{"as_of":"2026-08-09T00:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b9dae7a1bab0b0d86de4544daa3bd511f8267e9b3f0e064db79bec6ac29d9d16","coverage":[{"denominator":68,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":68,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T07:06:53.439022Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.11095/citation-record","integrity":"/paper/2607.11095/integrity","json":"/paper/2607.11095/citation-record.json","paper":"/paper/2607.11095"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:812c3aeb8bc8761cf594322657c6985fc920cf660a4982da32c7eac02b6125a3","observation_id":"1fde53a8-30ab-4306-9457-c2d2d384e314","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:f96895a6ea125db1ebcb6299a60bc22e68beff2c967b60d8569c1140221ffce2","observation_id":"52437172-076a-49c1-9900-7c363396bdc6","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:b5b385048c1533eda3fc832db6694049a3529bf8fa4b77ba4924f147c90b93ff","observation_id":"ffe138bb-cccf-4b29-aaa1-f5992100586b","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-07-06T05:07:10.046451Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"URLhttps://arxiv.org/abs/1608.04644v2","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:90cf87e29b53413dcce1ce4baaa0adfad70117b30592c41cc3c55a39ca491be5","observation_id":"e3a7fb5d-fbe4-43d2-8a9d-ffe9eab223f7","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:70bb3bd9092457624a81ab0cf057b3ee193f688fadda8261c391ca481b26cd37","observation_id":"14758e21-6ff9-448d-ae10-9f6afa0af4c5","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"1080/23746149.2023.2165452","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:fd2ef66bc2b2e9a9ec6e00ab6a4627b05755849608ac57acd5f2f789fb239a37","observation_id":"49a551f0-a2d1-43ba-a957-ccbc40ef4aeb","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:322364d933468258e12f3e8c7627187b33dba6fb5e3c5555572e611a158ef0b1","observation_id":"e425996f-880e-4403-b69f-86b26f5cf9ab","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"1103/PhysRevA.103.042427","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:8b95a139aebb1d059d861a057ae0eaeded54ed7ceaf6a6b73baec796624f97a2","observation_id":"7c9e0fd5-f082-461e-9d70-8b112118acb4","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.03063","last_updated":"2018-11-06T04:31:04Z","snapshot_observed_at":"2026-08-08T14:50:27.758263Z","submitted_at":"2018-09-09T23:57:29Z","title":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1809.03063","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1809.03063","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:313ab9b2e55437038c1f343c665e8b8d9de4561ed3e61f2540b6f094556e1c48","observation_id":"8509ae81-712f-49d1-a83c-9f8382377736","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:1ff1455680ec58253df2fd50048e6ac48f69ad46f3c1d6e269739f8bbd7375fd","observation_id":"b359beb8-c944-448f-8ede-4d3a5641b104","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:1c6d10a54033431c9169b6be2b5597e90b75db6b72ed4274e20c1f57ca5b3b49","observation_id":"e55f67e8-52f0-47f0-9add-fe71c1d17c18","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"org/abstract/document/10545406","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:a1aa63cfed67f148f690db0a1d15ee5acad4bc1dafe224fbf7b6609c8d0994c9","observation_id":"75ffb831-d8b0-4254-a515-8c28dfa5aea2","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2045},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:fcce544ee36d6089c5b69f42905addb50658b879d9e80641d65e940633b35c42","observation_id":"74b6f6af-3ee9-4dd4-a982-525b9bd3edf3","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16714","last_updated":"2026-01-19T08:42:05Z","snapshot_observed_at":"2026-07-06T21:28:33.821060Z","submitted_at":"2025-05-22T14:18:14Z","title":"Experimental robustness benchmarking of quantum neural networks on a superconducting quantum