{"as_of":"2026-08-17T09:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0ed3e6e9a903cd643abd5132f45aed1bdceec7e5a2f07efd3f8c055a94f59c10","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:35:03.671430Z","state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.03341/citation-record","integrity":"/paper/2509.03341/integrity","json":"/paper/2509.03341/citation-record.json","paper":"/paper/2509.03341"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.564828Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.564828Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:d616390174c6c955dbb48d9ce4dcd04811645b0cdc6110a5f132784c470ee9a3","observation_id":"57032549-3058-41e3-8394-a9e87e6f7d25","resolution":{"observed_at":"2026-08-15T16:35:03.564828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.569199Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.569199Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:cb44211af7dcad328632e15d0550fda2cfbb305561a01c659404053570ade41a","observation_id":"3a0bf04c-b93e-4df0-bba0-380e9cba953d","resolution":{"observed_at":"2026-08-15T16:35:03.569199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.573605Z","title":"B.; Mironov, I.; Talwar, K.; and Zhang, L","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.573605Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:8675ea3196518ca08a7e142896ce589deea82a4f6b5432d3e2cc665d19245771","observation_id":"3f8caec6-ac0c-4437-bfc2-bcbb285bced3","resolution":{"observed_at":"2026-08-15T16:35:03.573605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.02936","last_updated":"2023-10-05T04:47:52Z","snapshot_observed_at":"2026-08-16T15:57:20.911232Z","submitted_at":"2023-02-06T17:11:09Z","title":"Private GANs, Revisited","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.02936","snapshot_observed_at":"2026-08-15T16:35:03.577815Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.577815Z"},"links":{"cited_paper":"/paper/2302.02936","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:8dead5cdf6ae0c6a3fc493573f3b6b12a25aee82ef701745af5cd0654b5eaa2b","observation_id":"e17d2b3c-9d28-4eaa-9e69-0dd92e770c06","resolution":{"observed_at":"2026-08-15T16:35:03.577815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.956550Z","title":null,"venue":null,"work_id":"d507bb72-0748-413e-ad34-19b07c231ea6","year":2002},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.581980Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:417a64b45c1d7b2f0c0073a9177ae8dabe15e8d1f5512e63bbf3902d9bdab1a7","observation_id":"d434ddce-4160-44a7-a3c9-847e7d47e454","resolution":{"observed_at":"2026-08-15T16:35:03.960364Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.586052Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.586052Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:100c7614aee1e037cc1a34f5cca4aa9d8034582adcce8a712ddaf36560e38702","observation_id":"1e7f10da-8757-4bfd-944b-f552ccf70300","resolution":{"observed_at":"2026-08-15T16:35:03.586052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.13188","last_updated":"2023-01-30T18:53:09Z","snapshot_observed_at":"2026-08-16T15:59:03.518014Z","submitted_at":"2023-01-30T18:53:09Z","title":"Extracting Training Data from Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.13188","snapshot_observed_at":"2026-08-15T16:35:03.590078Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.590078Z"},"links":{"cited_paper":"/paper/2301.13188","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:9819d689e1b09889e0fa611f87c1449b394e31b2dc9c8d0f32c347dcedd1549b","observation_id":"af11cc2c-8293-4e03-8836-f1fac746d91b","resolution":{"observed_at":"2026-08-15T16:35:03.590078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.935698Z","title":null,"venue":null,"work_id":"2d42ae07-1bcb-4bb4-a5ce-0a5dcf125a72","year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.594218Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:060954e873d23e052b4d6047cb7b2e98d7a05448252b7c49d4271e0c66010e4a","observation_id":"2ca20146-ba94-4d26-9e59-660a56552c90","resolution":{"observed_at":"2026-08-15T16:35:03.939673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.923582Z","title":null,"venue":null,"work_id":"4dc82bfb-f2c0-4a53-b9b4-2571532f59b0","year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.598224Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:6c70f9f737e615bf287a3542298cb9cc15ca1d9a5f1fa88004eed99e8cb0cd46","observation_id":"d7ceffcb-f9bc-4721-b08e-b6901509cdc3","resolution":{"observed_at":"2026-08-15T16:35:03.927712Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.912049Z","title":null,"venue":null,"work_id":"0e63e0f1-efd0-4c66-a71a-1b1ee1fcf606","year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.601916Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:c30b614d590658c9eb6dfec5d8b2b5a36e61dc1c9250678e232ef40713f30b8e","observation_id":"af8b1502-90b7-4b45-94e1-a2c11e2c1685","resolution":{"observed_at":"2026-08-15T16:35:03.915879Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.900851Z","title":null,"venue":null,"work_id":"aec3a8b3-0a9c-4ce9-b433-0bf4f472daa8","year":2011},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.605555Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