{"as_of":"2026-08-23T09:08:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2ea096871587f48c6215feb97f3608ea9baeb7b50c3d00034b90d6f983b5f395","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T13:43:07.407298Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.27809/citation-record","integrity":"/paper/2605.27809/integrity","json":"/paper/2605.27809/citation-record.json","paper":"/paper/2605.27809"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:55f5bd96ce3621f37a2c43a2349790a6fd7b8c940e5a2583ae0bc11d762bcddb","observation_id":"cea5b0bf-5430-4523-b13b-8e12557700bb","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":"1712.05526","doi":"10.48550/arxiv.1712.05526","metadata_source":"pith","pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","venue":"cs.CR","work_id":"bb1fb326-f0f6-4c72-a4d2-eb7f0707b971","year":2017},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:69fc80817358b31faea4968a33934be9d900d7556a6cd9e2906ecda3cc770f81","observation_id":"38db3973-e1d6-420a-83d4-e8d723dccebe","resolution":{"observed_at":"2026-06-29T13:43:28.414186Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:4a51ddd5c9f2ad6782c9e7dcfed23ff4039ab2ccc835ca1783ee9142ea16bbe2","observation_id":"abb838ee-cde2-4afb-b8e0-63ba5d965c6d","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:c7a627441765951ab6c006b247a790781ce9d08a71e6c1a33a90a77b368a3b0f","observation_id":"a637899f-4fbe-4793-a980-371aea0ba5b2","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"Franceschi, P","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:f46cc49d9fc5b498b47311d3ad9397613325959cb9e674b57d9d0d895068efde","observation_id":"8997e14d-4d8d-4d89-acce-3253af4d71f0","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:caf75c013ea757e660d25f95a9e5293cf095a7d677f5cd8f7b2cfe1abef51923","observation_id":"18e9383c-db5b-471b-a55a-43ee28611df1","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:4646f2db3d32415b2d8325cb2177c3f5bb21cad12a0825805604da9fb746e816","observation_id":"4b880290-8c24-4f98-a92e-e9f696a603da","resolution":{"observed_at":"2026-06-29T13:43:28.416993Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:d24b227d3ef5ad16a7c4e8dd782ce232fe065fcdef5c0cf94dd605215a841cc6","observation_id":"a2fd77b9-0f2a-4c52-a2bc-85831ce5141a","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"Jiang, H","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:17e748c2ea77baf28c2012b6c50b78b326c1bc23304de489e808ecb3cd1bce9d","observation_id":"f7a0ce93-fe61-495f-8ea7-539cc60c6b3c","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"Krizhevsky, G","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:717b58783218636552976983fb11c750cf2586ce7dabca4f2189af39d11535e9","observation_id":"c1f68fa4-3d15-4e86-bad9-3da6503f79fc","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"LeCun, L","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:85c02fd21b7584a8b3402d42e71022ea5d2f73b1bb47b25aea589d004550a660","observation_id":"59b1ded4-e312-4514-9a23-0befafac441f","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:4a9e0337b9d1151ca0a051ce5c506b41763ae9377ea0ffc6826870ab6a0ef620","observation_id":"6f5d8182-78f9-4df9-87be-603efdb805c5","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:315e16fb6fd28ef6329e93b054d10e1a5337f5d059246b48e42f44442afbb2eb","observation_id":"e0e142cc-ee0c-46a2-a30e-d844d3323ba9","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:1fef81b6187ab3ed052770d6fb1d011b23607510d240a91341782ee821a68fc8","observation_id":"6724bd09-92f4-4ff2-b831-a0f6015edb6f","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"Liu, W.-C","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:3e21cf0318826aaf75b22f06344003966dffb4f67b9c77799b712844e639e043","observation_id":"c2d542fd-2b8b-4b23-b9bb-a890f211d284","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:cc7ab7ccbe3450f6069e198c709065ead4ca6e9401c522e66278c424d5437146","observation_id":"143d5a62-3925-44be-ad54-dffa7bcaa921","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"Lorraine, P","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:3c3cc14f7e28bd22ad5580ee3f90abb86d8df9d672fd2a0eae2a85a904d1a215","observation_id":"d6b46a92-5747-4034-8177-c2b642ec8b03","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:081140530fca2a9d44c6e5f56fece48f0db8c837f20009c526b06ee85edeffef","observation_id":"073bac94-7ed2-4eef-bbac-438dc1784cef","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-21T22:32:27.867560Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:0d428d7042a10298b88f0133e739fac67459c96a1b7502694586d67794916493","observation_id":"e8cf986b-4d0c-4ddd-99c8-e2cf4e44e9df","resolution":{"observed_at":"2026-06-29T13:43:28.411242Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:4b6b3d1569201665d96d6222ff0fc0d3dbfc1a727a74e9d2bba66b9b3584cd0c","observation_id":"836f9a29-7d94-4d40-9474-6e68cabbf43e","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":1994},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