{"as_of":"2026-08-19T12:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e6d73bfc900223a233d146a010bb10a8ba1367c60c6a58e271dd107e3e4cbedb","coverage":[{"denominator":49,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":49,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-01T06:11:33.633679Z","state":"measured"},{"denominator":49,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":49,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.31653/citation-record","integrity":"/paper/2606.31653/integrity","json":"/paper/2606.31653/citation-record.json","paper":"/paper/2606.31653"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.963571Z","title":"Adversarial training and provable defenses: Bridging the gap","venue":null,"work_id":"fbea35d5-90a9-4d9b-9ace-8a0bb9c27b25","year":2020},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:9ff28805a87a6ae1084ca30bc7d08c2864f02598e53c5e482bf449a68055cbdd","observation_id":"ea5cbbcc-2439-4bd9-8109-fd8e3e63a208","resolution":{"observed_at":"2026-07-06T19:12:50.965436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.053837Z","title":"Evasion attacks against machine learning at test time","venue":null,"work_id":"1a571662-2e1e-46f7-9b43-e813c9fe8269","year":2013},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:16412895fba7d54446c8978535c4c7c02597f93b4142c6aa9e8d60e2b46e9b69","observation_id":"e46d43a9-2af1-4552-bd1d-abf277c14c28","resolution":{"observed_at":"2026-07-06T19:12:51.055117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.055770Z","title":null,"venue":null,"work_id":"de559a02-2c3c-4e88-89d9-0d7ba8e16b94","year":2020},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:f5b3a1ba00fc80cfd44cb271a31d63be8abaa69fdca27bab92153ebcf5196836","observation_id":"49654b21-983a-48c7-bd02-d271b0f0f45f","resolution":{"observed_at":"2026-07-06T19:12:51.056894Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.049547Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":"90ee6eb7-ce7d-4664-ab09-fe39de0b66c5","year":2020},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:d0e63f6bb9c6fc191849f8b36b980e588cac2924e8d05187240b13a678f2d37b","observation_id":"805275a2-c5bb-4797-b810-7b8e3c6889e2","resolution":{"observed_at":"2026-07-06T19:12:51.050868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.013717Z","title":"Decoupled kullback-leibler divergence loss","venue":null,"work_id":"af38cf3a-6f5c-4349-b1e4-10a1d8c47e32","year":2024},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:799cb989828920ce7e541ce0fbfcdb7268614775931a00ac836f91c5e270702f","observation_id":"17681aff-89d9-40c6-afb6-149d065cb25f","resolution":{"observed_at":"2026-07-06T19:12:51.014933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.02626","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-01T09:45:40.527858Z","title":"Learning better certified models from empirically-robust teachers, 2026","venue":null,"work_id":"0e5f86e2-ab1e-457f-a83c-3165f631d441","year":2026},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:94e5e80e156acfbe99ece40f62a04bd2cc7c9c415ec56221a5ad23f0471e1b11","observation_id":"4269974d-f3e0-4a7c-b447-a07d23ac9716","resolution":{"observed_at":"2026-07-01T09:45:40.529469Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.057509Z","title":"Pawan Kumar, and Robert Stanforth","venue":null,"work_id":"8de58628-17c9-497b-a97d-8b025b0c2878","year":2022},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:9ed8c8a14299359505545860097af7150fc0b8d566dfd29c80e251967c679d31","observation_id":"222c93a6-5df9-4cb2-bf90-944efe5d71ca","resolution":{"observed_at":"2026-07-06T19:12:51.058743Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.033428Z","title":"Pawan Kumar, Robert Stan- forth, and Alessio Lomuscio","venue":null,"work_id":"8ca16a8d-1e6b-4b4d-aaae-c963c9eb12fb","year":2024},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:50699dd762f2dc985cc7b730b6989182b81da6c5c26cfbf973a3b78fe4579c20","observation_id":"13384826-4b3c-42dd-ad28-f9a2108785dc","resolution":{"observed_at":"2026-07-06T19:12:51.034653Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.034464Z","title":"Formal verification of piece-wise linear feed-forward neural networks.Auto- mated Technology for Verification and Analysis, 2017","venue":null,"work_id":"59b17d76-16e7-4c6b-aff2-484a0f752415","year":2017},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:938a16ce5084eaee73063778c7cbb02c2b76163091bbfd3a75a23013a6d5c297","observation_id":"7ae73078-5b88-4b00-823e-4714bdb28ae1","resolution":{"observed_at":"2026-07-06T19:12:51.035799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.064612Z","title":"Complete