:ce98c40e66e859d5f2c78412c28ca608bcb78e0ee503528646d3dbc425031dfe","observation_id":"a0e5b2d5-79cc-435b-a89b-760db2f9b87a","resolution":{"observed_at":"2026-08-15T16:35:03.904535Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.889035Z","title":null,"venue":null,"work_id":"f8b98ed9-10de-4b97-a510-d48c89b0b007","year":2006},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.609289Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:65865dfccb350faa2500fcd1c4a07b7ac17bb0550ce2b1bb7f136fc40c7902ca","observation_id":"e967d961-8806-4b11-8731-08d86b1716bd","resolution":{"observed_at":"2026-08-15T16:35:03.893176Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.877598Z","title":null,"venue":null,"work_id":"2fb62fe2-042f-4ee7-939b-aa3ddf28907b","year":2014},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.612769Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:246d0402f6842573cf0a28119a3a7e10f2641a7a3bb88862adeba98bc4a7dc01","observation_id":"2854b922-e776-4a69-9a64-ecb6527cb064","resolution":{"observed_at":"2026-08-15T16:35:03.881155Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13861","last_updated":"2023-02-27T15:02:04Z","snapshot_observed_at":"2026-08-16T15:52:24.331573Z","submitted_at":"2023-02-27T15:02:04Z","title":"Differentially Private Diffusion Models Generate Useful Synthetic Images","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13861","snapshot_observed_at":"2026-08-15T16:35:03.616287Z","title":"L.; Wiles, O.; and Balle, B","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.616287Z"},"links":{"cited_paper":"/paper/2302.13861","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:fedaf152ee0d0e975dc5c8812fb6a11a76a6288e5df9cb705e32acc4d94f6db9","observation_id":"2ce6dd73-fee1-4e96-a348-bdd92117a5a9","resolution":{"observed_at":"2026-08-15T16:35:03.616287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1406.2661","last_updated":"2014-06-10T18:58:17Z","snapshot_observed_at":"2026-08-16T11:06:16.881602Z","submitted_at":"2014-06-10T18:58:17Z","title":"Generative Adversarial Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1406.2661","snapshot_observed_at":"2026-08-15T16:35:03.620298Z","title":"J.; Pouget-Abadie, J.; Mirza, M.; Xu, B.; Warde-Farley, D.; Ozair, S.; Courville, A.; and Bengio, Y","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.620298Z"},"links":{"cited_paper":"/paper/1406.2661","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:def31622e89d7b5e6c01988c86b08b3ff04021d16350eb907da5705edaa726b4","observation_id":"b6007e00-5196-4f36-ad6a-fc0f5c9f41ed","resolution":{"observed_at":"2026-08-15T16:35:03.620298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1509.01240","last_updated":"2016-02-07T17:06:58Z","snapshot_observed_at":"2026-08-14T22:33:52.090275Z","submitted_at":"2015-09-03T19:53:40Z","title":"Train faster, generalize better: Stability of stochastic gradient descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1509.01240","snapshot_observed_at":"2026-08-15T16:35:03.624093Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.624093Z"},"links":{"cited_paper":"/paper/1509.01240","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:78257532fe9791b2eab84ad326a00549f5f920af7a1e71c341b98b46e51c578c","observation_id":"17e236c0-0b17-4ed2-8354-fe0d3908001d","resolution":{"observed_at":"2026-08-15T16:35:03.624093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.08500","last_updated":"2018-01-12T14:05:44Z","snapshot_observed_at":"2026-08-14T20:51:33.836666Z","submitted_at":"2017-06-26T17:45:23Z","title":"GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.08500","snapshot_observed_at":"2026-08-15T16:35:03.627962Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.627962Z"},"links":{"cited_paper":"/paper/1706.08500","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:711431b76ce885f07553e01e927d156021906993a65eb9ae0e83614bdf8859b8","observation_id":"f007c484-c87e-411f-957f-01fad27dab06","resolution":{"observed_at":"2026-08-15T16:35:03.627962Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.11239","last_updated":"2020-12-16T21:15:05Z","snapshot_observed_at":"2026-08-10T05:21:27.485481Z","submitted_at":"2020-06-19T17:24:44Z","title":"Denoising Diffusion Probabilistic Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.11239","snapshot_observed_at":"2026-08-15T16:35:03.631975Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.631975Z"},"links":{"cited_paper":"/paper/2006.11239","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:c937de01cc83c84589e84b39cdb5777a1ea6e10b076dabd81119ab569aded393","observation_id":"8d5a529a-9807-4479-8b5b-163ccb746660","resolution":{"observed_at":"2026-08-15T16:35:03.631975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.00364","last_updated":"2022-10-11T13:20:30Z","snapshot_observed_at":"2026-07-06T13:16:16.926712Z","submitted_at":"2022-06-01T10:03:24Z","title":"Elucidating the Design Space of