processor","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16714","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2505.16714","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:10970b00954ec844c008b9f7bda1831631b98ac377861826cd883847cd789e8f","observation_id":"f9230403-e215-45a9-981f-cb43d8642ff1","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:a748d18aa0ef6623d961ca104d8f692feb1c206f6d750406beac1a050e18d4a0","observation_id":"fe86d80c-5365-480e-875a-5b41831b8b97","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:0f7a142b57db2ff88b71f09afbdf0025814bee671d645a2d3c4d3a7e92f3b76f","observation_id":"d76afa58-6761-4976-a302-cccc35ea3fb2","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:81a0e25ad119d0a6f12d7499dfc1c1420427208ead686057a41e9f9abeab7c6e","observation_id":"81bf9698-04db-443a-8889-70006d78e643","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:bbecd64b0b653c53bbd2fd900292c5c1c72423d4e8e4e8d802fd60bf7bd13e98","observation_id":"2978e41c-58e6-4b0d-aa77-86e714366026","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:0788639a4b01e1a1a23659163db44a3685a8318be7ae6236787f5c6acfed7d52","observation_id":"9da8c2f9-fbbe-4a32-b9d7-d9aa72dbbcac","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.00044","last_updated":"2024-03-14T18:42:01Z","snapshot_observed_at":"2026-07-06T16:00:54.505346Z","submitted_at":"2023-07-31T18:01:15Z","title":"Challenges of variational quantum optimization with measurement shot noise","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.00044","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2308.00044","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:0805db73b6719e43f64edb204351171ac39c1c57e8ea19301ed0196c0cdd7ab2","observation_id":"ab20d97c-c134-4c8f-8a59-5d6ad8cd234d","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:31534d6dc15783fdb6dcb1f3b46e65475d7d071f20faccea3b7a3dc8b966fb7d","observation_id":"50becbe0-d5d5-45a0-a9f1-a78f59e4477a","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.06484","last_updated":"2022-10-12T18:00:00Z","snapshot_observed_at":"2026-07-06T14:04:25.335073Z","submitted_at":"2022-10-12T18:00:00Z","title":"Fast gradient estimation for variational quantum algorithms","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.06484","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2210.06484","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:d3adf8676ce97fafd8b6e30ad112d7a9bd531f5a9e4cfcc8d5070e09717b28d7","observation_id":"d7d1a3b0-e867-4608-9dfe-fff5990beedd","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.15791","last_updated":"2023-12-25T18:58:20Z","snapshot_observed_at":"2026-07-06T17:07:56.107331Z","submitted_at":"2023-12-25T18:58:20Z","title":"SantaQlaus: A resource-efficient method to leverage quantum shot-noise for optimization of variational quantum algorithms","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.15791","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2312.15791","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:f0c52efae1dff8ef8097fad3cdc95e2e617086cd084291049e055dbc842d28a6","observation_id":"d8581ea3-6fda-40a4-9e97-95103923be25","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:d536b2c549b73a7372b9c3449c68274d119223185130b307b1eada5e78170713","observation_id":"c27934e1-dc99-4487-9b7b-a4b9a39e5d48","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"org/document/9605341/","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:21ee4ef16d78640191572541276a8520530238f7b86917874f6955daf068f7a2","observation_id":"530eb3fb-d7e7-420b-98fb-7e748b5c33bb","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:0ed44a7d80579102cadda5373eb3adff2b3014e74cce14ed84f71f8aef8eeaf6","observation_id":"7b36fd24-edd4-43e0-9aba-bdbcb5ecf250","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:23f26f41a9829c5f9e1f90ed3ba0c03ea22ccf60cfe0f13708229942b4e8a42b","observation_id":"00a08c74-15d1-40bf-989a-1160d47b9fb6","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00851","last_updated":"2018-06-08T19:04:49Z","snapshot_observed_at":"2026-07-06T06:07:26.411116Z","submitted_at":"2017-11-02T17:59:24Z","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00851","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1711.00851","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:20f8a116cd533788a3a677c4d7c986e43db9e1f2386fc4e28f6d11bb49d395df","observation_id":"64b2b158-4a41-4e23-91b7-97599cc1369d","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:dc130117d67142269c2844a545f49f9b58d04c944cbb3698e5668d3f00e677af","observation_id":"886ece2f-6733-4d8a-b55f-5606f95b7b19","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:6f973d7f96a5b8d30ac4f2e53b004c294e2417619373751ca497de83306da97b","observation_id":"1acb79c2-ba28-4241-8a3a-bc44060dcf25","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18316","last_updated":"2025-05-13T11:02:13Z","snapshot_observed_at":"2026-08-08T00:53:22.130055Z","submitted_at":"2024-06-26T12:59:37Z","title":"Trade-off between Gradient Measurement Efficiency and Expressivity in Deep