{"as_of":"2026-08-09T03:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4110a481bcf509f4ead5eb017faee58642d838983ea18c6870f5a769fa64e195","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-10T15:22:10.143336Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.07922/citation-record","integrity":"/paper/2607.07922/integrity","json":"/paper/2607.07922/citation-record.json","paper":"/paper/2607.07922"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.423515Z","title":"Quantifying atten- tion flow in transformers","venue":null,"work_id":"27480348-a041-49ca-a111-234d3b89eda8","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:b6f04aa367a17f3518b1227f0e71023a1c78244edd4294c0042d4bca05790a34","observation_id":"8d1a9d5c-2463-4f28-bd14-8943eba69c58","resolution":{"observed_at":"2026-07-10T15:27:20.424705Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.03734","last_updated":"2021-09-20T11:48:45Z","snapshot_observed_at":"2026-08-08T07:39:46.839094Z","submitted_at":"2021-06-07T15:59:49Z","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","version":2},"cited_work":{"arxiv_id":"2106.03734","doi":null,"metadata_source":"pith","pith_arxiv_id":"2106.03734","snapshot_observed_at":"2026-07-10T15:27:20.182623Z","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","venue":"cs.CV","work_id":"84253d21-88ed-4efb-8d95-c1edcda7907c","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2106.03734","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:6a59451b339efadb91eb55762f6c3214bb0ae7dd2616955e6253cce31594f563","observation_id":"e9682c58-0f3d-402a-bdc4-5761a04a0a42","resolution":{"observed_at":"2026-07-10T15:27:20.183849Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.02797","last_updated":"2021-10-11T14:28:50Z","snapshot_observed_at":"2026-08-06T10:44:23.738492Z","submitted_at":"2021-10-06T14:18:47Z","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","version":2},"cited_work":{"arxiv_id":"2110.02797","doi":null,"metadata_source":"pith","pith_arxiv_id":"2110.02797","snapshot_observed_at":"2026-07-10T15:27:20.180156Z","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","venue":"cs.CV","work_id":"62290013-27ea-435b-9035-481a21587445","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2110.02797","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:eae36ff21c87989e9e5873233c09c6ea05e3112beda9e7717932029a59719e0d","observation_id":"425b6722-8c34-43a1-82ef-756de5da4623","resolution":{"observed_at":"2026-07-10T15:27:20.181376Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.429120Z","title":"Under- standing robustness of transformers for image classification","venue":null,"work_id":"938ff8bc-2ad3-43c7-a97a-51454835581d","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:8ebf3942d73506ac113fbb74041169b2d6d0b679165859edbdd128b1cfe9db0f","observation_id":"d2b5d8fa-c979-4e4b-b7f5-e13f2d65c8f0","resolution":{"observed_at":"2026-07-10T15:27:20.430343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:ad027da538fa8731d5d0f5560561fa7b134eb837c55f8afe1a3deeb0dfe5491e","observation_id":"d8c7633f-37e3-4426-bb7a-a3917648b4ae","resolution":{"observed_at":"2026-07-10T15:27:20.186151Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.418039Z","title":"End-to- end object detection with transformers","venue":null,"work_id":"3967f40b-a1ef-44a1-88af-d2bd9e567592","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:85b7a160bcd019e3c4faea58b7b95b6a2ebbd4bf6b45a369ad3474453f5963f7","observation_id":"1fcab95a-32bc-4bd3-8481-540ff7b421e9","resolution":{"observed_at":"2026-07-10T15:27:20.419197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.416324Z","title":"Transformer inter- pretability beyond attention visualization","venue":null,"work_id":"b51a6bba-d222-4ac2-8104-c457f986365d","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:045cff2b3060f2bf54806022ab4f4ec4b48bfd545f1b8cf7298146ee18fda133","observation_id":"de1e4036-1736-4608-900d-a2ff539a9865","resolution":{"observed_at":"2026-07-10T15:27:20.417493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.419772Z","title":"Vision transformers need