{"as_of":"2026-08-06T07:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:10e5c5c0340ab3c251578d16c93faa0bed823316276ffcc30bf68f0c7b8f0cf2","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T08:24:53.603057Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2601.17360/citation-record","integrity":"/paper/2601.17360/integrity","json":"/paper/2601.17360/citation-record.json","paper":"/paper/2601.17360"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:50.270579Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:50.270579Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:f74e8596bf38a64187fb411ea3b8782e7a441013e4c277b0bb742b0f5ffaf649","observation_id":"9579c05e-53d4-461d-8edd-26825425d86f","resolution":{"observed_at":"2026-08-03T08:24:50.270579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:50.345311Z","title":"B., Mironov, I., Talwar, K., and Zhang, L","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:50.345311Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:9b0f019d15fecc8e239424b0a71b7bf525445575a4faec78959cd67315fc0453","observation_id":"7a3e9dff-a967-4861-8913-c169151514b3","resolution":{"observed_at":"2026-08-03T08:24:50.345311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.11835","last_updated":"2019-09-26T01:01:32Z","snapshot_observed_at":"2026-07-06T08:24:41.779661Z","submitted_at":"2019-09-26T01:01:32Z","title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.11835","snapshot_observed_at":"2026-08-03T08:24:50.411113Z","title":"GAMIN : An adversarial approach to black-box model inversion","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:50.411113Z"},"links":{"cited_paper":"/paper/1909.11835","citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:4f292be6d54d00ca9aecea2f235f27565f1bc0b4d9f06d4fa62c4494ca0893f2","observation_id":"ff962791-f98e-4f3f-a5b0-bcee3832dec9","resolution":{"observed_at":"2026-08-03T08:24:50.411113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:50.477192Z","title":"Branch and bound for piecewise linear neural network verification","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:50.477192Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:f3d793e467bad8a1bedb347cde50cacfeec6d10e53d0f1af6bc9f74e058bf3c5","observation_id":"6dd75dd4-b30c-4386-9340-42fae1c25f80","resolution":{"observed_at":"2026-08-03T08:24:50.477192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:50.653016Z","title":"and Wagner, D","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:50.653016Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:b9770167494db89d8cb735fc834cb334d6233d0d70461c1d3f685b92c37f9bb1","observation_id":"db241b72-e22d-4dfe-b02d-64ea0698fbf8","resolution":{"observed_at":"2026-08-03T08:24:50.653016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:50.847013Z","title":"Knowledge-enriched distributional model inversion attacks","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:50.847013Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:52954c734161d40aae308cf424172bcc39489050ebb44e979fedcc1c3972b240","observation_id":"94996018-cd93-44e5-b76f-c506f465c00b","resolution":{"observed_at":"2026-08-03T08:24:50.847013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:50.963571Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:50.963571Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:31fba3d6bf54da9100ef12742f91a46fa4f3f4e4ba305e22e740628a93a997bb","observation_id":"66ea1a88-6b83-44aa-b7e1-3d26e922774a","resolution":{"observed_at":"2026-08-03T08:24:50.963571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:51.033595Z","title":"Calibrating noise to sensitivity in private data analysis","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.033595Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:035dc7f5bb0ec38fc4fc4aa4e051e58e381cb253242ed5237606e1ae96082b68","observation_id":"a76504d6-06bb-4a04-9e53-41ca8d7f973b","resolution":{"observed_at":"2026-08-03T08:24:51.033595Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:51.167874Z","title":"Formal verification of piece-wise linear feed-forward neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.167874Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:0af861b06394e8b358b2e9c87abfdb2ee8fda24320ac04e95213e747149cb1af","observation_id":"08c7e5eb-d317-46b7-a055-8d11c3d1e1dd","resolution":{"observed_at":"2026-08-03T08:24:51.167874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:51.313310Z","title":"Privacy in pharmacogenetics: An \\ End-to-End \\ case study of personalized warfarin