Quantum Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18316","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2406.18316","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:fac1a72c0fa70db5e8d2189e4bd6b0f1b85058a4383d4b00bb73adc2fd7f2b72","observation_id":"106c02f8-a30c-49d4-825a-b74ffcfd0e22","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:666df48402a7bb91c7815d9e2c765ee43660f11f1660f9b175fb366cc60d5bad","observation_id":"6099d0eb-e3f6-4161-bb24-541e8201c18c","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1088/2058-9565/ae73ad","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Quantum Science and Technology","work_id":"7cf2aedc-e9aa-41ad-9cf6-67d4b8a68e60","year":2058},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:3ba03862e015da5a50cc14f4f46285a7f76677fad8650b9dde8393e9db84ed5b","observation_id":"f3d4563d-c2fa-4e9c-826c-d8f6faabaf45","resolution":{"observed_at":"2026-07-14T07:10:21.730005Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-14T14:49:45.253574+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T14:49:45.253574+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:31d1358ab5c97b6a9ee750ba4ca5fbefb1b1214721561e747d69b759078eb6b1","observation_id":"b1424857-a83c-4e77-b42c-a903c52fce3d","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.13981","last_updated":"2022-11-25T09:45:35Z","snapshot_observed_at":"2026-07-06T14:22:56.317345Z","submitted_at":"2022-11-25T09:45:35Z","title":"Gradient Estimation with Constant Scaling for Hybrid Quantum Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.13981","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2211.13981","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:65e0eb423f52244e35756d7a1102d50f3626a7a97a25a4e161b8332cf06fb178","observation_id":"a0dc61aa-9223-4437-ab99-59230d55eee2","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06935","last_updated":"2024-08-22T18:22:30Z","snapshot_observed_at":"2026-08-07T05:04:49.066136Z","submitted_at":"2023-10-10T18:45:43Z","title":"Quantum Shadow Gradient Descent for Variational Quantum Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06935","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2310.06935","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:b950bc1202f2ac39b80a3c37b515599f7edf2855956c71ba1ccb917bc68d762f","observation_id":"be7c94a9-4506-499c-bc3b-741552672f66","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.01389","last_updated":"2022-02-09T21:20:42Z","snapshot_observed_at":"2026-07-06T12:34:00.262764Z","submitted_at":"2022-02-03T03:20:54Z","title":"An Empirical Review of Optimization Techniques for Quantum Variational Circuits","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.01389","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2202.01389","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:a82832f9aa0bd7774e9afb7c45cb2601e237091d447ba1eaea85cf6c6ea97c41","observation_id":"da344879-e763-4387-9955-717838b0fe60","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:8a908ae8dd3e94bb101495f253bc9a4be213454ca9cfdf2f2e11b1cf6bd87f82","observation_id":"4b9225c6-6780-4a2a-8cc4-72585c83fd99","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:a51e52039fe49398a53db5d55da8d19c8a6c17153e424b142879167bc3677bac","observation_id":"d5cfa982-9b2a-498f-845d-0168aaf95bc2","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1707.06618","last_updated":"2020-10-19T02:57:22Z","snapshot_observed_at":"2026-07-06T05:52:00.147562Z","submitted_at":"2017-07-20T17:18:11Z","title":"Global Convergence of Langevin Dynamics Based Algorithms for Nonconvex Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.06618","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1707.06618","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:6388806cd1ac4f0b787fae6cdedea3f5d21af2044a73db1d309c81c7f312e1fb","observation_id":"314fd9e7-0561-45ce-b5b8-a8a24b80dfef","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:877284320fb94db24838deaf3166576e975d8e8ff4092bb1b59b857d52387da5","observation_id":"51f2c002-1840-4ac2-a8b0-48697a6e0bcb","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1209.2434","last_updated":"2012-09-11T20:37:02Z","snapshot_observed_at":"2026-07-06T02:55:24.800852Z","submitted_at":"2012-09-11T20:37:02Z","title":"Query Complexity of Derivative-Free