{"as_of":"2026-08-06T14:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:aaab12c8974021c7d1978897adcf5ca212191ec02afae729fcfbc535424bb2ac","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-17T20:23:32.321605Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T07:47:37.572696Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.17362","snapshot_observed_at":"2026-08-03T07:47:37.572696Z","title":"and Balogh, A","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T10:55:43.665525Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.572696Z"},"links":{"cited_paper":"/paper/2511.17362","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:c0b2543ac0d71478fb55809e10562bfdfc4f03b58e466e9b8a055d42127f2a57","observation_id":"bf1b213c-57f8-43b4-912b-151de05a8023","resolution":{"observed_at":"2026-08-03T07:47:37.572696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2511.17362/citation-record","integrity":"/paper/2511.17362/integrity","json":"/paper/2511.17362/citation-record.json","paper":"/paper/2511.17362"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Align your prompts: Test-time prompting with distribution align- ment for zero-shot generalization.Advances in Neural Infor- mation Processing Systems, 36:80396–80413","venue":null,"work_id":"a715acf8-a980-4a85-a839-04352e0c682f","year":2023},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:b4dbf3a075cc5dd9580c5747e9ddd81dc00aa18666ac93f0410551011c002be3","observation_id":"add1f076-d3ec-462e-9647-b569c75a8d97","resolution":{"observed_at":"2026-05-17T20:25:11.915569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Square attack: a query-efficient black-box adversarial attack via random search","venue":null,"work_id":"293a057b-5878-4010-8f2d-6dd3a9fb9268","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:553e085e8fa9c582fec8253f26a27b2385d34138fec1f8be8f117434cf79aa7b","observation_id":"5cbdaee2-36a2-4bdd-b715-ad102a08f041","resolution":{"observed_at":"2026-05-17T20:25:11.902141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Synthesizing robust adversarial examples","venue":null,"work_id":"5fdcee3c-1124-4b4d-bca9-4a68a8c38769","year":2018},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:9bbd9529893ca474449d572d3369edc3ce8fe0a0ad4b0d9933487b454febc00c","observation_id":"08273899-9ac3-47be-97d9-816c2202cdaf","resolution":{"observed_at":"2026-05-17T20:25:11.918125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Food-101 - mining discriminative components with random forests","venue":null,"work_id":"23a7f540-d434-4f3b-b584-a388a40c316f","year":2014},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:959002a822430d448b2738a6e3c60f25398307b03df28a065fbd0f6f42af64ed","observation_id":"81a725cb-7318-4e59-b260-7f46a4f003dd","resolution":{"observed_at":"2026-05-17T20:25:11.912850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"fdded905-f992-4e13-90da-8701a9db4fa4","year":2017},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:6ef35f43830037575a1c66af02cd4d1b502969390e52c080b79586184fd9883d","observation_id":"649613e0-1713-4169-b290-5f6d28c184b4","resolution":{"observed_at":"2026-05-17T20:25:11.896667Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On evaluating ad- versarial robustness","venue":null,"work_id":"881a3851-b7d1-4b2c-bd87-2df84be41ab7","year":2019},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:3e78fab07dd22e9aecd148dd49de6324565e6eb6ff163a63b75966fc351c5a52","observation_id":"25b3ecda-b050-4929-b0d2-34da9d4d7d28","resolution":{"observed_at":"2026-05-17T20:25:11.899302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Describing textures in the wild.2014 IEEE Conference on Computer Vision and Pattern Recognition, pages 3606–3613","venue":null,"work_id":"61b4fcbb-1334-4ec2-9e0f-323b3df81221","year":2014},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:6523049270d3edeb11208b6af1a80b5b6d0dfdfbc6f9fa3267a7a9f000c49c19","observation_id":"9ff815f1-5883-48e8-9b16-eedf1835af5b","resolution":{"observed_at":"2026-05-17T20:25:11.907451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ng, and Honglak