verification via multi-neuron relaxation guided branch-and-bound","venue":null,"work_id":"da425021-97c7-4ec7-a475-0488d51c2559","year":2022},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:585480a7251a77de58d123321bedd7673f69788a1cc00cfc69da30bd037f871a","observation_id":"f7f397a1-8b65-4698-ae23-f60bf8c77bd8","resolution":{"observed_at":"2026-07-06T19:12:51.065837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.968405Z","title":"Adversarially robust distillation","venue":null,"work_id":"43a5b68a-65e4-4ec7-bdb1-c966c639a060","year":2020},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:cd16059d903db8d31191cc31687da6b62039071a2129cf954c823728ae67e8f7","observation_id":"1644621c-b95c-41e5-84e6-a2b9989beaf5","resolution":{"observed_at":"2026-07-06T19:12:50.969569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:14:04.357928Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"f12a1d34-0072-49ca-aa70-48f742657191","year":2015},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:469b5dca8472166fc67268c28f6390f39c81931a52ccaa2c427a67fbc1d4a784","observation_id":"3c90a58c-d210-4be8-9100-ed9e3212789c","resolution":{"observed_at":"2026-07-06T19:12:51.061380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.991030Z","title":"On the effectiveness of interval bound propagation for training verifiably robust models","venue":null,"work_id":"11fd6734-32a1-4881-8fb3-4437585492fa","year":2018},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:744dedbb3bf55147c4cf4bdbc6b76cd537230feac5942d225774e8ef572cfb6a","observation_id":"7583bbdf-ed30-4286-877f-5c681e702228","resolution":{"observed_at":"2026-07-06T19:12:50.992338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.988611Z","title":"Delving deep into rectifiers: Surpassing human-level performance on imagenet classification","venue":null,"work_id":"cb4d93a7-ad94-437a-8238-71edbe97d5f3","year":2015},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:b68d8087c84ccfe090a5a76e3654734f16041bb71a291d0d7668f472eeeb0be6","observation_id":"20da01fe-4d88-45d0-be48-9d605b3ee6b1","resolution":{"observed_at":"2026-07-06T19:12:50.990482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.042795Z","title":"Distilling the knowledge in a neural network","venue":null,"work_id":"ec128584-9b2d-49ac-8de0-96379f462ae4","year":2015},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:9f022111042d7d4313e390184c37b90037f792303a433595d1b7bf7423795c34","observation_id":"919976b0-007a-4ec5-a298-f4cb58b9503c","resolution":{"observed_at":"2026-07-06T19:12:51.043943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.015441Z","title":"On the paradox of certified training.Transactions on Machine Learning Research, 2022","venue":null,"work_id":"fbd0203f-7279-47b1-b51f-cde8336770c9","year":2022},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:080137058479ee866bf7fb46be085c7fd00934df40235e372fab560a67863b88","observation_id":"c9fee689-d145-4fd2-afdd-d0da9dae958c","resolution":{"observed_at":"2026-07-06T19:12:51.017040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.997226Z","title":"Reluplex: An efficient SMT solver for verifying deep neural networks","venue":null,"work_id":"ef5a9397-c924-4d72-abe1-fadd802c1b11","year":2017},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:07d4430f4f716b05d9145d7124619ab597155a116919122f32fee6f9dca0c976","observation_id":"2dffc7db-d077-48e2-a53d-a9015f869aba","resolution":{"observed_at":"2026-07-06T19:12:50.998519Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T18:47:31.790648Z","title":"Kingma and Jimmy Ba","venue":null,"work_id":"961ef8a5-d589-421a-807e-e454fd585949","year":2015},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:0a99cee8ce4d24665a8f3e2c58cb94357e43a0f2c8039e8217d4862dd8829129","observation_id":"a90f809f-a325-4c88-bf62-e999bf072a51","resolution":{"observed_at":"2026-07-06T19:12:50.973417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T15:16:19.113733Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"298093d0-0364-4ca5-879f-2ee9aaff0d97","year":2009},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:0c896e707e80030e0e26d5629ee620a0de621b0e50e8acad4be967a9be7925db","observation_id":"34b79291-dd37-485d-9c2a-252e9674daf2","resolution":{"observed_at":"2026-07-06T19:12:51.000590Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.038934Z","title":"Tiny imagenet visual recognition challenge.CS 231N, 