca4e48a5ebff9702dded001db6060ac431dae702322bc9ed05ef0b2407","observation_id":"da5af57a-04e5-4c3c-a4d2-4a9d485e4c8b","resolution":{"observed_at":"2026-08-05T16:56:09.199233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:17.390062Z","title":"On the geometry of adversarial examples, 2019","venue":null,"work_id":"290b8347-a764-4b36-900b-f7067f1663ba","year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.328938Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:c4cde2ff79793c5b75161be90bfee99909f56e28c4a8c74a16dc483d0729fac0","observation_id":"74b07980-0769-4334-9456-d68030490a9e","resolution":{"observed_at":"2026-08-05T16:56:17.514830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-16T03:14:49.760924Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-05T16:56:09.416841Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.416841Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:bf70af5ca43b6cc0384eb961cf0393457198d13b3617db3a78a023c6ea7c0105","observation_id":"bbeb1611-255c-4c93-b101-c8864291b50d","resolution":{"observed_at":"2026-08-05T16:56:09.416841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.03471","last_updated":"2019-05-29T15:17:39Z","snapshot_observed_at":"2026-08-19T18:18:50.805664Z","submitted_at":"2018-02-09T22:24:50Z","title":"Certified Robustness to Adversarial Examples with Differential Privacy","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.03471","snapshot_observed_at":"2026-08-05T16:56:09.496889Z","title":"Certified robustness to adversarial examples with differential privacy, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.496889Z"},"links":{"cited_paper":"/paper/1802.03471","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:43812d625f1b1d045e60d356d2860b9fe192cd8eafc9745f693deae7b7b83a0b","observation_id":"27cf724d-8a7c-41bd-a208-225075a4f0a5","resolution":{"observed_at":"2026-08-05T16:56:09.496889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-08-18T17:48:45.518915Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-05T16:56:09.587170Z","title":"Delving into transferable adversarial examples and black-box attacks, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.587170Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:d20b79d3bde896ff17947d15256477fc88aa8bc4f7acfda68f1996bbb81cf73a","observation_id":"061116f1-c2f6-4509-912a-84a1dda4fb5e","resolution":{"observed_at":"2026-08-05T16:56:09.587170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-05T16:56:09.714336Z","title":"Towards deep learning models resistant to adversarial attacks, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.714336Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:6a8b52286b979d619b52a1ba227c2df6a4160bdd09a23e4adc2865316d674393","observation_id":"bd16b24d-fddc-4a11-ba82-76cb091e5f92","resolution":{"observed_at":"2026-08-05T16:56:09.714336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.03063","last_updated":"2018-11-06T04:31:04Z","snapshot_observed_at":"2026-08-14T18:30:58.381266Z","submitted_at":"2018-09-09T23:57:29Z","title":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","version":2},"cited_work":{"arxiv_id":"1809.03063","doi":null,"metadata_source":"pith","pith_arxiv_id":"1809.03063","snapshot_observed_at":"2026-08-05T16:56:16.075451Z","title":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","venue":"cs.LG","work_id":"a5bcfbfb-320d-4c61-a60f-d8fa2a9cc5eb","year":2018},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:09.855826Z"},"links":{"cited_paper":"/paper/1809.03063","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:5fdf4175b3786936cedd58248ec4cdf486fce886cfdde6b55ca36f880f28438c","observation_id":"d47158ba-a285-4746-b0cc-5707ba6776d6","resolution":{"observed_at":"2026-08-05T16:56:16.215125Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.12202","last_updated":"2019-10-28T16:36:43Z","snapshot_observed_at":"2026-08-14T16:24:46.254399Z","submitted_at":"2019-05-29T03:51:34Z","title":"Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness","version":2},"cited_work":{"arxiv_id":"1905.12202","doi":null,"metadata_source":"pith","pith_arxiv_id":"1905.12202","snapshot_observed_at":"2026-08-05T16:56:15.772388Z","title":"Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness","venue":"cs.LG","work_id":"d6f5afd5-cafd-4ad5-bc62-b232461c8097","year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.023403Z"},"links":{"cited_paper":"/paper/1905.12202","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:4752fb51d7a1a51737f2bd3adce944fdc8af7c787f2409dad3f3134d3e7100b3","observation_id":"eefdf447-c9df-4793-b990-a7492f744c03","resolution":{"observed_at":"2026-08-05T16:56:15.872373Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.04599","last_updated":"2016-07-04T04:49:44Z","snapshot_observed_at":"2026-08-16T00:14:18.132920Z","submitted_at":"2015-11-14T18:50:00Z","title":"DeepFool: a simple and accurate method to fool deep neural networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.04599","snapshot_observed_at":"2026-08-05T16:56:10.125225Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.125225Z"},"links":{"cited_paper":"/paper/1511.04599","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:d9ae0674fc4f7e953423a64af5f2156fa56b2c1ea819b41db2c872a5a8378c32","observation_id":"44086cb0-4c78-49d0-8735-87857003c3dc","resolution":{"observed_at":"2026-08-05T16:56:10.125225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.08401","last_updated":"2017-03-09T17:01:25Z","snapshot_observed_at":"2026-08-16T06:22:21.817620Z","submitted_at":"2016-10-26T16:30:45Z","title":"Universal adversarial perturbations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.08401","snapshot_observed_at":"2026-08-05T16:56:10.225525Z","title":"Universal adversarial perturbations, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.225525Z"},"links":{"cited_paper":"/paper/1610.08401","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:945c2fcef40556d51b42dc9e371463f3a667a672182e1067dc84c7230a81f9cb","observation_id":"57fcbade-8bdd-4184-af65-6cd56ff6eeba","resolution":{"observed_at":"2026-08-05T16:56:10.225525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.10716","last_updated":"2020-07-06T21:03:23Z","snapshot_observed_at":"2026-08-08T14:49:42.230855Z","submitted_at":"2020-02-25T08:03:01Z","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.10716","snapshot_observed_at":"2026-08-05T16:56:10.298809Z","title":"Understanding and mitigating the tradeoff between robustness and accuracy, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.298809Z"},"links":{"cited_paper":"/paper/2002.10716","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:4725a5d8beef1daeb2ba2755c17ebf3a0535c03a217d7678b8b0c00a6a619533","observation_id":"752ad884-7d36-4961-86e5-88d7a13b755b","resolution":{"observed_at":"2026-08-05T16:56:10.298809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.11569","last_updated":"2020-03-04T14:33:26Z","snapshot_observed_at":"2026-08-13T05:52:29.527952Z","submitted_at":"2020-02-26T15:40:50Z","title":"Overfitting in adversarially robust deep learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.11569","snapshot_observed_at":"2026-08-05T16:56:10.384931Z","title":"Zico Kolter","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.384931Z"},"links":{"cited_paper":"/paper/2002.11569","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:8c78b7827821e09073eb3bebd907c0abb32465ed6be38983c0f9b13ccbde56a2","observation_id":"9164301c-ab99-47e1-b358-064705929c50","resolution":{"observed_at":"2026-08-05T16:56:10.384931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:10.449563Z","title":"Berg, and Li Fei-Fei","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.449563Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:6142363742b76feba50a1bf205740a37b1a32489c6d4479de74f427a85532bf2","observation_id":"27839f00-b087-4cf8-86ef-d1a696cd8c05","resolution":{"observed_at":"2026-08-05T16:56:10.449563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.08489","last_updated":"2020-12-08T01:56:10Z","snapshot_observed_at":"2026-08-20T09:25:05.416003Z","submitted_at":"2020-07-16T17:42:40Z","title":"Do Adversarially Robust ImageNet Models Transfer Better?","version":2},"cited_work":{"arxiv_id":"2007.08489","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.08489","snapshot_observed_at":"2026-08-05T16:56:15.512747Z","title":"Do Adversarially Robust ImageNet Models Transfer Better?","venue":"cs.CV","work_id":"ba21598a-7f0c-469b-af19-a07b6472c2d7","year":2020},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.534478Z"},"links":{"cited_paper":"/paper/2007.08489","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:8baf97cd08d2f1d9678d393d22028b3785427d734f0d3a0d3d819f45b1bccb4c","observation_id":"6ca28d03-b333-491b-b406-e34987a0453f","resolution":{"observed_at":"2026-08-05T16:56:15.614207Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.11285","last_updated":"2018-05-02T05:24:33Z","snapshot_observed_at":"2026-08-14T19:20:28.065250Z","submitted_at":"2018-04-30T15:55:59Z","title":"Adversarially Robust Generalization Requires More Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.11285","snapshot_observed_at":"2026-08-05T16:56:10.619591Z","title":"Adversarially robust generalization requires more data, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.619591Z"},"links":{"cited_paper":"/paper/1804.11285","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:9e6bf753cfc5d60c6a4e5d2af73748b02e06bf0cc2251b294594fcbc10672670","observation_id":"8b1bafbc-b571-44ce-84e5-f34b88de9d2d","resolution":{"observed_at":"2026-08-05T16:56:10.619591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.12843","last_updated":"2019-11-20T21:26:19Z","snapshot_observed_at":"2026-08-14T16:39:52.344057Z","submitted_at":"2019-04-29T17:50:32Z","title":"Adversarial Training for Free!","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.12843","snapshot_observed_at":"2026-08-05T16:56:10.681607Z","title":"Davis, Gavin Taylor, and Tom Goldstein","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.681607Z"},"links":{"cited_paper":"/paper/1904.12843","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:21002f28aab65a6797a331267619038b6a0179c58f231d831239b3f89fde1021","observation_id":"7ff25e2c-9482-4a75-9e03-e79a294ca46d","resolution":{"observed_at":"2026-08-05T16:56:10.681607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.02104","last_updated":"2020-02-03T21:18:27Z","snapshot_observed_at":"2026-08-18T03:00:10.745978Z","submitted_at":"2018-09-06T17:26:58Z","title":"Are adversarial examples inevitable?","version":3},"cited_work":{"arxiv_id":"1809.02104","doi":null,"metadata_source":"pith","pith_arxiv_id":"1809.02104","snapshot_observed_at":"2026-08-05T16:56:15.057021Z","title":"Are adversarial examples inevitable?","venue":"cs.LG","work_id":"5eb4c257-e39f-462e-93ee-82b35555a0a9","year":2018},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.804196Z"},"links":{"cited_paper":"/paper/1809.02104","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:88fad6aefe2909357a50aa843ee9a16122038558d3553cebe797cf57ce065f7d","observation_id":"a2b5cbb6-a3b5-4c2f-803b-8f46912ef695","resolution":{"observed_at":"2026-08-05T16:56:15.238290Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.10151","last_updated":"2022-06-01T10:42:23Z","snapshot_observed_at":"2026-08-20T03:20:22.248117Z","submitted_at":"2021-06-18T14:32:55Z","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.10151","snapshot_observed_at":"2026-08-05T16:56:10.874588Z","title":"The dimpled manifold model of adversarial examples in machine learning, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:10.874588Z"},"links":{"cited_paper":"/paper/2106.10151","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:bb18a37b0040a1be10f2f87f09d3dbb8325cd10432f96d3e01d757e1750ae02b","observation_id":"57200a7f-d426-47ad-9be1-63678b0f5843","resolution":{"observed_at":"2026-08-05T16:56:10.874588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1903.00073","last_updated":"2019-06-01T00:36:16Z","snapshot_observed_at":"2026-08-14T17:09:19.120176Z","submitted_at":"2019-02-28T21:25:45Z","title":"On the Effectiveness of Low Frequency Perturbations","version":2},"cited_work":{"arxiv_id":"1903.00073","doi":null,"metadata_source":"pith","pith_arxiv_id":"1903.00073","snapshot_observed_at":"2026-08-05T16:56:14.812754Z","title":"On the Effectiveness of Low Frequency Perturbations","venue":"cs.CV","work_id":"a7734fe7-a58e-4ad2-84b1-ddb1632ae32e","year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.002804Z"},"links":{"cited_paper":"/paper/1903.00073","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:56079aa2a856c05e5fa63ca90b3adbc378f5fb117df6998bc95298e8782d43ed","observation_id":"7ad75d55-42ef-4169-839b-aeecbed723e0","resolution":{"observed_at":"2026-08-05T16:56:14.899377Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.19101","last_updated":"2024-03-11T12:48:37Z","snapshot_observed_at":"2026-08-16T15:28:17.279390Z","submitted_at":"2023-05-30T15:06:02Z","title":"Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustness","version":2},"cited_work":{"arxiv_id":"2305.19101","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.19101","snapshot_observed_at":"2026-08-05T16:56:14.537201Z","title":"Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustness","venue":"cs.LG","work_id":"5b414a25-0b2c-4374-bf15-521df7dac462","year":2023},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.190783Z"},"links":{"cited_paper":"/paper/2305.19101","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:c36304b2b306f454d2de377cfe30832d415e8b5c9583d39c534ad5dc5583dd47","observation_id":"0437336b-46b0-4ab7-92ae-44a8c3a135b7","resolution":{"observed_at":"2026-08-05T16:56:14.651892Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-05T16:56:11.394170Z","title":"Intriguing properties of neural networks, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.394170Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:d7ea89a96072157169bde8d3e6397259ba07fd811ebb16b659e54911e3a96426","observation_id":"7d55bcb9-87e8-4f14-a26d-896d24bec710","resolution":{"observed_at":"2026-08-05T16:56:11.394170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:11.458028Z","title":"A high