registers","venue":null,"work_id":"92c38957-665c-4888-bb03-300180a1fd05","year":2024},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:50dbf6825de1e82f04150bea644f153dde4cb87aec02a37dc40ae9ad462dcbdc","observation_id":"0483a99a-67af-428a-b2b3-753cc44ac255","resolution":{"observed_at":"2026-07-10T15:27:20.420936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.410840Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"5a7d3082-ba95-41d2-9426-3c9b9e31f3f6","year":2009},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:64ae2cae365491e3095f3fa4677079c0ce197735360347a6a4a7d5bd4e1e84ce","observation_id":"d7bc2a45-8bd8-40ed-a02a-8109befa1319","resolution":{"observed_at":"2026-07-10T15:27:20.412047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":"2010.11929","doi":"10.1175/jcli-d-22-0357.1","metadata_source":"pith","pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","venue":"cs.CV","work_id":"e96730e3-129b-4db6-b981-15ab7932e297","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:50f7590fe499b827222710faab3096a81ca40b2e5675b90243035e80e7ec7877","observation_id":"9c7f05e7-8f98-4765-b2a9-7412772b557f","resolution":{"observed_at":"2026-07-10T15:27:20.176380Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.421666Z","title":"Pruning one more token is enough: Leveraging latency- workload non-linearities for vision transformers on the edge","venue":null,"work_id":"5b405f44-1865-4fee-bffe-5bb65993479a","year":2025},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:7f02f53f2cafd79d6a1435454edcf646c75324c59a0fee4207a75e3597b1f967","observation_id":"54aa7663-d460-4cc9-b3e2-e75313e9c4cc","resolution":{"observed_at":"2026-07-10T15:27:20.422918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.427223Z","title":"Patch-fool: Are vision transformers always robust against adversarial perturbations? InTenth In- ternational Conference on Learning Representations (ICLR 2022), 2022","venue":null,"work_id":"22299b57-2b8b-4de5-a6c3-4973ed8fc95d","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:95455632e26c6142979ed07e5eae58ec095dc99ad114682f645948d8348f7d84","observation_id":"de4d9fef-3609-41c9-8c87-965a590ddc4e","resolution":{"observed_at":"2026-07-10T15:27:20.428533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.432669Z","title":"Are vision trans- formers robust to patch perturbations? InEuropean Con- ference on Computer Vision, pages 404–421","venue":null,"work_id":"da25b14c-0987-4515-a780-34974fd3acdd","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:f948ba9347dac9b2b141ae1dc8301a35fd5ec9d0e9308795fa4782d3bd669839","observation_id":"fbfc4c1a-0b07-411c-80f7-49774fef8d7b","resolution":{"observed_at":"2026-07-10T15:27:20.433917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.405336Z","title":"Vision transformers don’t need trained regis- ters.Advances in neural information processing systems, 38: 56557–56595, 2026","venue":null,"work_id":"fe6622f5-b893-49b3-aae2-af0803518bc4","year":2026},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:5b157f06d7489eda9917e859f77e2caf4de0e8fc8611cd75aa062f4a2877cf37","observation_id":"7f69509a-526b-41eb-82b3-3a69e9edb973","resolution":{"observed_at":"2026-07-10T15:27:20.406599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.414387Z","title":"Seeing isn’t believing: Context-aware adversarial patch synthesis via conditional gan","venue":null,"work_id":"9219fa07-884c-4a68-aefd-8f60cfdcb135","year":2026},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:5f597cc897ac9dccf4d5fd771b9285550620314e376f2f07ceebbe1632294b11","observation_id":"0e6ab187-ad9a-4935-9d74-2e1e1772a66f","resolution":{"observed_at":"2026-07-10T15:27:20.415581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.14397","last_updated":"2024-12-30T00:12:51Z","snapshot_observed_at":"2026-08-04T15:14:42.793540Z","submitted_at":"2022-12-29T18:07:56Z","title":"AttEntropy: On the Generalization Ability of Supervised Semantic Segmentation Transformers to New Objects in New Domains","version":3},"cited_work":{"arxiv_id":"2212.14397","doi":null,"metadata_source":"pith","pith_arxiv_id":"2212.14397","snapshot_observed_at":"2026-07-10T15:27:20.177697Z","title":"AttEntropy: On the Generalization Ability of Supervised Semantic Segmentation Transformers to New Objects in New Domains","venue":"cs.CV","work_id":"3a9078d8-44b6-4101-b124-fa9d2ee4333a","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/2212.14397","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:0298ef36504a2bf867fc0f6cc054dd7f1686d3a88783ee472a9e6055629cde96","observation_id":"5d813680-2fdf-4db5-be28-831bfa53f774","resolution":{"observed_at":"2026-07-10T15:27:20.178950Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.434487Z","title":"Under- standing