{"as_of":"2026-08-05T10:08:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5ef28bc22979b7f8f0efe2f0250173ad5afed7cb24cf1f0871763cbdf28fbc85","coverage":[{"denominator":83,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":83,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-11T18:54:16.790539Z","state":"measured"},{"denominator":83,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":83,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.04474/citation-record","integrity":"/paper/2607.04474/integrity","json":"/paper/2607.04474/citation-record.json","paper":"/paper/2607.04474"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.18042","last_updated":"2024-05-28T10:54:26Z","snapshot_observed_at":"2026-07-06T18:21:14.089427Z","submitted_at":"2024-05-28T10:54:26Z","title":"Visualizing the loss landscape of Self-supervised Vision Transformer","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.18042","snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"arXiv preprint arXiv:2405.18042 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"cited_paper":"/paper/2405.18042","citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:3b169556ec9775ab152a38ac2287d45e2f88ab0987bb759985dc084c0e5f3c42","observation_id":"5b72ccfc-c9fd-4a61-986f-65757788f6dc","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Langley , title =","venue":null,"work_id":null,"year":2000},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:c5ecbebc08c31bb63bb73a7240cefda3a98c545ea722143b1e9257443b012e3c","observation_id":"b0c0cf56-6dc1-430c-90e5-f6de8f73f54a","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":null,"venue":null,"work_id":null,"year":1980},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:fbafbac377b08171ceb74faad33ec813b542fd129a52795e14da2fe52421f805","observation_id":"08f7d635-fa78-4c6b-a34a-41281f9a026b","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:7e379d8c8cf10bde76ef4090f5bf9f693597fadcfa8890c048fe47f82b251028","observation_id":"2e7cd9af-19ec-479d-afed-f51d7d0108bd","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Internal Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:d079a19fd8cb305191a5dc262287ccf58b8480bf67a261c3e3f911b1e44abd75","observation_id":"03f134e4-c305-4268-9582-736e175029b8","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"European Conference on Computer Vision , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:d738a048258736feabbf3dc24d013579f1ab220aa64dbf4aa2a2143e58cbf69b","observation_id":"17fac715-7cb0-4e09-a4b9-e0333ff6b460","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"erceptual adversarial robustness: Defense413 against unseen threat models , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:3a5455d00b7d4d5328dba6067304392b73f75c3d3c71219176a2b417d99984a3","observation_id":"25abca9c-3828-4208-a7ca-e4d51e5fb240","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:ed203b38c7d2e08cbc6fa80cc08b4390663976dd8df2d0c24023c167dd98649c","observation_id":"24a4e6c9-f55c-4b81-9ab1-8843035b5a83","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:96be0fb463c12b9bbdbff80dbc5faaf4c7483cdd01c76d5feadaae5b2532aa5f","observation_id":"62caf3d9-1406-47fa-bab9-5e640d441e7a","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:6e79b197d83a6a9a40560119bc7840e26073943e381133897f805f557251a88a","observation_id":"5af4706f-193a-4c79-8862-7a70e675c3b0","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:dcde4e91ad09db0b7c9e094d0068566d165d2b6c951a508ff07d0b89d7da5a69","observation_id":"a2f9f6e6-c382-4042-95be-a19fb8354ae0","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:e9095c673625f43f4ef6e6ef8997ca5f9f8a567c375389a8e58a926564671106","observation_id":"8d06076c-6dff-4401-92c0-94c77225b2bf","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:4dc7f265fc786e5a703dfcbc5b1a8fbd4c67620ffb9e039ce05c7fc65f77dae5","observation_id":"8dc97c24-3d95-4fac-b880-9b222ce41e04","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"British Machine Vision Conference , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:cf877563f490e9e5265ea47c03eab45aaf041faef4d191aa1b4ca2d650fcd40a","observation_id":"0bdda36f-2acf-4c5d-8f09-f40cef62fa22","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the IEEE conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:d0f124b7881be112232db4dec015d4b7a5978107edc7f52d9f9ea3bd0ef405ac","observation_id":"606755fe-cb78-4a01-9bd4-eebae91bc897","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1903.00073","last_updated":"2019-06-01T00:36:16Z","snapshot_observed_at":"2026-07-06T07:36:16.247146Z","submitted_at":"2019-02-28T21:25:45Z","title":"On the Effectiveness of Low Frequency Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1903.00073","snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"arXiv preprint arXiv:1903.00073 , year=","venue":null,"work_id":null,"year":1903},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"cited_paper":"/paper/1903.00073","citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:235a2c79906a66dd806efd87038ad441a7ad0485056c8974b630b042c2eec4c9","observation_id":"f8132e16-f407-4463-b057-7aac223d1e59","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:bab661f7929ab623e427eeb37d37a3d1201fc875b6e432f1b2c24e33214697bb","observation_id":"227e97e1-929a-4c02-af49-8208886bb5d3","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the IEEE conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:732a220840092a219b2c5a769836fd19b2fa6e3b3d9f0fb7678b4a68900841e4","observation_id":"4ea7e1ab-01cd-4c19-b3e8-e2df3fb2b672","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"British Machine Vision Conference 2016 , year=","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:802b5b19e31eddd3a1ce447ff31e9bd261026faa52ed4386ccd9afe27c80902f","observation_id":"cd847f85-2cea-4ed7-b341-425c5c029f01","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Joint Conference on Artificial Intelligence , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:b8267b4035ae1c9416dae4bc52056ab3f6a7e6918705d1367c9c5e8fc483ecef","observation_id":"d82ccfbd-ef85-424b-bfb9-160bdd37c33b","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:be4a0fa14b451acc2837eeabcc2aa02e33c73347ff3d157d78212a643dd18f1d","observation_id":"0e3d2a68-aedf-4a63-abd2-a3bb2475ee49","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":null,"venue":null,"work_id":null,"year":1983},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:d2e657c4f16c196ac8c9f1e0d5c484f4801c5f254c723f226b2fe3956c3c57bc","observation_id":"f00f5570-17d0-43d3-b895-fa47a21e4f82","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":null,"venue":null,"work_id":null,"year":2000},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:5c350926f5f32bb9370a81fdc6f3459bb315c472f21887f1b7daecf65a9434ff","observation_id":"767c7fcf-6b80-4036-9527-910df0cf7d62","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:fc69ba70131f56d9c3fe07a6f6e16365a6b35fa88478a0fb15da034e10fe9eb2","observation_id":"869dfcae-e589-4269-8819-6c93ea9b3a00","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Newell and P","venue":null,"work_id":null,"year":1981},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:f6b0c953dd3aaca3b3654e1b4860f81404c5300c0b45110439276b78890dd4fd","observation_id":"d0633717-23bc-4163-93a0-a8817dda7f6c","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":null,"venue":null,"work_id":null,"year":1959},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:e09a2c80cd43638f8ca9ed7aeacac0c96c9bd66d465790af9086c209069526f6","observation_id":"e6709b4a-b3b4-453e-b042-30d25546e935","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:2d8abf72bbdfb0abed012defb62711dfc0a463fe6bd7d9fe5d7b81eaa27b0992","observation_id":"69504980-a6e1-43c6-8ebe-d788d45de0b8","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"n International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:3b7275c4bd3bbb8dfab18f010c00d54d95d686b096f6dc30ccae87dbe95aaf79","observation_id":"a91faa06-0191-405a-b252-4b10038ddaa7","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:09eccbf7cd1c7fd5824e6522ec491d9f4585a75a2dcdc55b9e29565630813142","observation_id":"29c433a4-5219-4ae4-bb4d-acb97e2c1639","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:25efc25d6681d948533521383e4515e5baf357943632580e27aaad9e168a7bae","observation_id":"dd6a0b01-ea30-4d0d-82c7-b4f96935ab22","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:56c74024cb654f2fb1839b89cdebbbea76b169e1baf7e98765956e69d0fdb2c7","observation_id":"37308cd5-4b3c-415d-b638-899ad8a59e2d","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:eba465dbacebc18627bd25b2de1d80a60dfc6ad39c5ad1b0e09b750e50408127","observation_id":"73e63206-9606-4a7b-9c99-be3643e16dd2","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:04237552042035a5156fb9ef339ed0f56334c30c4b97be79f3942a43825