7(7):3","venue":null,"work_id":"18dd711d-4a7b-4406-a1ae-c39812658fdd","year":2015},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:f4565c08f9d88e7e04ed3f13dc6bab7f896301294bdcc5fc85cbee36a19c254e","observation_id":"287f2bce-3d51-4163-a635-9831cc64435c","resolution":{"observed_at":"2026-07-06T19:12:51.040214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.009133Z","title":null,"venue":null,"work_id":"cfacf8c0-6659-4cbe-a983-118e1837af74","year":null},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:6fa8a705d674dd04dd251636b9c33dbddfa891d6ce50c8915e124adc5966d540","observation_id":"9a673c5b-ab11-4021-b247-1cc395544f93","resolution":{"observed_at":"2026-07-06T19:12:51.010512Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.047607Z","title":null,"venue":null,"work_id":"890631cb-7e9b-4159-accb-d0c524cde89f","year":null},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:32b12ff97f13e9bbfb60bab44e30fdbaf0908cbfe402672630358dd6e4fecde8","observation_id":"3251c365-c528-4217-88b9-7d2ebd65aa8c","resolution":{"observed_at":"2026-07-06T19:12:51.048958Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:47:23.562675Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"9d3ee6b8-fcd8-4800-b042-16d7f39f96bc","year":2018},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:d378af34d1510c6ac8a5b62616f89726adf80631085c77e35b295bc1830459f2","observation_id":"238258a5-f5b5-4837-bb9d-afacf9f4a296","resolution":{"observed_at":"2026-07-06T19:12:51.028850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.051567Z","title":"Connecting certified and adversarial training","venue":null,"work_id":"35a766b7-3698-4a29-87c3-51475ee04e45","year":2023},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:a060008eeecb87e78692baff8af6259df4dd51ca78bc48bb050317e646217195","observation_id":"e5d04049-26ad-4403-ac64-5d880fb7bef2","resolution":{"observed_at":"2026-07-06T19:12:51.052802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.035345Z","title":"Understanding certified training with interval bound propagation","venue":null,"work_id":"a3a73cd7-bb02-4fd7-845d-c027d5b25d62","year":2024},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:f732acf51532d4a773e4c63ea16f8d510e04eb715095f9cd560d1ab5947910c1","observation_id":"868bacc5-b97a-436f-9cc6-09d48dfa074d","resolution":{"observed_at":"2026-07-06T19:12:51.036571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.966007Z","title":"Ctbench: A library and benchmark for certified training","venue":null,"work_id":"e4176aa5-468d-4185-9cb3-da26beb69b34","year":2025},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:c5df58e8cf49db24b013ed9ed77a72a658b0f04534737ac35f0dca1b72d75d81","observation_id":"9a450ff5-e50e-4557-993c-989cef480add","resolution":{"observed_at":"2026-07-06T19:12:50.967830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.977790Z","title":"Differentiable abstract interpretation for provably robust neural networks","venue":null,"work_id":"2a57974e-b625-4e00-8bbd-4f73a8e572b0","year":2018},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:33eb2d1a2e34de99517d152885045091267a1d966b63e54e059943e9665bb403","observation_id":"adb684e1-c67a-4448-be04-7dda8cf1e22c","resolution":{"observed_at":"2026-07-06T19:12:50.979631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.062183Z","title":"Certified training: Small boxes are all you need","venue":null,"work_id":"1e5c1599-f3a7-4af4-85d7-1a0baeea673f","year":2023},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:083698b4f94c6214cd39f38ad4dd5875e2b5be77ab1865a32634c967f491e7b9","observation_id":"603ea08b-7ee7-4382-a941-6e69d26519be","resolution":{"observed_at":"2026-07-06T19:12:51.063495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.996210Z","title":"Pytorch: An imperative style, high-performance deep learning library","venue":null,"work_id":"48461294-9213-41a1-97db-a0efefa96052","year":2019},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:94d9a41de2e7b41a7cf0eb904aa1d42d904b3cd30ff98de04f9d2b4e9a66f59f","observation_id":"3c0e5c7b-5557-453c-8a8f-5a1deabc7720","resolution":{"observed_at":"2026-07-06T19:12:50.997453Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.024122Z","title":"Fast certified robust training with short warmup","venue":null,"work_id":"7c4422b1-d312-4b7a-8284-01494bfa6507","year":2021},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:d298078f97ecd5d171f2ebbdfc45fec3d111c07b801ca42e3668df452d35609a","observation_id":"9392de4c-778d-44b9-a30b-3c67129b573e","resolution":{"observed_at":"2026-07-06T19:12:51.025460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.042016Z","title":"An abstract domain for certifying neural