Lee","venue":null,"work_id":"dc59d9c4-d62b-426f-a3d8-09a30e9baff7","year":2011},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:d501f57658378155b874585048d940b9549986419a01283784a4c85f6b231287","observation_id":"6884252f-a2bb-4377-9a25-4bc72b2efa1c","resolution":{"observed_at":"2026-05-17T20:25:11.904601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"8d4c8c0e-3594-430b-92ca-67eba804efac","year":2019},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:b33f46a1f6f0ab84cd794d236b755f5753ec991ecdd8b22e2c21f512f7478599","observation_id":"9b566442-dde4-40da-a29a-3c2a23e760d3","resolution":{"observed_at":"2026-05-17T20:25:11.823855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter- free attacks","venue":null,"work_id":"a7cbab11-f56c-4a41-b6a3-a990206814a1","year":2020},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:b9fb667eb7a0ca3c9d47d8fba38c7dfe37cb5bf14956d1c7b22601ba7f522514","observation_id":"3bd75b73-1d22-4bd1-84ae-070164da0c08","resolution":{"observed_at":"2026-05-17T20:25:11.848831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Em- bedding shift dissection on clip: Effects of augmentations on vlm’s representation learning","venue":null,"work_id":"2d8eaeac-a8c3-49d3-a773-d8127928e960","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:b05ae459da267804b54c9b58de832f87ef1adcbdf77d8bf4afe51ced100e2303","observation_id":"3794d04f-15d4-4001-a15e-39419c27aec3","resolution":{"observed_at":"2026-05-17T20:25:11.784186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fpt- noise: Dynamic scene-aware counterattack for test-time ad- versarial defense in vision-language models","venue":null,"work_id":"f44d8bfd-6e2a-40be-8c55-354247595335","year":2025},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:f08fde36ebdd92812dcb4ba0e710f3e6a2d5a25cd732661829d6ecd985a968c6","observation_id":"21bacc3e-cefe-4edb-9d80-0ea9c9896b86","resolution":{"observed_at":"2026-05-17T20:25:11.794001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"One-shot learning of object categories.IEEE Transactions on Pattern Analysis and Machine Intelligence, 28:594–611","venue":null,"work_id":"cf0d8a3d-ca83-4066-920d-dd422a939763","year":2006},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:e67f4e4fe0e97be60423a22949feecbfd7382f08e56848af9dcd954f92b9c727","observation_id":"7637d58a-3b96-484f-8212-87d193cef673","resolution":{"observed_at":"2026-05-17T20:25:11.864840Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diverse data augmentation with diffusions for effective test-time prompt tuning","venue":null,"work_id":"f6ae0d6e-042b-4d98-95b9-50b16ba0ce31","year":2023},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:7837cb87a3005c0a6b2e2e729dcadb01b2b6b730714d5bf635b0de8d34ef2569","observation_id":"6accd086-311f-452d-b230-301764e084d4","resolution":{"observed_at":"2026-05-17T20:25:11.888570Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Clip- adapter: Better vision-language models with feature adapters","venue":null,"work_id":"bd904b4d-f471-44c8-8319-bab979581a92","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:d894bb1adbfe3069699969b28990a1a1343c070f9039d34fdac64eb08989183c","observation_id":"7b78dfa1-20ad-4887-b167-44570570edd4","resolution":{"observed_at":"2026-05-17T20:25:11.789326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"498877cc-7121-45c1-b8f7-149c4e609273","year":2015},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:37040b487e6e62a17357cae8cd68c92f2a41e69918419271eb81515f9afcdfe4","observation_id":"68800268-b7a5-4500-909c-69fe9650e7d0","resolution":{"observed_at":"2026-05-17T20:25:11.812687Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Caltech-256 object category dataset","venue":null,"work_id":"a2b6b9e3-3191-4b56-a5d9-e6d445ab09c1","year":2007},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:dd3ca9d6966746637048ebcf6902d362264ee1a540bef3eae77208a98ace21dd","observation_id":"12d51452-ebd0-4758-b863-b0341d8b98a9","resolution":{"observed_at":"2026-05-17T20:25:11.791727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Countering adversarial images using input transformations","venue":null,"work_id":"e31eeac2-e6ba-4367-a898-8c968930ded1","year":2018},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:13094946b4dc3f9abe48589eeb0ad581a2569238324714ac87ef8bfa1d5c1381","observation_id":"2318351d-467e-44c3-a3f8-c5d7855be626","resolution":{"observed_at":"2026-05-17T20:25:11.801772Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dengel, and