:1b9d507499c3d37043dc0e1bcaac5c8e92eab0568aa19aa6e3f9122551774be2","observation_id":"85cbe753-9ca5-4249-b85e-130c1342216d","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:5e3c2ffdc36cc4d90367d3071e6edb9d614126f97ee2d4d81bd07dedfb157970","observation_id":"d6bd70b3-e6df-43c5-8724-8bd30493d9bd","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:a69292d7f6902669733e7e5296a35f0a8d50e650f53e5014c0ae897184b81345","observation_id":"81130b4f-9c15-42d6-890e-5fd00060e205","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":1994},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:1d4cf7ebf17b1f00492ef55e08e00d3b4c597566a6d021f85d45e4d994406c18","observation_id":"b77d0a6e-7d74-40d3-9605-1df29d48445c","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"Stallkamp, M","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:c862066181d0cf71e7c50e7a990d3c51cbbe74a76bb9d5e4ea88ff7356b72c93","observation_id":"fc4f3354-5f2b-4694-b5d0-867effd19b23","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:d69b128e3a1e45c110adc3d786a94cb7e2616491f61e74008700fdfdd774b36b","observation_id":"b7c1c149-516b-4b83-9226-0adb591a1dfb","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-21T01:12:38.607259Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":"1912.02771","doi":null,"metadata_source":"pith","pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-07-11T02:37:46.303787Z","title":"Label-Consistent Backdoor Attacks, December 2019","venue":"stat.ML","work_id":"6b7221ce-154c-4e93-bdc4-fd4f65672799","year":2019},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:891ee99b0b0159f0881c0a86bcf2e1fb3e1082f616b43403489f9c1044b2569f","observation_id":"e3c652cf-9a16-45f7-b9b2-b89988f4f714","resolution":{"observed_at":"2026-06-29T13:43:28.409388Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:db24d9e251e81b3280e576eb66f9772fa6a7a3ab71f8be1678b1b710a769a9ed","observation_id":"3d35eb89-07a7-4f9f-87bf-576401c4ec87","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:d1dece04dd54fb06417d99eb347462c63938ffc24ded54c7be41e0af8f408c50","observation_id":"85895588-0cc7-41c9-bf1e-bd1c8f116708","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:bff99f7d74a6ae219276cff7cafc60fc1738065fe8f306c2c02b0172afbc3f1a","observation_id":"dac1f65f-a2e4-481e-8cd5-3ed4715404de","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:d45ffb2b03db26a2ddcc907fd0b1d9d03338d598fcd10fd8b2f9ee26de16b3f1","observation_id":"69c174c0-9b3a-4533-81a1-ed0755b1b246","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":"Wu and Y","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:6934d1379324ee210258ccaa16aefbbd96b02d6ae3a845d0718d994800212e85","observation_id":"79a94750-afdc-46e7-bd27-aba48ab45620","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:3fb3607c368b83d5af8ffdc1a96c73f6a537736e9ca038bd56984845df4f0fff","observation_id":"d1836441-81d9-4a0c-bb61-7761a5842fd1","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:37f6d25029c2dc51523cdb780e65734fb19f4660a0b600e3d8b5330ddfffa559","observation_id":"a901ae0a-d149-42ea-b2e5-22bf723f2877","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:552dbade72376d05afd15e0ff2e394d9fd4c70a0578f6829f3dd9a6c08d51ec8","observation_id":"ec58889e-19a5-4735-a6ef-b2db2a89270a","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.03735","last_updated":"2022-02-06T21:26:28Z","snapshot_observed_at":"2026-08-16T17:51:01.703112Z","submitted_at":"2021-10-07T18:32:54Z","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","version":4},"cited_work":{"arxiv_id":"2110.03735","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2110.03735","snapshot_observed_at":"2026-06-29T13:43:28.414072Z","title":"Sampdetox: Black-box backdoor defense via perturbation-based sample detoxification.NeurIPS, 37:121236–121264, 2024b","venue":null,"work_id":"0472ded8-f2de-4e7d-a6be-e0b36e35b47a","year":2021},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"cited_paper":"/paper/2110.03735","citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:23a394e606c1924815f9127694eb07b0e5b49942bdc45c5c79a0586923fe6c69","observation_id":"02018899-bcc9-4bd4-9957-d05a73076ae5","resolution":{"observed_at":"2026-06-29T13:43:28.415965Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:9441206185401f85c4a68973d99b1342483ec3338b0bce16e9dc505d368f15c6","observation_id":"ee84309c-e1b9-4db3-a45d-08fa276a9c7c","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T13:43:07.407298Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:fde737d2c1265f2aa66e19fe361db5d1c0d7559c4a526bb53df4725798f9014d","observation_id":"40bb33f8-ee57-4163-adff-274a2b636031","resolution":{"observed_at":"2026-06-29T13:43:07.407298Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-15T07:33:43.189476Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":2,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":5,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2605.27809."}