dosing","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.313310Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:fff63a74d692ebab322590610f3fd680af276ccf568402f8b79cde3d6cb9e06f","observation_id":"1abefc70-3291-4a14-9080-8f341f313c13","resolution":{"observed_at":"2026-08-03T08:24:51.313310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:51.394157Z","title":"Model inversion attacks that exploit confidence information and basic countermeasures","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.394157Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:a2fc499ec3f9218cdd07979074608c69d3c81ad27543dbcb2cf7ac87de6b0779","observation_id":"c62b6776-6e2a-42bc-b218-17eadb2ebae3","resolution":{"observed_at":"2026-08-03T08:24:51.394157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-03T08:24:51.542344Z","title":"J., Shlens, J., and Szegedy, C","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.542344Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:14ca9533b0637e74ee79caa61fe3681bbe033ce5f28539508fcacc261b29bd33","observation_id":"6545a79f-8096-489b-b069-91d0d98fefb8","resolution":{"observed_at":"2026-08-03T08:24:51.542344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:51.676468Z","title":"and Evans, D","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.676468Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:1937ef0732271bfb0abf0cda88fc042a5df273fc7beb9919327e94a5e235b34d","observation_id":"f4f922f7-c9d6-491d-b344-feb334c56ef0","resolution":{"observed_at":"2026-08-03T08:24:51.676468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:51.757053Z","title":"A., and Jia, R","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.757053Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:dd4939fc7429d2e3a4598f250e496e367f9d896df48e269127629a410533ad78","observation_id":"c2a86379-0678-450f-8ea4-2210f7dcd21d","resolution":{"observed_at":"2026-08-03T08:24:51.757053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:51.870360Z","title":"Medical insurance cost prediction","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:51.870360Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:a5fc9759a982c3cecad88a2438e521bccdc5652e63907fe2c661d1c6d9d50cb3","observation_id":"19c7973e-2d73-4c57-82c9-fee8b72db498","resolution":{"observed_at":"2026-08-03T08:24:51.870360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:52.014652Z","title":"Certified robustness to adversarial examples with differential privacy","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:52.014652Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:355dfc3e17b8942d03a6129685e326b641a566c976636a53fe228ed5585c974c","observation_id":"2c48f210-8ba0-4501-b9a9-1867d517661c","resolution":{"observed_at":"2026-08-03T08:24:52.014652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:52.128805Z","title":"Certified adversarial robustness with additive noise","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:52.128805Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:26d5f7d5c8a3cdd2d5a8441ba8a6afd3892e26f59b9ab689ef0857e1b2673e63","observation_id":"f96b8288-19cc-4b92-abc5-60f9ba7b36f4","resolution":{"observed_at":"2026-08-03T08:24:52.128805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:52.298211Z","title":"Deep learning face attributes in the wild","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:52.298211Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:fef36613cf6d79478c693572fe232687ecfe98b32d4c69a7bd25665189e591fc","observation_id":"68149499-e8d3-4128-8cf3-de5113cd1dce","resolution":{"observed_at":"2026-08-03T08:24:52.298211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:52.471145Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:52.471145Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:03acb09fd586d81314ace672fb6f9be21383a8c2001735b0aaab77b671a35faf","observation_id":"69c281e9-fe40-4b4f-bd7e-a5ac13200e5b","resolution":{"observed_at":"2026-08-03T08:24:52.471145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:52.632310Z","title":"V., Kabir, E., Li, N., and Bertino, E","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:52.632310Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:5581508fbba472e11f9b0f4fdb1ccee001013e10ab69917c46a1116b808cdb95","observation_id":"2d5e399e-23ad-412c-b4fe-868dc1df0651","resolution":{"observed_at":"2026-08-03T08:24:52.632310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.17884","last_updated":"2024-06-28T23:27:10Z","snapshot_observed_at":"2026-07-06T16:39:20.716423Z","submitted_at":"2023-10-27T04:15:30Z","title":"Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.17884","snapshot_observed_at":"2026-08-03T08:24:52.879778Z","title":"Can