dimensional statistical model for adversarial training: Geometry and trade-offs, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.458028Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:62b9914b140bd2654852c70f55ab76986f66a39e8ccd6580883c21879b507d56","observation_id":"6a4799a9-4f35-4263-a535-dd0b5bbdce52","resolution":{"observed_at":"2026-08-05T16:56:11.458028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:56:11.542961Z","title":"Daniel Freeman, Theodore R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.542961Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:677dd3191255014db420a24830c72707faa852a03a6763dc46be1ac192ba68ab","observation_id":"70d771ee-da9a-45d3-ad75-47c728a8b011","resolution":{"observed_at":"2026-08-05T16:56:11.542961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1805.12152","last_updated":"2019-09-09T08:09:25Z","snapshot_observed_at":"2026-08-16T03:57:44.683156Z","submitted_at":"2018-05-30T18:00:32Z","title":"Robustness May Be at Odds with Accuracy","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.12152","snapshot_observed_at":"2026-08-05T16:56:11.745058Z","title":"Robustness may be at odds with accuracy, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.745058Z"},"links":{"cited_paper":"/paper/1805.12152","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:b094e74a2e043670d0ad7f3946550daa3aa0d35e78688cdd151d87af7b82c470","observation_id":"0e7010dd-8347-47db-9335-f0b3aa1d652d","resolution":{"observed_at":"2026-08-05T16:56:11.745058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.06624","last_updated":"2021-10-31T22:51:18Z","snapshot_observed_at":"2026-08-16T18:39:38.974852Z","submitted_at":"2021-03-11T11:56:54Z","title":"Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.06624","snapshot_observed_at":"2026-08-05T16:56:11.805323Z","title":"Zico Kolter","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.805323Z"},"links":{"cited_paper":"/paper/2103.06624","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:5d126f2c41ff97d1d3dad75ddd93b474a699862fc457f4b4a4b91247dc2b1791","observation_id":"cf67916c-72ba-4f89-847c-4e87ed84836f","resolution":{"observed_at":"2026-08-05T16:56:11.805323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.09707","last_updated":"2018-02-27T03:46:38Z","snapshot_observed_at":"2026-08-14T19:41:49.037575Z","submitted_at":"2018-02-27T03:46:38Z","title":"Understanding and Enhancing the Transferability of Adversarial Examples","version":1},"cited_work":{"arxiv_id":"1802.09707","doi":null,"metadata_source":"pith","pith_arxiv_id":"1802.09707","snapshot_observed_at":"2026-08-05T16:56:14.167076Z","title":"Understanding and Enhancing the Transferability of Adversarial Examples","venue":"stat.ML","work_id":"23c5b1d2-5b68-4e9f-9944-42fa23ee8ddf","year":2018},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:11.982640Z"},"links":{"cited_paper":"/paper/1802.09707","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:8b219d2844052ff4579b69558385876f9d382f18d3bcd0a98d24e25429369a52","observation_id":"85996b4e-c02a-4b74-a7df-89ad10c763b8","resolution":{"observed_at":"2026-08-05T16:56:14.289035Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.00430","last_updated":"2022-10-02T05:40:47Z","snapshot_observed_at":"2026-08-16T16:27:33.440151Z","submitted_at":"2022-10-02T05:40:47Z","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2210.00430","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.00430","snapshot_observed_at":"2026-08-05T16:56:13.965239Z","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","venue":"cs.LG","work_id":"259b7e5b-46f8-4510-b441-c0fe252b3fe6","year":2022},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:12.089882Z"},"links":{"cited_paper":"/paper/2210.00430","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:19a0fdddc9223344ba8bc765880db977e367015e4359a25997cd670df711371a","observation_id":"765bc59a-9187-4bda-b67f-45bea783dc04","resolution":{"observed_at":"2026-08-05T16:56:14.049138Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1901.09413","last_updated":"2019-01-27T18:12:03Z","snapshot_observed_at":"2026-08-14T17:25:18.114818Z","submitted_at":"2019-01-27T18:12:03Z","title":"An Information-Theoretic Explanation for the Adversarial Fragility of AI Classifiers","version":1},"cited_work":{"arxiv_id":"1901.09413","doi":null,"metadata_source":"pith","pith_arxiv_id":"1901.09413","snapshot_observed_at":"2026-08-05T16:56:13.742449Z","title":"An Information-Theoretic Explanation for the Adversarial Fragility of AI