Damian Borth","venue":null,"work_id":"4db5583c-6076-420a-aae7-2e0a5e0eb1c0","year":2017},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:aaebea260f64735498b00612d9ec62480da0b45fe37b5df28d4b98bf02943881","observation_id":"c6c9aa23-03eb-4c74-a79b-63f97c7f2fe0","resolution":{"observed_at":"2026-05-17T20:25:11.846030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial examples are not bugs, they are features.Advances in neural information processing systems, 32","venue":null,"work_id":"89a14a33-537e-453d-b991-d894394851d2","year":2019},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:77aaa1f38ee1aa48443d7d03669a42075dbf2ed4c49c73cc2651f95853307424","observation_id":"b6cb731f-cbbc-4ffa-ba30-534e2ffdac76","resolution":{"observed_at":"2026-05-17T20:25:11.781409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"3d object representations for fine-grained categorization.2013 IEEE International Conference on Computer Vision Work- shops, pages 554–561","venue":null,"work_id":"3daae93b-2f56-4d9c-9fc2-dac831b79cc7","year":2013},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:8af3ae7a2514e973230b4cd931b81b747772a41f95a48e9c82eec98b08c732d0","observation_id":"793593f8-2f09-4649-b405-3bc332a3b130","resolution":{"observed_at":"2026-05-17T20:25:11.893969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"4f507349-0242-4951-abde-bbe3eafe681f","year":2009},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:22717a648b2bd861d3b5da190a6c445a939aa48996c2bdd6b0674d41e878a9b2","observation_id":"7d62cc90-cb72-460d-8170-3d9d9e2fe341","resolution":{"observed_at":"2026-05-17T20:25:11.796825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Tiny imagenet visual recognition challenge.CS 231N, 7(7):3","venue":null,"work_id":"37e76488-94c6-4d11-aaaa-b72353a92df5","year":2015},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:a946ee142d56e32877bed2efc0fbedc694055553079f0cd9c481a77854e6f89d","observation_id":"b98ebf29-1c71-43bf-9ca4-68e1a5bcd4c7","resolution":{"observed_at":"2026-05-17T20:25:11.786943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"One prompt word is enough to boost adversarial robustness for pre-trained vision-language models","venue":null,"work_id":"21cd9a27-4703-4b55-88ae-25f9c5162d57","year":2024},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:ebfd33b70bb655fd441bb93b912e2cf580171efb8597a8db3d916a4e1c0eea07","observation_id":"7699b717-7bd5-4947-af95-528286cc320a","resolution":{"observed_at":"2026-05-17T20:25:11.859308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defense against adversarial at- tacks using high-level representation guided denoiser","venue":null,"work_id":"90a661ab-def7-4965-b64a-f54a01493198","year":2018},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:3d73500adc5b1c107ea988c7b544d562ca7911ee51b3601ba6a4de14c744b593","observation_id":"97f81465-7813-43a1-abcd-44632c80fa33","resolution":{"observed_at":"2026-05-17T20:25:11.807330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Delving into the pixels of adversarial sam- ples","venue":null,"work_id":"c54b62bf-03ad-4613-b581-07e3d1f7661f","year":2021},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:d477130ead179c4e48d82b3618c3fb09eefd9f79adc2537ce69dfe30ce463647","observation_id":"817835e5-ade5-4112-8933-a9b20b52c71e","resolution":{"observed_at":"2026-05-17T20:25:11.910463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.22785","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T22:44:01.407912Z","title":"Self-calibrated consistency can fight back for adversarial robustness in vision-language models","venue":null,"work_id":"63c9e0e8-76ce-484e-b4c6-90ab7a82cf78","year":2025},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:aeb22ed6ef1da5d7e8bbba109dbc164ec15022de69289f5fc88bca989e9f72d3","observation_id":"13dee77f-1500-4181-9d27-9742012d9ca2","resolution":{"observed_at":"2026-05-17T20:25:11.255907Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safety at scale: A comprehensive survey of large model and agent safety.Foundations