{"as_of":"2026-08-07T13:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4269a385e3f4b37106c8a3f400c1e2fe86581b74fad6a2006d80250797eb7327","coverage":[{"denominator":70,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":70,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T23:49:17.980388Z","state":"measured"},{"denominator":70,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":70,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.15246/citation-record","integrity":"/paper/2607.15246/integrity","json":"/paper/2607.15246/citation-record.json","paper":"/paper/2607.15246"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:11.649263Z","title":"Deepfakes and beyond: A survey of face manipulation and fake detection,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.649263Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:359e9c38b6b03b0997b843c647812a2be99af92e3615412f427c3be86a58fc03","observation_id":"556378e0-a113-4e29-aa34-e2ac47f2e8ef","resolution":{"observed_at":"2026-08-01T23:49:11.649263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:11.733196Z","title":"The creation and detection of deepfakes: A survey,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.733196Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:cbb987d5ff1eb8a6a41cb75cd6a3e9a15da15e073a66860343d1e664673fdddb","observation_id":"d0048519-00ab-4382-b7ca-14c5629e0fcf","resolution":{"observed_at":"2026-08-01T23:49:11.733196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:11.835446Z","title":"Deepfake generation and detection: A benchmark and survey,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.835446Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:886ebdd67098dadf0918b4da795649f13c908fa9d11350933cf21b90343f75ed","observation_id":"c2ba8053-a9e8-49f4-ac87-4ffef2a25bba","resolution":{"observed_at":"2026-08-01T23:49:11.835446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06965","last_updated":"2025-04-03T07:47:44Z","snapshot_observed_at":"2026-07-06T18:28:38.016649Z","submitted_at":"2024-06-11T05:48:04Z","title":"Evolving from Single-modal to Multi-modal Facial Deepfake Detection: Progress and Challenges","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06965","snapshot_observed_at":"2026-08-01T23:49:11.934526Z","title":"Evolving from single-modal to multi-modal facial deepfake detection: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:11.934526Z"},"links":{"cited_paper":"/paper/2406.06965","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:80f9af16227c74fc4b6db522ad50029faee330f88eb6f7d4e8fd4157bd184ee1","observation_id":"c0d3187a-ff68-4503-95dc-377c0952e553","resolution":{"observed_at":"2026-08-01T23:49:11.934526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.040293Z","title":"Threats and vulnerabilities in artificial intelligence and agentic ai models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.040293Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:5e96e6f6f8794690e3794f4fed540bade0b74ac78f67cfaf32cc535ca32373b4","observation_id":"9d346d2a-a29e-4562-bf51-6928d2ab4765","resolution":{"observed_at":"2026-08-01T23:49:12.040293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.139488Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.139488Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:b40891a7d2f5ebffa410916b6970eabbae8afa04c7161d99980d2a973272e1b0","observation_id":"37e07780-1626-4eda-9c67-0eb9ca18eba5","resolution":{"observed_at":"2026-08-01T23:49:12.139488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.242253Z","title":"Densely connected convolutional networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.242253Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:a18f6ec642fe9c743e2c93414ccf77951be9b8eabf73e22175fda622f2fccca2","observation_id":"cbf13927-0342-4e66-a3f3-050930776a16","resolution":{"observed_at":"2026-08-01T23:49:12.242253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.342244Z","title":"EfficientNet: Rethinking model scaling for convolutional neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.342244Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e88eeb4e8278f657db1eb4c8a705a71d2c9cbb68ae479458cf16b270dfe2a323","observation_id":"2bd0a670-d1bd-4c15-87ae-089ce2088c9f","resolution":{"observed_at":"2026-08-01T23:49:12.342244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.443631Z","title":"An image is worth 16x16 words: Trans- formers for image recognition at scale,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.443631Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:362f05a5f37d3e0abd32261283a67309da99569b7b78130c469c687999857d85","observation_id":"e87e4c1b-0787-4a5f-a4eb-162b499683a9","resolution":{"observed_at":"2026-08-01T23:49:12.443631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.548003Z","title":"Swin Transformer: Hierarchical vision transformer using shifted win- dows,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.548003Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:73bc56e348c3e0c0704916e795b6742e16bbb44aa65dc589dbb35b56793c6004","observation_id":"a19ef547-bfbc-4aa8-abd1-330c6b28a4ed","resolution":{"observed_at":"2026-08-01T23:49:12.548003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.680930Z","title":"Can pretrained face verification models distinguish true identity from deepfakes?