Diffusion-Based Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.00364","snapshot_observed_at":"2026-08-15T16:35:03.635964Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.635964Z"},"links":{"cited_paper":"/paper/2206.00364","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:321aab55173a47096dd34c2785386abb4c3f2cb057b24b5ea1eaf6aeed39573a","observation_id":"7c11e36a-8c93-404a-95bd-0f1b9d118ccf","resolution":{"observed_at":"2026-08-15T16:35:03.635964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.640918Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.640918Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:5bc24130a0a543d1cf66bc279b10de404d745b6c6f8d4966b87e62f0a9c1de98","observation_id":"4ea70845-4730-4d7c-80ff-284d9c39df8f","resolution":{"observed_at":"2026-08-15T16:35:03.640918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.859572Z","title":null,"venue":null,"work_id":"81323918-6597-4ce0-9bf3-13453eac2095","year":2021},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.644738Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:b676bfee367105db1b43e408f6889dc60aa2cd4f4552fb76452f3e66ea6fc940","observation_id":"a9b99062-7d98-4ed6-a42c-7cf8e0047d31","resolution":{"observed_at":"2026-08-15T16:35:03.863559Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.846542Z","title":null,"venue":null,"work_id":"9d78eea1-b4a0-4711-b4cb-f0f24272d50b","year":2019},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.648493Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:dd1206167edd2c3bc7c2ef6d8dda3cd0a4f8f542d8ec75e334c28ad8e06f5c9b","observation_id":"3c263ea8-a928-43c0-92ff-dcfeb8a5a940","resolution":{"observed_at":"2026-08-15T16:35:03.851471Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:35:03.652136Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.652136Z"},"links":{"citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:6746a461a4231511c31204c1e358900767d6e76b995df78802b2bf67a56c4c22","observation_id":"c54489bb-94d4-4ba3-a13e-4ba1f40683ac","resolution":{"observed_at":"2026-08-15T16:35:03.652136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1907.05600","last_updated":"2020-10-10T07:46:19Z","snapshot_observed_at":"2026-08-01T16:44:46.833530Z","submitted_at":"2019-07-12T07:37:26Z","title":"Generative Modeling by Estimating Gradients of the Data Distribution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.05600","snapshot_observed_at":"2026-08-15T16:35:03.655584Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.655584Z"},"links":{"cited_paper":"/paper/1907.05600","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:8995e7129bbce71d78cc81867084103e4723cd66bfd92a4f125b711c4c419b91","observation_id":"0f8ce13f-1995-414a-8274-4fc94afc5810","resolution":{"observed_at":"2026-08-15T16:35:03.655584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-08-15T16:35:03.659258Z","title":"P.; Kumar, A.; Ermon, S.; and Poole, B","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.659258Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:272e73dfb128ed905f92901f7a09262e9a427affb527ce51c44633a43439c889","observation_id":"2f809d73-8fdb-4d81-ac3c-441717705cef","resolution":{"observed_at":"2026-08-15T16:35:03.659258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06739","last_updated":"2018-02-19T18:05:33Z","snapshot_observed_at":"2026-08-14T19:44:27.939621Z","submitted_at":"2018-02-19T18:05:33Z","title":"Differentially Private Generative Adversarial Network","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.06739","snapshot_observed_at":"2026-08-15T16:35:03.663029Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.663029Z"},"links":{"cited_paper":"/paper/1802.06739","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:d901c9dedca30690f9eab4c7e5d606b507951e9ec02ab6bbfc995e6851a9fe3c","observation_id":"43ae8c77-b9cc-4262-9368-06b0dba68112","resolution":{"observed_at":"2026-08-15T16:35:03.663029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1709.01604","last_updated":"2018-05-04T22:43:43Z","snapshot_observed_at":"2026-08-15T02:51:03.472866Z","submitted_at":"2017-09-05T21:56:24Z","title":"Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1709.01604","snapshot_observed_at":"2026-08-15T16:35:03.666736Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.666736Z"},"links":{"cited_paper":"/paper/1709.01604","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:3dfc1928bbb013cbb7c7f5bd530e221ef6f2eb1044dbbabec923cba337daa9cf","observation_id":"47093cd7-9c59-42c3-a678-a92c9a3ef823","resolution":{"observed_at":"2026-08-15T16:35:03.666736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2109.12298","last_updated":"2022-08-22T20:24:50Z","snapshot_observed_at":"2026-08-16T17:54:08.474823Z","submitted_at":"2021-09-25T07:10:54Z","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.12298","snapshot_observed_at":"2026-08-15T16:35:03.671430Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T16:35:03.671430Z"},"links":{"cited_paper":"/paper/2109.12298","citing_paper":"/paper/2509.03341"},"observation_digest":"sha256:30faa1b757b5cb6fb5dca8998d52d3228940b03b3618b19e5509b9b58377c6b5","observation_id":"04c0a7ec-340d-40c9-8205-668454718ef8","resolution":{"observed_at":"2026-08-15T16:35:03.671430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.03341","last_updated":"2025-09-03T14:18:22Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-17T09:13:37.594166Z","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":28,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2509.03341."}