and defending patched-based adversarial attacks for vision transformer","venue":null,"work_id":"62aa20f7-6485-4869-910f-e817a3fcbef9","year":2023},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:8941abcea03e4db0a5633b8a0967a2f5866a298c9a503a1011476b8c78c9f5ed","observation_id":"baeab121-b174-47b5-81c5-8d0f0170d1e1","resolution":{"observed_at":"2026-07-10T15:27:20.435712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.430919Z","title":"Give me your attention: Dot-product attention considered harmful for adversarial patch robustness","venue":null,"work_id":"2fa8e91d-a168-4f81-812b-991fac1b23ad","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:913cce684c3909d261bf53c869db146fb63240fae124b62d39e2e7cf91590aca","observation_id":"e2b32caa-1369-42d3-a340-e00dcde33fcb","resolution":{"observed_at":"2026-07-10T15:27:20.432112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.403598Z","title":"Understanding the effective receptive field in deep convolu- tional neural networks","venue":null,"work_id":"6bc5c735-f153-4085-9b02-b414d93b6dee","year":2016},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:f8507ab96ac7f7d62d7fd5a4e3ab71111c6ad82aeb4128468d4a1ed1788052d7","observation_id":"7a727965-f7c9-49c9-ba4e-18497d3c42da","resolution":{"observed_at":"2026-07-10T15:27:20.404807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.401877Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":"bf564611-d5a7-47db-a5a4-766112c48ee3","year":2018},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:c6ec585b5da0b2e5ad3d4003a3be313234a893160b8886a6f2095d5ffe5bbc4d","observation_id":"17cbabe0-cc11-4de9-8d9e-30dfe8263679","resolution":{"observed_at":"2026-07-10T15:27:20.403058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.407157Z","title":"Defending against adversar- ial patches with robust self-attention","venue":null,"work_id":"40589603-d772-4c93-b7d6-e4b66f88e7f3","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:67135ac183fdff5786b89389a95722cdd2c2f9f8fc01d888c1c48812614078bf","observation_id":"dac19eb4-6100-4081-b757-9e6f7d8fc00c","resolution":{"observed_at":"2026-07-10T15:27:20.408339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.398287Z","title":"Intriguing properties of vision transform- ers.Advances in Neural Information Processing Systems, 34: 23296–23308, 2021","venue":null,"work_id":"95409a3a-9a54-408e-a319-55d2f11f22d5","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:c45f5533aef0ec6aa314aa8d3845f80b742b2bdecc77cde2ea7c9e75e7f0ef5e","observation_id":"f6617190-1743-4c2d-aa70-3a1b0a343fad","resolution":{"observed_at":"2026-07-10T15:27:20.399568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.412618Z","title":"Dinov2: Learning robust visual features without supervision","venue":null,"work_id":"29b28a03-85be-4385-9d88-51ca7feb2e45","year":2024},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:12715230fdadcd0ea0582e3c0a0e901751c17fd38aa04e17d6ae41d02ce70f83","observation_id":"d79a12c0-2131-476a-9648-153abb7e7991","resolution":{"observed_at":"2026-07-10T15:27:20.413805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.394583Z","title":"Vision transformers are robust learners","venue":null,"work_id":"5a4668a9-5c40-459f-acb0-42f134a2ca01","year":2071},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:3c4bdba353cde256cf7759207475ba18afb4e16b9c14c20ac9dbe4a674a148d4","observation_id":"1663c546-5666-49ef-8a0d-a7a47ef5e6df","resolution":{"observed_at":"2026-07-10T15:27:20.395777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.396321Z","title":"Benchmarking the spatial ro- bustness of dnns via natural and adversarial localized corrup- tions.Pattern Recognition, page 112412, 2025","venue":null,"work_id":"b823476d-1c0a-4a3f-b630-901ac9479b5d","year":2025},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:c37547b9b6b5a42b2d9d3c3b1885ff7d24f8000819bdd249b9137ee6ab559c35","observation_id":"e2f31529-108e-46fb-a413-cafd6182152e","resolution":{"observed_at":"2026-07-10T15:27:20.397584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.391100Z","title":"Defending from physically- realizable adversarial attacks through internal over-activation 9 