and Trends® in Privacy and Security, 8(3-4):254–469","venue":null,"work_id":"27c45c9d-2039-4608-8dad-bd7ae2754f81","year":2025},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:d67aa476023ecc5e2675dde7ccc4809df0ab37a84cfb96886947dba065063bc8","observation_id":"0d12289b-1731-4a74-9914-fecc88d0475b","resolution":{"observed_at":"2026-05-17T20:25:11.809914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":"b6c423b3-f1fe-4e9a-a97d-43ca3de26887","year":2018},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:c511db6626e8dceab08cb0796cc0c2ec5a18b5905338faddb9b73d2ffcaab66c","observation_id":"5d12e35a-5786-41d7-920e-2709576eabf2","resolution":{"observed_at":"2026-05-17T20:25:11.879436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"46598dea-932a-45a3-a849-363ace8c37ea","year":2019},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:92849b0f2615ddf534fa3bfb1ff469ae43bef9e359e498338847517283bdbd14","observation_id":"184b546f-a60b-43f6-9bc1-1ba87c5d3b83","resolution":{"observed_at":"2026-05-17T20:25:11.885661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1306.5151","last_updated":"2013-06-21T14:31:57Z","snapshot_observed_at":"2026-07-06T03:16:28.287173Z","submitted_at":"2013-06-21T14:31:57Z","title":"Fine-Grained Visual Classification of Aircraft","version":1},"cited_work":{"arxiv_id":"1306.5151","doi":null,"metadata_source":"pith","pith_arxiv_id":"1306.5151","snapshot_observed_at":"2026-07-11T03:07:53.092922Z","title":"Fine-Grained Visual Classification of Aircraft","venue":"cs.CV","work_id":"ed360110-3ce4-4959-8c74-1785cd9e537d","year":2013},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"cited_paper":"/paper/1306.5151","citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:c62ef5144a670c1ef1ec844a5e0d5e1869f18d647c90efeba2517f93b68e5587","observation_id":"c2654aff-be8b-4ccb-a3da-2a35c26b574f","resolution":{"observed_at":"2026-05-17T20:25:11.259422Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding zero-shot adversarial robust- ness for large-scale models","venue":null,"work_id":"cce8cc77-a20d-4890-8e97-980e4434e148","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:108ebd5e6458ee0dd8b396cb11d6e0a0f892447b15ef7ea77631622186767c76","observation_id":"24778153-7d1d-42da-8bc9-3b23acff4383","resolution":{"observed_at":"2026-05-17T20:25:11.862136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial attacks are reversible with natural supervision","venue":null,"work_id":"95014801-16a2-406d-9541-8aa707ec09dd","year":2021},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:26190199b4456f25d0dab7108bea9674180eb6b43a7496a17c800928a9da0144","observation_id":"115def3e-9dc1-4354-b574-e20da73ede1e","resolution":{"observed_at":"2026-05-17T20:25:11.804604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diffusion models for adversarial purification","venue":null,"work_id":"f2038bdf-6f63-4046-bf5e-ca0bbaac5454","year":2022},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:4344dd2ebc252bd9ac7f08814b97d9793dcdd838d781f2a10a916ccfcbe4d8da","observation_id":"e1919799-c563-469d-bf45-93ec8c24649d","resolution":{"observed_at":"2026-05-17T20:25:11.882860Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Automated flower classification over a large number of classes.2008 Sixth Indian Conference on Computer Vision, Graphics & Image Processing, pages 722–729","venue":null,"work_id":"b1126b2b-d702-44e0-a87a-28b3e925d915","year":2008},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:5fb6ddc8a23c8330c3d25a2000999aac907065d1bb51b9990078095b6b03583a","observation_id":"32180dfe-c554-47f0-a3b0-945b8c68bf44","resolution":{"observed_at":"2026-05-17T20:25:11.815665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Parkhi, Andrea Vedaldi, Andrew Zisserman, and C","venue":null,"work_id":"83eb7b2e-f739-4066-9b32-a002952ac1f4","year":2012},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:c924e35d617f59bbb1adfa500966a9d5a3b593b1e2c7a83f31c1e311c356613d","observation_id":"2921b389-dcae-4f4b-880b-c89da50ee4ac","resolution":{"observed_at":"2026-05-17T20:25:11.831654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Enhancing adversarial robustness via test-time transformation