networks.Proc","venue":null,"work_id":"03aa1803-ad2c-4c13-b6f2-4bfcf353c2cc","year":2019},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:de1385cc2f2bfd98a5bbf770c4d7f3359cb46a2c6ed035ebb3758493c154a94e","observation_id":"e9a72c9d-ee6b-4e47-bd15-07295d1ab241","resolution":{"observed_at":"2026-07-06T19:12:51.043215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T04:05:55.990818Z","title":"Intriguing properties of neural networks","venue":null,"work_id":"4bd2aade-a417-415c-8ee1-d50b7d1f1dba","year":2014},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:21d21e1a134be7ebac746b0531819951e98aff438e04557862e2b6bc221d9dab","observation_id":"3dec6767-dde2-40ff-95a1-dcae688026e0","resolution":{"observed_at":"2026-07-06T19:12:51.037605Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.038178Z","title":"Evaluating robustness of neural networks with mixed integer programming","venue":null,"work_id":"d7c8f70f-3696-4656-ba3d-6fe68dfb3e48","year":2019},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:062dbd6df4230be3ecea94dbad5daef570711706847bc46b4ac238a4c17b5e53","observation_id":"4e867a8b-4f82-448c-b150-69c7df6fede5","resolution":{"observed_at":"2026-07-06T19:12:51.039446Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.039965Z","title":"On adaptive attacks to adversarial example defenses","venue":null,"work_id":"fef06432-7dc7-4cb1-9b77-5a4b4cdc3f9e","year":2020},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:10f92552cb163f93c9cdcebf9b3dc12e14804141df3c2637b89803cd452fe121","observation_id":"930f5377-b45d-434a-a6c5-e253e82c86ae","resolution":{"observed_at":"2026-07-06T19:12:51.041126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.045554Z","title":"Beta-CROWN: Efficient bound propagation with per-neuron split constraints for complete and incomplete neural network verification","venue":null,"work_id":"37d8d17a-0f8b-4eec-b3db-d12d041fed8b","year":2021},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:57562a204d2ca4f58d14b5e1d4c2347f0c74e808817ffcac5860ae126e40396f","observation_id":"b45458b1-82cd-49ad-829c-34edee1df26d","resolution":{"observed_at":"2026-07-06T19:12:51.046982Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.990470Z","title":"Zico Kolter","venue":null,"work_id":"638e65d3-f5e7-4247-962c-8928f4e2a544","year":2018},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:d7f4f773f4fe14789592c268799bd443b587d9c9a7ef334de392d4224c0176b9","observation_id":"2360f043-58a2-4074-9fe6-6e3a6a814c5d","resolution":{"observed_at":"2026-07-06T19:12:50.991620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.028256Z","title":"Automatic perturbation analysis for scalable certified robustness and beyond.Advances in Neural Information Processing Systems, 2020","venue":null,"work_id":"a71c6480-6891-4a78-936e-608e8d5af8d7","year":2020},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:86d846575077e264f02b567415c9d7675b35a3165db59f71234e3ced74099709","observation_id":"16fc48f5-b9a5-4676-ab17-eaaf4fdc4392","resolution":{"observed_at":"2026-07-06T19:12:51.029580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.032684Z","title":"Fast and Complete: Enabling complete neural network verification with rapid and massively parallel incomplete verifiers","venue":null,"work_id":"1d2f598d-c903-43b9-97be-87a2315594a6","year":2021},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:37f7f2431cd6379ce0d62a5ea8d6ceb0a6e6593f1d1faae8b92ecedf690a7b0f","observation_id":"5b805d12-2b85-472f-ae14-934c86f32df5","resolution":{"observed_at":"2026-07-06T19:12:51.033926Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.046323Z","title":"Rethinking lipschitz neural networks and certified robustness: A boolean function perspective","venue":null,"work_id":"ecb969ee-6d45-4367-822f-b69a838f6c22","year":2022},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:87fbb1ef15ae8ad48262b6bfc6d09d2bef1724effc9e5093a53be4de9053bb59","observation_id":"1518904c-4873-45e8-adfd-6bff78189075","resolution":{"observed_at":"2026-07-06T19:12:51.047920Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.043766Z","title":"Boosting the certified robustness of l-infinity distance nets","venue":null,"work_id":"d5924705-485a-4d93-ba22-21297c3962ed","year":2022},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:973cbd9aff50d646c31a1a1ced0973f6463d371fe505fedc4d0b944fc8d78799","observation_id":"383acd68-578a-4a23-a780-22e191f4eac9","resolution":{"observed_at":"2026-07-06T19:12:51.045023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.030126Z","title":"Efficient neural network robustness certification with general activation