llms keep a secret? testing privacy implications of language models via contextual integrity theory","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:52.879778Z"},"links":{"cited_paper":"/paper/2310.17884","citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:74170c4fb34068300dcaf069c79acba154e79e73c3d5ab5d679771430699d761","observation_id":"dc954db0-8ac8-42ff-a125-ec482dff6ecb","resolution":{"observed_at":"2026-08-03T08:24:52.879778Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:53.087319Z","title":"Facenet: A unified embedding for face recognition and clustering","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.087319Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:b82739ae2d67475b716a42671ccf6f9f0a70edac480839aec87e95fcba79560c","observation_id":"b5491612-16ed-421b-b571-9e7627f53bc9","resolution":{"observed_at":"2026-08-03T08:24:53.087319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-03T08:24:53.189254Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.189254Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:58e9013956333d5b4e70245eba7b0827c369237de8aee14c04685f68411b26d7","observation_id":"3cb46d38-4487-4b24-a25d-68e468edf162","resolution":{"observed_at":"2026-08-03T08:24:53.189254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:53.281863Z","title":"Y., and Tedrake, R","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.281863Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:dd602247d479aa059fa1c481b17c1111638f6d1b56c1b0abaebf30c52b3e9cfd","observation_id":"c55c4c27-49eb-4421-9513-47ac40cbfd3d","resolution":{"observed_at":"2026-08-03T08:24:53.281863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:53.345748Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.345748Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:ef63926f8aae6e41a7f5042c3a65c86c025a3e6fbb67df2c73d3313c514d09ac","observation_id":"a8bfd4fd-7d6f-4372-83d7-f77773ed1590","resolution":{"observed_at":"2026-08-03T08:24:53.345748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.08552","last_updated":"2019-02-22T16:38:29Z","snapshot_observed_at":"2026-07-06T07:34:48.732736Z","submitted_at":"2019-02-22T16:38:29Z","title":"Adversarial Neural Network Inversion via Auxiliary Knowledge Alignment","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.08552","snapshot_observed_at":"2026-08-03T08:24:53.419216Z","title":"Adversarial neural network inversion via auxiliary knowledge alignment","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.419216Z"},"links":{"cited_paper":"/paper/1902.08552","citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:50660a7286b7937dee2adff2495388965489155ac9ba52ad0ea233cc1bc3d0da","observation_id":"ff931575-7870-40f8-a001-63af251afa9e","resolution":{"observed_at":"2026-08-03T08:24:53.419216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:53.494556Z","title":"Efficient neural network robustness certification with general activation functions","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.494556Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:6edc5b86077869a7caedf4d218cae59544fca2a8e2995dae449400cd04e0eab1","observation_id":"eceb1b3a-6809-467e-923d-3216f188e4a0","resolution":{"observed_at":"2026-08-03T08:24:53.494556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:53.537539Z","title":"The secret revealer: Generative model-inversion attacks against deep neural networks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.537539Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:c9745024324718429c217a24462df919d9dc20a113305d4b05ebcf73ba5dae48","observation_id":"9c6532f6-3e66-49f2-9da9-6874fc2fcf6a","resolution":{"observed_at":"2026-08-03T08:24:53.537539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T08:24:53.603057Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-03T08:24:53.603057Z"},"links":{"citing_paper":"/paper/2601.17360"},"observation_digest":"sha256:5dc40d8efb23fcdf438693bf9a7409c3524af42a3d412c7fe79a8dc4a66dd5f8","observation_id":"c11baa8a-f188-43f9-a9c6-975b1aafd050","resolution":{"observed_at":"2026-08-03T08:24:53.603057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2601.17360","last_updated":"2026-06-10T08:43:13Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-03T08:24:49.284933Z","submitted_at":"2026-01-24T08:13:08Z","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":29,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2601.17360."}