Optimization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1209.2434","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1209.2434","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:db7dac1b28073800024014e7970df4e758169af6690191b8052cfde89fef9d17","observation_id":"1e664985-25bc-43d7-87ed-a8efdd13bca3","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:bb4bf09435d2fb80c84f3a8f8840895b9bd8f657805056748090fe8a579bb2e3","observation_id":"c95a61dd-6e1f-469a-b672-02ca44999570","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1907.02085","last_updated":"2020-06-04T14:01:23Z","snapshot_observed_at":"2026-07-06T08:04:56.737336Z","submitted_at":"2019-07-03T18:00:50Z","title":"Data re-uploading for a universal quantum classifier","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.02085","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1907.02085","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:3508e6d50fd7cf69364e853372443522be5bbb4a2fcdcd6199b2733315b4b756","observation_id":"558f77cc-efd8-4a68-b6ba-95f897529d54","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:5f7d1cba8094f5cbe7ad7eb898d5a7ee84db273067018ac49382ba408fd7170d","observation_id":"188c0d5b-c89d-4bd5-8221-d26c4f2853b0","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1804.00633","last_updated":"2018-04-02T17:23:49Z","snapshot_observed_at":"2026-08-09T00:18:10.198091Z","submitted_at":"2018-04-02T17:23:49Z","title":"Circuit-centric quantum classifiers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.00633","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1804.00633","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:4c70b209c4133ce50619614c70ad02981b35dcced757aff0429b7d1657061ad2","observation_id":"ef942ef0-9853-4b8e-a0c0-4b70f7830e06","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:fc7fff2e461fb880933b2ec1706b6ab5e57cb85d467356d22fd438fb2143d649","observation_id":"62ad374c-6e6b-4059-8ad3-bcb1617a1c17","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"1103/PhysRevResearch.2.033212","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:042f93fdb74967d22fc6c1aff961b4fe49e0a8bfffffc98cec35bb13f3d932e8","observation_id":"e15e9712-3e5b-45b5-9adf-f5f5d8d9c66a","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1502.05767","last_updated":"2018-02-05T15:57:57Z","snapshot_observed_at":"2026-07-06T04:09:45.600447Z","submitted_at":"2015-02-20T04:20:47Z","title":"Automatic differentiation in machine learning: a survey","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1502.05767","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1502.05767","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:107d807af5737f943b37610be36f4f9b70836e3f7cb4703e2d9e8307599a7f19","observation_id":"2e606866-e6e0-41c0-a7d8-90a4e6c491ac","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:de438339be69a16b892c6923bd89ca0fd04a39b3d6dd1a6205ac43689bdd0c76","observation_id":"8f14d710-7b95-4056-9f91-c2e0b045d4fb","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:264cb1a2fbf951e97dafabe63625a95f765e0bd7b4f888c038cb78f89006c33c","observation_id":"e05f50eb-34c2-4db9-b47b-ff57f479fd2a","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"cambridge.org/core/books/asymptotic-statistics/A3C7DAD3F7E66A1FA60E9C8FE132EE1D","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:5ea68216c49bc0d6f77fb54d74cde2b4d649fa99672174e1724040af068fbfb5","observation_id":"ba8a0eb5-1b17-4787-9152-99b2e7b631c1","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:1db885b7eb59337d916bd4aee09d05cf373976b2d8d06d7fef9a1543358cfeab","observation_id":"6ac0e5bb-94ab-444a-9bd1-3c3dc1d90d9e","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:480bd8be24bf39666177c70ab24f84e0cade7cecf99a95b1198250d15fd19e11","observation_id":"d75d3c10-9f1f-4c19-8e37-6faf054f53b1","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:a37d5b0ac048f77acacdaa6091cc07775cd471d74444b1221583d0e3e9e14a82","observation_id":"1a9b9366-4da7-4419-a098-eb006ec72c73","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1038/s41598-026-40123-3","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Scientific Reports","work_id":"73b84117-8859-4ffb-9f03-85d271c49229","year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:1e233e5846acceb88e5dadf73755db2b3c6083999f999bb558686ac08b2e899a","observation_id":"c7c2e92d-537b-4aa5-8638-27b33059844b","resolution":{"observed_at":"2026-07-14T07:10:21.703946Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-14T14:49:46.299689+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T14:49:46.299689+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1406.2572","last_updated":"2014-06-10T14:52:14Z","snapshot_observed_at":"2026-07-06T03:45:59.079055Z","submitted_at":"2014-06-10T14:52:14Z","title":"Identifying and attacking the saddle point problem in