Classifiers","venue":"cs.IT","work_id":"d4c996cf-4492-4b24-88da-83711f03bafb","year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:12.199393Z"},"links":{"cited_paper":"/paper/1901.09413","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:ea3e4a87db9999839dbe33f2c3280d7d79fcd5e12ddc3d58df14a346bb631fab","observation_id":"8de7b180-14d1-4af3-a4f0-c882317186fb","resolution":{"observed_at":"2026-08-05T16:56:13.845483Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1609/aaai.v35i4.16424","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"Adversarial robustness through disentangled representations","venue":"Proceedings of the AAAI Conference on Artificial Intelligence","work_id":"03456240-a0b7-4892-b934-21a43153e68a","year":2021},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:12.360737Z"},"links":{"citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:b91ef64ad5cc35351beeea9e5965601145c63961879e9f2dfcf15070b2250ce3","observation_id":"03102df4-9a61-4df2-8d55-bfd18913ffec","resolution":{"observed_at":"2026-08-05T16:56:13.074818Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1903.12561","last_updated":"2021-06-22T15:16:04Z","snapshot_observed_at":"2026-08-14T16:54:41.592528Z","submitted_at":"2019-03-29T15:06:41Z","title":"Adversarial Robustness vs Model Compression, or Both?","version":5},"cited_work":{"arxiv_id":"1903.12561","doi":null,"metadata_source":"pith","pith_arxiv_id":"1903.12561","snapshot_observed_at":"2026-08-05T16:56:13.473994Z","title":"Adversarial Robustness vs Model Compression, or Both?","venue":"cs.CV","work_id":"24ee015d-ac45-47d9-b6dc-b4767cfffb6c","year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:12.473628Z"},"links":{"cited_paper":"/paper/1903.12561","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:e1808fedf12c237b698a937a3b2e1bbe21bb897af1dc2095f7cc19e9b0069fed","observation_id":"99db1ee9-ba91-4c17-90c0-bda175cd3b98","resolution":{"observed_at":"2026-08-05T16:56:13.605861Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.14042","last_updated":"2020-07-28T07:45:25Z","snapshot_observed_at":"2026-08-08T14:51:08.148870Z","submitted_at":"2020-07-28T07:45:25Z","title":"Derivation of Information-Theoretically Optimal Adversarial Attacks with Applications to Robust Machine Learning","version":1},"cited_work":{"arxiv_id":"2007.14042","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.14042","snapshot_observed_at":"2026-08-05T16:56:13.254433Z","title":"Derivation of Information-Theoretically Optimal Adversarial Attacks with Applications to Robust Machine Learning","venue":"cs.LG","work_id":"14cc601a-3501-45ce-876e-938446f24585","year":2020},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:12.591720Z"},"links":{"cited_paper":"/paper/2007.14042","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:5ac30a4e803d989116d3f19dc34b2ebb5eaec3ed3af10caae50ab30ce3647ea8","observation_id":"8fe7d1b4-58d7-478e-a0a1-eb972bc06266","resolution":{"observed_at":"2026-08-05T16:56:13.335544Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1901.08573","last_updated":"2019-06-24T07:04:11Z","snapshot_observed_at":"2026-08-17T21:30:42.776614Z","submitted_at":"2019-01-24T18:43:57Z","title":"Theoretically Principled Trade-off between Robustness and Accuracy","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1901.08573","snapshot_observed_at":"2026-08-05T16:56:12.772410Z","title":"Xing, Laurent El Ghaoui, and Michael I","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:12.772410Z"},"links":{"cited_paper":"/paper/1901.08573","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:3b51f4f9b5bfc9a1b359012e2b58cfc7a784c8b7994a509ceff4e6fcfd5eb34c","observation_id":"03e9077a-4d79-4759-8908-337a8db934dc","resolution":{"observed_at":"2026-08-05T16:56:12.772410Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.00866","last_updated":"2018-11-02T14:03:25Z","snapshot_observed_at":"2026-08-19T11:14:47.905269Z","submitted_at":"2018-11-02T14:03:25Z","title":"Efficient Neural Network Robustness Certification with General Activation Functions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.00866","snapshot_observed_at":"2026-08-05T16:56:12.871181Z","title":"Efficient neural network robustness certification with general activation functions, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:12.871181Z"},"links":{"cited_paper":"/paper/1811.00866","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:36cd123973b1316d912ba480bcea97931cb8d07734577ae5f3d58997382d983e","observation_id":"dda59ec9-e02a-4aee-919b-25ed01ffb630","resolution":{"observed_at":"2026-08-05T16:56:12.871181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition"},"reference_resolution":{"displayed":52,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":34,"verified_exact":13,"verified_fuzzy":3},"total_outbound_references":52},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 52 of 52 outbound references and 2 inbound Pith citation observations for arXiv:2508.17456."}