444dc","observation_id":"5628295f-d1cf-4a0b-a1e1-95f7a796f227","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:64d43953db52b8a8a0f2be037a58ad4fef7773ecf18697f6e723a77315a25a84","observation_id":"a710d3ba-e3b3-44b4-a0da-7b4d21bdde89","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:cc54dfe2923f8744b49b37cc40df3cebef537233324ea7a8f86b2eb771d89193","observation_id":"e7d15cd6-c3ab-43d4-b033-e5ffa9fec4f4","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:800275582da9d200bbcf3f8e97683ad1d94cc9e370a68a91fa82cf9578365770","observation_id":"9c982379-9f92-4ec0-a568-9cb190b0df3d","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , pages=","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:39631ad6dc04557772f54038d342ec81b201eb324f9a5370f4cc2f5f498f25cc","observation_id":"4c69878e-2211-46ff-8929-5c3d857ad962","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:d85a2ec39fda2375d25d4c918684556d205d3de4d17c318f6079e5c45f73d926","observation_id":"e6b82f19-e565-49e0-93f0-02f86d7356bb","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.01946","last_updated":"2021-10-18T16:55:50Z","snapshot_observed_at":"2026-08-02T21:54:52.288981Z","submitted_at":"2021-03-02T18:58:33Z","title":"Fixing Data Augmentation to Improve Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.01946","snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"arXiv preprint arXiv:2103.01946 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"cited_paper":"/paper/2103.01946","citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:c5b3c3c9d6b45e0d1b0421d21b8abfefa037b63fbd0632b51fc5757e01795793","observation_id":"c9d46a08-57a3-4cc1-b75e-f6e1d28f4d78","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:9b6c3437cea77b0de6724efcb18b615933e3339351176766d621558cc1e12d0c","observation_id":"a36611bc-1068-4a49-a6bc-659afdd8b2dd","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:094a0347b3148f2121515f2502ff566323d098d2c2349598cd826e66827e26c8","observation_id":"60408aa3-7c1b-4dde-be3e-b0f90eca7d4a","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:8777cca727ffa59bc40345a1ec4e92e458566e7f58c1c1c803381eb95ce0ed14","observation_id":"5cf1d381-f462-4a48-8ab6-2f1eaaa7b006","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Machine Learning , pages=","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:0404008c09bedc8e7e1da126a3acfc9c5bc9d3197858bf760e0bbf17e56c658f","observation_id":"7b59b502-adda-42d6-810f-d7f43753c5e1","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:404a794cb708c5a7b37876c5e329163bea9cfcab2580627bd5ae491d9c2809b7","observation_id":"05a2f2da-0c94-4a11-8593-807e65134b66","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:2fec5db95c2445b6db39e499bf3ea3255ba7fd41ab396416c3cbfa63311b8c8d","observation_id":"e49d9366-f641-4f2f-b080-47f85e63dd0c","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:880178325fd2551455c765567dcbdc9ee086aa426775d0205b3c46058d5e82a3","observation_id":"37eb6a2e-ee77-4b22-af27-e8256bfb5f22","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:8ec1861b99b4ee43f538fbacb405118f77532f39232ef11c04ebc1c4492dd8c3","observation_id":"42206d6c-a5c0-48c2-9a83-4ef2d6643501","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Machine Learning , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:fe5569bf60d9ce3eeefe0f1973e91e9beec823ba26c2c94cfc58a27aceb3099f","observation_id":"79cb750f-0603-444f-9265-d02b3936ef69","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"and Wagner, D","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:d6479758ecb58e99542812681ea21bb1c619b6be7d0bdb973ccf9f58e32da3eb","observation_id":"367c48aa-aa8d-4469-910a-ab9691664e47","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Physical Adversarial Examples for Object Detectors , journal =","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:29cfe116bc69e879534606592f7734bac788b3655e87b31cbfe44f8ea4b39faf","observation_id":"257ca014-6d6c-4f22-9afd-2750002b8f11","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Computer Vision , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:a40c6885b11d28c7c776b13aa8b6dc5d115ade7cb353a10d4e6db7779100042d","observation_id":"1ab189b7-6f5b-4ad0-9ce3-1377452061e7","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"2015 IEEE international conference on data mining , pages=","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:4adee1811addbef75d0be83ba688f07e1d10bb8903ecd1a1b68c2fa056778c51","observation_id":"c3228e8b-597f-4ab8-9081-38eea4d4cc88","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Machine learning , volume=","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:8a6f19a41c7c8594b4da2fccad8d84635bcc8ce5b4b404579da61d68df09a2a7","observation_id":"c8bce311-e977-46fa-8958-f93ba1b3535a","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:eaa4f49a2b9662348e8772afe2387699b3c2bb8a1c996cf6f576a8cac3dc8181","observation_id":"b6a66e5a-ea9d-4f91-a113-ff8c56d0f958","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"EEE/CVF International Conference on Computer Vision , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:e279f92d24f8a93639771170417cc38e42453df702b8816c5f6dcd8ddbd8451f","observation_id":"f7ddadb8-f335-43d7-b519-ca9ec900c789","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:53f725782918b8cd0893ad34bb4cbf001c2cb5f94733b4752d801cac3b9b392b","observation_id":"865ec862-88fd-4c0a-bbfc-5167bcded66d","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"2009 , publisher=","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:feceb1d80117ce590d1379b6b25d63cc3804f967595da2e760b56ce78795cf51","observation_id":"709a0dcb-4cb2-49a0-b47d-1b00af845547","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"NIPS workshop on deep learning and unsupervised feature learning , volume=","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:e0d75a91b2b028480a2ae8079e54f34f35499d2b0c230bf44e5795580d591d10","observation_id":"96a4eeba-f4db-4073-8b8f-76d85b5bd8d7","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"2009 IEEE conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:b6619237fbd3ed2fcdc18e2f242781bb1a808e0717e1ce5441dd2f832a6469a9","observation_id":"c8fe476f-e0e5-4e00-a26d-2a774c8549f1","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.14431","last_updated":"2024-06-03T11:06:53Z","snapshot_observed_at":"2026-08-03T11:31:14.190344Z","submitted_at":"2023-02-28T09:21:12Z","title":"Efficient Masked Autoencoders with Self-Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.14431","snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"arXiv preprint arXiv:2302.14431 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"cited_paper":"/paper/2302.14431","citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:e9bae11020597eec617c79bcd376db495c3a8d1df1b54cda9a5ebc7a81a20ed3","observation_id":"147447ce-1e50-4d73-aa2f-554e2e3dc431","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:f0a66acd1538c83749a0bc08a43783b34bb48d92491d99b5864821ed449c1ad3","observation_id":"d35d995d-fbc1-4496-9a5b-e298d122a66c","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03670","last_updated":"2022-02-09T18:33:57Z","snapshot_observed_at":"2026-07-06T12:35:31.877365Z","submitted_at":"2022-02-08T06:15:07Z","title":"How to Understand Masked Autoencoders","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03670","snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"arXiv preprint arXiv:2202.03670 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"cited_paper":"/paper/2202.03670","citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:d495e5925f69ebf4d12cbab92d3018010ebac2b8062c8db7c3526392e6ae521c","observation_id":"5322c926-5363-41c9-9807-ece515f2b478","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"IEEE Transactions on Neural Networks and Learning Systems , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:004deeb54780b1f8aca4855b96645c1d1e895bda568f9520036080e76720a8f8","observation_id":"9b3673b3-ff3b-4306-8405-65040ca069e6","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Machine Learning , pages=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:995bb52315a5a7ae0b9a95d7fa59d757b9ed1e650f8d7d0b33593f6e1a49dd5e","observation_id":"6a317ead-5645-452b-a9b2-fc84808d96d7","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"ICLR , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:3f08a4f7453ac6ca2f95b876c26fa4e4c1667e9220b3fd01147153e2d1a40843","observation_id":"3d9f452e-7ad6-4ed6-8e84-293afeab7734","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:20de0778510e072767e6f634a3c65b0c40adb0908196d2cc6e648855d6c182a2","observation_id":"90e64c30-5cb4-4e84-8a6b-dbc5f700b004","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"ECAI 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:e2d1c1429147b3f48f98797de71b6c4e172a9d0e67bda601fc02808dbbf6c258","observation_id":"c79f7669-47a1-49c6-af08-8ba8489fa2f8","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"ICML , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:54ee42f22e58b9246a85e7ee18840f12116c9530ffcd65f92aefcb202cb96419","observation_id":"3eab1de8-69fd-43d7-8372-027f0cc735e9","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"ICLR , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:79610354146b5dc441a33868d3553436d7cd408aaf9d4a01045c49d9293abcfc","observation_id":"321c5fd3-565d-4a5c-9a4e-bc5c3c070058","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"The Thirteenth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:f3642b195c7130f42874e38d096887e550ec82895a5e161608872655c2765086","observation_id":"203c3e7c-7262-41e1-9ad7-8ddff48a301c","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:cd168a89c29ed55134c1e1d07a48da354a6ce72817ddac22cbfa39d1ade1b71e","observation_id":"a61baa8e-495f-44e3-b316-dc4cb04cc2e2","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"European conference on computer vision , pages=","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:fe5a86fa8011b97ca42c91ca3d4f799476e5af647839aa6a2cdc1be3a9861829","observation_id":"f502d686-6536-474a-826b-d7c5c7ee84da","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International Conference on Machine Learning , pages=","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:84d0378e64ccbeeec22116e2b98ff311726e5b9785112499e5685c82b0ad8bee","observation_id":"3cd47a9d-f480-455b-b762-d1c5d1399be2","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:449f6a4c40add0c03b0c678cd010006546bff072f6fdb06b7d7a45e56e433480","observation_id":"5647618a-2c95-4394-8bf9-41337dee7762","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:015b27b9bede2d03980b68672f8733bdc664de535e0914bf614668c2abcb5d6f","observation_id":"4d6f28c0-b202-4718-bf91-5639c1e75fc3","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Transactions on Machine Learning Research , issn=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:3d2d042e05c19116b8716fac1d14fe30b12d8b8e07ba455ca2916f695d50a19b","observation_id":"d666854e-4bac-4e78-942a-824dc6bd37b4","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":", author=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:bc680fd09df874c418479b5099904a47733591af2cbaed373576db978d14441c","observation_id":"e9101fe8-c296-4e67-bc85-3e42eec1467d","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"2014 , publisher=","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:217c6a1df47f3627ba56141d0a0a4d42a31d71b8b7ae796da7a6f471911e48ea","observation_id":"8f41e529-7ff3-40b7-a64d-fed40aeecaa3","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:806cd2c561aee0cc27618659b2f59d5ff74afab7cffd4cb97d8e0e12c394c449","observation_id":"81826502-df0c-4d31-b9ff-56f8470b3667","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the IEEE conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:4f6ded94615e396aa43d1350cff2cc3b4547518088e0518734a0756431230308","observation_id":"3834ba18-13ad-4249-8f74-96a951dba5cb","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:95a5640450602c4c6041a44408171697f5c41936d3df1c9c3b43b5cb2a1db670","observation_id":"c29ae4f0-f914-4f7c-b71c-b7280206607a","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:2029c51e5582d6c795350d0edcef218c9fb2975588cfcdf3112e2bbe1e823c83","observation_id":"4f2e89a8-492d-454b-8a29-bfc90c4d9e49","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T18:54:16.790539Z","title":"Transactions on Machine Learning Research , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-07-11T18:54:16.790539Z"},"links":{"citing_paper":"/paper/2607.04474"},"observation_digest":"sha256:f6cfa418e183912a111aa0122ef0f4e0dbb9dd814d645aef8cf71800c7fcdae1","observation_id":"54415561-fe40-4b44-9308-c67efbad29c8","resolution":{"observed_at":"2026-07-11T18:54:16.790539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.04474","last_updated":"2026-07-05T19:38:18Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-30T06:47:52.522512Z","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification"},"reference_resolution":{"displayed":83,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":82,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":83},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 83 of 83 outbound references and 0 inbound Pith citation observations for arXiv:2607.04474."}