high-dimensional non-convex optimization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1406.2572","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1406.2572","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:c8bb1b18d8415f4dcc7299e4ea3f1e136a601086dc2d0b9ad6e5ddafb33fbcda","observation_id":"28548ba2-ad8d-465a-80ed-b0fadbf7becd","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09913","last_updated":"2018-11-07T06:25:20Z","snapshot_observed_at":"2026-08-07T05:43:01.204264Z","submitted_at":"2017-12-28T16:15:42Z","title":"Visualizing the Loss Landscape of Neural Nets","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09913","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1712.09913","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:ba0c93fb2fddbe86646b9f3c2f1de37ad4a735366665718556c26abe8479cb08","observation_id":"74ee8350-3360-4af3-901e-736d5d3f2288","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:e62a5b53263e152726d61dc52254e2ec4d404fa8cea01aa5bca7e3a86831b0c9","observation_id":"fbd44223-7f68-4f4f-ad85-538fa070e355","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:e30a09027b80e4dd16b1c5d1e9b14fc4484c07336c452c4ba3d9a85aa434b63c","observation_id":"d55a45db-3d9b-4903-8c12-85d85c0fb012","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:46a7bdc44cedff969a4a7d464e8d29635cd6b8c3238a5733585e45df467cf7e7","observation_id":"e9866a9e-00d5-4095-b3d8-a7c9a68aea19","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:fdf5d9a8b986fefede722b863438c0d66416e5a04055df3672cd6db742b68893","observation_id":"04643501-0adb-4618-a11a-d471b5712b43","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1002/9780470316979.ch7","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"wiley.com/doi/abs/10.1002/9780470316979.ch7","venue":"Wiley series in probability and statistics","work_id":"59529045-ac5a-4da2-9f93-828ab2f1cb39","year":1999},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:286dd4140d5bb8aa8940ba391ff97674f8988e99f7198126d1fc74ed8939b387","observation_id":"3876cfd5-976c-493d-8b86-ca2927a80934","resolution":{"observed_at":"2026-07-14T07:10:21.712494Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-14T14:49:46.550098+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T14:49:46.550098+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:b61832218aab38e72cdabbbfc3cb0afd9545ae648a10f8e19313d19dcb8ba831","observation_id":"7c038158-8584-41c4-aafb-71cc1addadec","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:468f5c85bd7a49c4be45d61d81c6d4fae6b89d1a0ecb5f9ca1ed41c4e81a3533","observation_id":"c534cea3-08fb-4531-bc79-acff60cc087c","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.13881","last_updated":"2020-10-27T16:00:16Z","snapshot_observed_at":"2026-08-05T16:38:14.950369Z","submitted_at":"2020-03-31T00:11:13Z","title":"Information-Theoretic Lower Bounds for Zero-Order Stochastic Gradient Estimation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.13881","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2003.13881","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:a3684b2fac1c0d5a9e15dae95665a7b76d60119d1db16fe4b1f49e3e627ade3f","observation_id":"df7477ca-7cca-41db-90b1-0c5f645e6317","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:c1f3db7f372dc90fd27cacd7323cebe5e6ae2007eb1a460a818b3bb21d044d2a","observation_id":"859b9fc0-752e-42a7-9564-a3ed873feea8","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.01125","last_updated":"2021-08-02T19:00:20Z","snapshot_observed_at":"2026-08-07T04:02:33.883415Z","submitted_at":"2021-08-02T19:00:20Z","title":"Hybrid Classical-Quantum Deep Learning Models for Autonomous Vehicle Traffic Image Classification Under Adversarial Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.01125","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/2108.01125","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:2c6dedf9044827618099d671f5ecc55683bb6ac09124437b83ef09ce6fa03383","observation_id":"75ce2537-4078-4c29-a1be-03806ff6353c","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","latest_version":1,"primary_category":"quant-ph","snapshot_observed_at":"2026-08-07T17:02:56.305344Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers"},"reference_resolution":{"displayed":68,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":64,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":68},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 68 of 68 outbound references and 0 inbound Pith citation observations for arXiv:2607.11095."}