ensembling","venue":null,"work_id":"a30f6e2a-b0e2-41fd-ace0-a2d12bcdd537","year":2021},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:66d9d27459412621af55e799ec654810434c8f8ba93022cf87d36954525efa4f","observation_id":"7d9de371-c8f6-408e-a524-84aba1f18474","resolution":{"observed_at":"2026-05-17T20:25:11.826538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Learning transferable visual models from natural language supervision","venue":null,"work_id":"b5f7e9f6-c527-4544-bff5-19518af8a37e","year":2021},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:d275b504f59c63a8bddab135be68717af72cbdc2589aa23e39bebf4891539448","observation_id":"49eb4840-5db3-4910-baec-388173248c4d","resolution":{"observed_at":"2026-05-17T20:25:11.891406Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust clip: Unsupervised adversar- ial fine-tuning of vision embeddings for robust large vision- language models.ICML","venue":null,"work_id":"427a5684-aa8a-4cc5-956b-edc07a40299f","year":2024},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:ee39c69b9502a288a109f786dcc9e0626f0be9906e430c793cba7f6379cbeea4","observation_id":"d7c60b43-6bdb-437d-99b6-59f6f1821bb6","resolution":{"observed_at":"2026-05-17T20:25:11.834210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"R-tpt: Improving adversarial robustness of vision-language mod- els through test-time prompt tuning","venue":null,"work_id":"19d17020-8b84-4871-9549-d64b8cf06c29","year":2025},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:9dc543eca36d618b35d7ec881e834df57359d24f4b9c31ec196807fdb55978ff","observation_id":"7d7798be-c0a3-4527-b103-bee1bab46f2c","resolution":{"observed_at":"2026-05-17T20:25:11.841585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Test-time prompt tuning for zero-shot generalization in vision-language models.Advances in Neural Information Processing Systems, 35:14274–14289","venue":null,"work_id":"fe90d231-eece-4e72-b4b1-29997e0fba59","year":2022},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:6dccd28635212b5f1809100f50b27fd94a15de8a1dd817414bc2d9bea54145ef","observation_id":"48ab3caa-7b71-4a47-bc7a-2cc4e92b5ea6","resolution":{"observed_at":"2026-05-17T20:25:11.856495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Test-time alignment-enhanced adapter for vision-language models","venue":null,"work_id":"8bdbf03a-1352-4909-95c7-bf93162ccfb2","year":2025},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:9003e8e6ada512d4fea0656e8a1a180f4255b7bd3b2afb78c6cdb022ebd9564b","observation_id":"83ab8333-1587-4aee-b436-eb9b8ccf0078","resolution":{"observed_at":"2026-05-17T20:25:11.876674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On adaptive attacks to adversarial example defenses.Advances in neural information processing systems, 33:1633–1645","venue":null,"work_id":"7c284317-bca3-4b9a-b32e-b5767c29cc20","year":2020},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:e975962e8b48a0d7d58ca789eecfca8f57fb2b80d89e971843738ec4424338a7","observation_id":"4e951113-519e-428b-927a-9a91a1f6610d","resolution":{"observed_at":"2026-05-17T20:25:11.818092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Pre- trained model guided fine-tuning for zero-shot adversarial robustness","venue":null,"work_id":"c7d7f5ef-8132-405b-971a-fbb8ca6734e5","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:f648eaffb687b265363fb4a6d9409bad2e13a724658dc0fa8c9e585faff2e8c0","observation_id":"9eb9bef1-beb0-4d95-98ee-8912f982bfdc","resolution":{"observed_at":"2026-05-17T20:25:11.852138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Tapt: Test-time adversarial prompt tuning for robust inference in vision-language models","venue":null,"work_id":"79bcc760-4e62-4288-bc4b-01d03509867d","year":2025},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:edad44959afed47f1f8456d8c8898f0c40d01cc023ee228d65501845abfb5bc6","observation_id":"dac470d2-9a30-4802-aef4-73ad19bd7171","resolution":{"observed_at":"2026-05-17T20:25:11.829303Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Clip is strong enough to fight back: Test-time counterattacks towards zero- shot adversarial robustness of