functions","venue":null,"work_id":"a860128c-c199-4908-a405-5021b9985579","year":2018},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:e5635513abe33af90735335f51ebdd593fcc7a711c5b2934b6539d7b1a8e2d41","observation_id":"969d7fbf-d306-4c41-baeb-6387511176c6","resolution":{"observed_at":"2026-07-06T19:12:51.031858Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.976111Z","title":"Towards stable and efficient training of verifiably robust neural networks","venue":null,"work_id":"57dcc41c-53d9-496e-a26c-56c20739a03d","year":2020},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:0f372074372647301c884e862ea4ac00bc9a6b20c7c6d30a6fbe9108149a7f2f","observation_id":"700a03ba-0725-40fd-a3d4-954653563a76","resolution":{"observed_at":"2026-07-06T19:12:50.977388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.017561Z","title":"General cutting planes for bound-propagation-based neural network verification","venue":null,"work_id":"ffc043f2-086d-42b9-8a42-bf57f297d062","year":2022},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:c1b6d27b8e508e2dd914fb2c7595ed6bd928000ee6152edad3f6ee1ace6fa65f","observation_id":"8fd583a5-f43a-40fa-bdca-e4c75db59d60","resolution":{"observed_at":"2026-07-06T19:12:51.018802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.044490Z","title":"Generating less certain adversarial examples improves robust generalization.Transactions on Machine Learning Research, 2025","venue":null,"work_id":"5da20376-c940-4b3b-9ffb-a117217ca49e","year":2025},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:fc94adc2fe5487df68b74439e22b730293cc9a0f00f1bca344687081d9592428","observation_id":"a2af17b3-335c-4a76-8ba5-7b91f0d760ae","resolution":{"observed_at":"2026-07-06T19:12:51.045761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.029412Z","title":"Reliable adversarial distillation with unreliable teachers","venue":null,"work_id":"5c8b51e4-0d80-4723-ad85-0e266cca68d8","year":2022},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:a66fa274dbfadd7d1bab5674523a939d55238f0360f1e6ca453b2a3810e826fd","observation_id":"674ad7f2-58b0-43c6-84ec-bcc139a2f002","resolution":{"observed_at":"2026-07-06T19:12:51.030726Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:50.983073Z","title":"Revisiting adversarial robustness distillation: Robust soft labels make student better","venue":null,"work_id":"e9375bc3-ecf9-4eb1-b514-ad086f2d8513","year":2021},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:be80aa6e83502a2bfccd7d5f35243ffc260611cdebe2ab49b68cbe172361fe61","observation_id":"e7ccb5c1-1910-42ef-b131-bf9d38c21a6a","resolution":{"observed_at":"2026-07-06T19:12:50.984501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.004102Z","title":"[29], with weight 0.5 on MNIST and CIFAR-10, and 0.2 on TinyImageNet, during warmup","venue":null,"work_id":"742e5908-9c18-4466-8ad4-c0941c1f045b","year":null},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:b2256f76ac11539e13764b0b3bff890b4b06fa06e6e094848292b39efcc66c6e","observation_id":"31719d8e-bc52-4076-a52c-d7366d112280","resolution":{"observed_at":"2026-07-06T19:12:51.005915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.019359Z","title":null,"venue":null,"work_id":"e4ac07c2-7f69-4ca3-9055-95deae0404c8","year":null},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:fc53a2d4953b65c57129005e8f0686f82bcf682d0d8cb2de779ba2f18c55c726","observation_id":"83203196-fbda-4141-90c9-ff8c897949f2","resolution":{"observed_at":"2026-07-06T19:12:51.021004Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T19:12:51.022055Z","title":"The final hyperparameters used for AD-CERT across all settings are reported in Table 6","venue":null,"work_id":"92adfa65-c7af-43ff-86a4-66552dc5abb7","year":null},"citing_paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-01T06:11:33.633679Z"},"links":{"citing_paper":"/paper/2606.31653"},"observation_digest":"sha256:99cdaf6ac0eeeac83c6a3376e85bc89b0c6566ae3cbbab115e3142c4077514dc","observation_id":"4c76dda3-0705-4e6d-938e-dc0f03d2da81","resolution":{"observed_at":"2026-07-06T19:12:51.023586Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2606.31653","last_updated":"2026-06-30T13:31:35Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-14T23:38:06.881528Z","submitted_at":"2026-06-30T13:31:35Z","title":"Improving Certified Robustness via Adversarial Distillation"},"reference_resolution":{"displayed":49,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":4,"verified_exact":1,"verified_fuzzy":44},"total_outbound_references":49},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 49 of 49 outbound references and 0 inbound Pith citation observations for arXiv:2606.31653."}