analysis","venue":null,"work_id":"974f8d3e-7091-4c75-94f0-6b4821259eeb","year":2023},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:4ce7d2c62ab204e528d8d4bf4091d80fd6e371dd03bf005aa1a752f08bffb87b","observation_id":"7932d79b-edef-4e5f-9dd8-81ab8da5ccb8","resolution":{"observed_at":"2026-07-10T15:27:20.392235Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.389371Z","title":"On the adversarial robustness of vision trans- formers","venue":null,"work_id":"da1f9f7d-51e7-4dc6-a711-2ec1c48aba0d","year":2022},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:9ff277eb91765d3794bf9babadf42aeaf4a34a4158cfed18d03b8d4632b071fb","observation_id":"5ded3ad5-8e1f-4480-b47f-5934d82078c7","resolution":{"observed_at":"2026-07-10T15:27:20.390556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.400160Z","title":"Attacking attention of foundation models disrupts downstream tasks","venue":null,"work_id":"2126445c-665f-472e-80cd-efc2367b4ff6","year":2025},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:4ccfcc7ea21d2e3c27aed237e3d759bb39aba7c57dbe326a5e54fc28952470c2","observation_id":"08074ba9-da57-456c-aea4-ec43fb1155e5","resolution":{"observed_at":"2026-07-10T15:27:20.401341Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.387650Z","title":"Localizing objects with self-supervised transformers and no labels","venue":null,"work_id":"fb934ed2-f59a-41c6-a1f3-c14bae0e8d80","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:08d03c70cda3a8758a234f858498220856ba64f7cb1a1d826b8bd7bbc3f70eb0","observation_id":"a1ee95f1-37b0-4c64-8ea9-b805b4a18ebb","resolution":{"observed_at":"2026-07-10T15:27:20.388832Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.425249Z","title":"Segmenter: Transformer for semantic segmenta- tion","venue":null,"work_id":"fd3cc148-6978-4f53-9dce-a5b9ba879e3a","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:87d03d60820c547780c4dec6dddaceae4bebebd992682941d3c1058f2899fdb9","observation_id":"32f650f9-7add-43d0-a89b-1b4c5d18c3d6","resolution":{"observed_at":"2026-07-10T15:27:20.426428Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.385757Z","title":"Training data-efficient image transformers & distillation through at- tention","venue":null,"work_id":"5415aec4-fe6b-4a28-9de1-819910e93345","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:b76aed203343105c174c9c53d2bce580ae75364b42eb1b4059992ee3bc46513a","observation_id":"38969bc3-4d76-4d72-aee0-72e803af1f37","resolution":{"observed_at":"2026-07-10T15:27:20.386967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.392773Z","title":"Attention is all you need","venue":null,"work_id":"f4f211f6-7f43-42a0-ae0b-df15f7ece604","year":null},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:7d35c28e39afa25da20fd3eaec01c5d675c1893ca436d5b444ba5c65158ea16c","observation_id":"0a8629d7-08c5-434b-a095-ab7272eb64af","resolution":{"observed_at":"2026-07-10T15:27:20.394019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.408877Z","title":"Patch ranking: Token pruning as ranking prediction for efficient clip","venue":null,"work_id":"2c37ec01-3290-495d-82f7-9bd1e048c1a4","year":null},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:b8df2fd58f5429bdf30a7d0702fc7103a5abd8af2b1c237900cbebbd98c78523","observation_id":"075c3767-3c98-4186-bcd4-9b88c70c2bfd","resolution":{"observed_at":"2026-07-10T15:27:20.410280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.384011Z","title":"Adversarial t-shirt! evading person detectors in a physical world","venue":null,"work_id":"18c2b291-cc3a-4393-8e30-0c5aad515f62","year":2020},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:bdf32a0919632a493512b005752a08e2d3407c2d8f20074f271d59a04f6507bd","observation_id":"919b240b-068d-4f8f-aaea-75f14d8c09a8","resolution":{"observed_at":"2026-07-10T15:27:20.385186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:27:20.382066Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","venue":null,"work_id":"b60beef0-6502-4bd0-b07b-54c104776ad2","year":2021},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:065e180ab03c4ff2a59481011addc8b148b95c62a93a00c528557fa085772742","observation_id":"6f9ceb83-ff91-4379-9f0a-667c2b174746","resolution":{"observed_at":"2026-07-10T15:27:20.383382Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T11:00:23.473378Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":5,"verified_fuzzy":29},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 0 inbound Pith citation observations for arXiv:2607.07922."}