{"as_of":"2026-08-20T10:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:40cb81b6ab3625d5e4fe6235a73338ef53943fafa162927e29a629838a1b5ae8","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T16:28:28.075222Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.09548/citation-record","integrity":"/paper/2606.09548/integrity","json":"/paper/2606.09548/citation-record.json","paper":"/paper/2606.09548"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: 2024 IEEE Symposium on Security and Privacy (SP)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:9a569090ad354b78e9d2c518f8bf7aa0a538f7c27ebe1ab3e56a926f7275ce25","observation_id":"9c7e7cbb-d72d-4ef8-801a-a5431b0ab362","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: European Conference on Computer Vision","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:ef357428eae281161bcd1f0e3b61490826163627b55ef21bc65577ad3e680474","observation_id":"807a5615-812f-4cc9-b3e6-0217181115cd","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: Proceed- ings of the IEEE/CVF International Conference on Computer Vision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:f7cb439c1eeb874f8baf91ac18011a48ac94c95b746eea6a18ec8739711639a2","observation_id":"34bb795a-aa86-4187-a6a0-30a2fa72f453","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: Proceedings of the IEEE/CVF International Conference on Computer Vision","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:9f5d341052c90a00b336ca6b6cd9b585712d2417df1251a49e407bba1990e0cb","observation_id":"1a853a0f-b80c-48d2-b687-39925908d83f","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: 34th USENIX Security Symposium (USENIX Security 25)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:a42c52dcf67d78d9b6ea6b0ff8519080e40c7b0544abb1fa283ad0d736b91423","observation_id":"bd35b5ca-cc68-469d-a7f4-4932d7caa201","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: Artificial intelligence and statistics","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:1247d687b38f5fe8db3073c148425cf4e4e8c77014544157997f056d1160f8d1","observation_id":"46ff1d84-6233-4dc5-a57c-3f47c31afff2","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: Proceedings of the IEEE/CVF International Conference on Computer Vision","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:216b9390846e9b8a6a50cb43c99646499d07da3bf9fa7a8b9da1247a4efb2f9b","observation_id":"6487dcd6-1e69-40e0-8822-5cd3f49a6dc3","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: Proceedings of the IEEE/CVF conference on computer vision and pattern recognition","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:4ac37fbd872dd48a76ab4f803bf25cfead857c684c2b3817559946c4359c62d1","observation_id":"dd3a001b-213f-4341-9e85-d28837703f11","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-17T17:57:37.740446Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":"1911.07963","doi":null,"metadata_source":"pith","pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-07-11T00:47:43.820961Z","title":"Can you really backdoor federated learning?","venue":"cs.LG","work_id":"e3828d1f-038f-4371-a8d9-73a2916ee4b5","year":2019},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:fec474580be3b2141e9b3136c7c0c32237bb2dafcb3fd8dd156db558c2e09e24","observation_id":"a4147d5e-69d0-48b0-83ca-9471055fb3d7","resolution":{"observed_at":"2026-07-03T01:27:31.644699Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: 2023 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:40ab1f11c77e0f3de864cd689cbc59616c3454383019977dc0a1b2d5df1db173","observation_id":"06045a3c-211c-4b0a-936d-dea8a4cf7a68","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"Advances in neural information processing systems33, 16070–16084 (2020)","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:14925e5fa6e21132fed535a18021111f4dd2f701762e0097acdefdc81c29b79e","observation_id":"1d7680a8-b515-4c96-b4a8-8deab7df67b8","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: Interna- tional conference on learning representations (2019)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:c3e439f0c03320e35749041000e898b8c16a7bc250ef0b6c90d95f444d21e2c7","observation_id":"20a52d4a-7ad4-4b24-b91f-3f2c35a0823b","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"Advances in neural information processing systems36, 61213–61233 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:f8671fcc201670294671f2054b641c12ea6229bc04a78e66f2016663b6b59283","observation_id":"2b9d6fa0-775c-4e80-a16c-775ad864cb61","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":"In: International Conference on Machine Learning","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:5245801dc277cce73826ad2ebb63c111b0ff8c6c7783bba5f676349cd3eecb8c","observation_id":"9dbf48db-0213-4cca-a99f-c8ef808e7f61","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:28:28.075222Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T16:28:28.075222Z"},"links":{"citing_paper":"/paper/2606.09548"},"observation_digest":"sha256:04c5a578d2896a1732828f70427546a4eadc1cb867f9780c68456abce2fc21f8","observation_id":"c3cd5a35-79ce-4689-b529-94599a10db15","resolution":{"observed_at":"2026-06-27T16:28:28.075222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.09548","last_updated":"2026-06-08T14:27:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T07:58:03.194038Z","submitted_at":"2026-06-08T14:27:21Z","title":"Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":14,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2606.09548."}