clip","venue":null,"work_id":"7e502ca5-e142-43bb-9b8d-7ad5e0232fb1","year":2025},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:b827a46ddba194e0c61fcf7e8040798c64f5672b6dc36d9abe55589be9993673","observation_id":"85b92551-4a78-406d-8991-63c1c0e7b31e","resolution":{"observed_at":"2026-05-17T20:25:11.839261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial attacks beyond the image space","venue":null,"work_id":"f90b7103-b25e-426f-ac23-de5e723a542f","year":2019},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:f345357749442df1ba7223a394c111e03a45034f91729700fea1b25c4c254f1e","observation_id":"8ad5ec68-b417-445e-9424-a01f16c8c683","resolution":{"observed_at":"2026-05-17T20:25:11.843897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Clipure: Purification in latent space via clip for adversarially robust zero-shot classification","venue":null,"work_id":"c1905c24-dc72-411f-a5df-d742da137e23","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:f6ddc22a534b220c7938b1f672b729af0aa38fe4cd8569a2a2412bbda5eff56f","observation_id":"2652c6d0-10d8-4e4b-8721-5c04feb5c08e","resolution":{"observed_at":"2026-05-17T20:25:11.871225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Learning to prompt for vision-language models.Inter- national Journal of Computer Vision, 130:2337 – 2348","venue":null,"work_id":"7874ea65-6f77-41da-a233-0a404bbf7ec2","year":2021},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:94579d2b24bdc12396f5eb3f89a6ea2684a6dbfb132134d3b20ed4652c0437b1","observation_id":"8d5bb4c4-bfa6-4931-abcc-2f10b9956350","resolution":{"observed_at":"2026-05-17T20:25:11.873919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revisiting the adversarial robustness of vision language mod- els: a multimodal perspective.CoRR","venue":null,"work_id":"93224e83-f411-4a85-8bde-b04658741b95","year":2024},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:5659cd0c0d71266a12de2d76a6aaff3248d5972b9b429d72f292d6b585342d38","observation_id":"8d85edd7-b0ea-4876-9d3f-be6b90d2be12","resolution":{"observed_at":"2026-05-17T20:25:11.820739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"9491b70b-dbb9-4d8b-ba7d-e335a310d5f2","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:7f6a1b92f5a244835c92a856d52708a73f0cd2ce4c711045ecfe67e0ae506486","observation_id":"65f33a6c-79a1-4744-97c5-36362ad7588d","resolution":{"observed_at":"2026-05-17T20:25:11.868364Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"4.2 we argue that the augmentation-induced latent drift vectors are scattered for clean samples and consistent for adversarial inputs","venue":null,"work_id":"95ba8eab-cc9b-4ad5-836f-36378e25ed0f","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:cf69f928a0b929c52a2ed5e0659eab365e3497e19fae429da27ff78b0a54a76a","observation_id":"3da0cc44-67b8-441a-8eb4-2d351d2e057a","resolution":{"observed_at":"2026-05-17T20:25:11.836826Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"5.3, we find that the effect of α is minimal while τ ∗ is crucial","venue":null,"work_id":"24d5e942-efd6-498a-bbb5-ad5d627ff551","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:c3adffefd9298c47cf6a11b59bbaa7769e5f6731e9f87d018b677f4a721e7069","observation_id":"90832453-5e39-4906-9c06-5174c1904ebe","resolution":{"observed_at":"2026-05-17T20:25:11.799250Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2390.5990","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"nearly hard","venue":null,"work_id":"369bd7ba-4836-4f0d-b9ab-cb582cf775c2","year":null},"citing_paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-17T20:23:32.321605Z"},"links":{"citing_paper":"/paper/2511.17362"},"observation_digest":"sha256:8533bb197139381c35b53fe0efe968065c2718e7e9f62ff0855784af4f8ba673","observation_id":"0fa35f68-7d61-4f71-b4bc-86237b7c2b81","resolution":{"observed_at":"2026-05-17T20:25:11.252735Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2511.17362","last_updated":"2026-04-05T13:47:04Z","latest_version":3,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-03T10:31:58.611307Z","submitted_at":"2025-11-21T16:30:06Z","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":1,"verified_exact":1,"verified_fuzzy":50},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 1 inbound Pith citation observation for arXiv:2511.17362."}