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.680930Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e1c51744f664e4b79cc2998967b6cacf4e21ea4d79a6c37bf7271cb79047d0ab","observation_id":"60b56041-0318-40e9-a3b7-89c0524ddf98","resolution":{"observed_at":"2026-08-01T23:49:12.680930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.750124Z","title":"FaceForensics++: Learning to detect manipulated facial images,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.750124Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:5025eb1680bc08c7bc00aced77edc89f5e180baf9446e558e7b5801bede60922","observation_id":"fa3ec7b8-daeb-4e2b-b4f7-b3f2b83770df","resolution":{"observed_at":"2026-08-01T23:49:12.750124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.825831Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.825831Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:5e61d73179b150b90df924632b2f86c71b051129d339cb6cc9532cd534aa6979","observation_id":"cbe5741e-b620-4b00-a5ca-3d3428405384","resolution":{"observed_at":"2026-08-01T23:49:12.825831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.879918Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.879918Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:98b9a72081c85f927731a15824a559cea2c848c40ffa59777103cb63ab44a972","observation_id":"988627d3-6732-4ab9-aa9d-62cf5ede2637","resolution":{"observed_at":"2026-08-01T23:49:12.879918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:12.935621Z","title":"Threat of adversarial attacks on deep learning in computer vision: A survey,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:12.935621Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:0330d7faee67ec3ad1754517d89c6423139ef9a293d980c623e150aa19f2559f","observation_id":"0ffdd397-e71f-4d3f-b707-c6a048d9c308","resolution":{"observed_at":"2026-08-01T23:49:12.935621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.007250Z","title":"Revisiting transferable adversarial images: Systemization, evaluation, and new insights,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.007250Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:0eca7116ce2747480f50749ac2c5c0ef2df6c4e712cfa321c5724cc1b17831a1","observation_id":"83e396b8-989b-49f5-840c-70883fbd3a3e","resolution":{"observed_at":"2026-08-01T23:49:13.007250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.083914Z","title":"Boosting ad- versarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.083914Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:93acda6249f64cefb3a124eb70aa44fa746b74f3fe2fbf7e2b84524903145114","observation_id":"b988f4c8-1972-4702-b777-1bc8c3ebdf5b","resolution":{"observed_at":"2026-08-01T23:49:13.083914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.136619Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.136619Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:853b6e36a7625fe1afd1a808f91bb3f356f13801523f78006200d2c2e15c4dae","observation_id":"9e935b92-eea5-458c-8f1a-2a64c2c93db2","resolution":{"observed_at":"2026-08-01T23:49:13.136619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.191439Z","title":"Evading defenses to trans- ferable adversarial examples by translation-invariant attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.191439Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:a6f5d64d53a7ef41b5103fd96c582430487364a7d69e8570cf474ddac023da02","observation_id":"3e0df747-ceac-44b5-8cec-3b434cfd1910","resolution":{"observed_at":"2026-08-01T23:49:13.191439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.240124Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.240124Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:15236c0bdb32fedff35f4eb71f0b55ec482098542c24e1a22c8c42671b5e05b1","observation_id":"83b67a7f-bf67-4b93-b22b-4db660852c64","resolution":{"observed_at":"2026-08-01T23:49:13.240124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.313787Z","title":"Square At- tack: A query-efficient black-box adversarial attack via random search,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.313787Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:8f57331493f3cb7879f0bb51baea0967dab75e7b24d95c5cf473dd55b86a256d","observation_id":"554b6b14-aea5-448f-a541-ae7b9c40cab3","resolution":{"observed_at":"2026-08-01T23:49:13.313787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.368002Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.368002Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:9cc85baee3fdd8766207e8b603a1ff4d1c305eb5ec522c666815212ca0fa267a","observation_id":"81a03461-d535-4819-9c65-92287becb9a8","resolution":{"observed_at":"2026-08-01T23:49:13.368002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.01734","last_updated":"2026-06-03T19:03:24Z","snapshot_observed_at":"2026-07-06T20:45:50.730195Z","submitted_at":"2025-03-03T16:54:03Z","title":"Adversarial Agents: Black-Box Evasion Attacks with Reinforcement Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.01734","snapshot_observed_at":"2026-08-01T23:49:13.388861Z","title":"Adversarial agents: Black-box evasion attacks with reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.388861Z"},"links":{"cited_paper":"/paper/2503.01734","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:888e2c9173694a58769e132cce118e6c9b2e9bff973267507dd54339fa112bb6","observation_id":"23539877-58cd-4bbe-b13d-bdf560e9bfd4","resolution":{"observed_at":"2026-08-01T23:49:13.388861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.392891Z","title":"CNN- generated images are surprisingly easy to spot... for now,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.392891Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:074a9d23a29c1a63dfae03327009433346d5631c25a51272094ddc5ec7059cd7","observation_id":"8c12bbfe-adac-47a9-9070-2ef8e26347b8","resolution":{"observed_at":"2026-08-01T23:49:13.392891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.409123Z","title":"Thinking in frequency: Face forgery detection by mining frequency-aware clues,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.409123Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:f550b96ee818af9f85c8c5b99b2cd3b19fdb84191a823ee5ac826b6290756e01","observation_id":"096e2cf9-a174-46a0-924b-104d0481b126","resolution":{"observed_at":"2026-08-01T23:49:13.409123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.492152Z","title":"Intriguing properties of vision transformers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.492152Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:6e5cdde10973c90fc39da99a921a4393409cf72549e7f3a696b9f8513fd364a6","observation_id":"837568c8-76d0-4deb-a701-c90cbb63fc0f","resolution":{"observed_at":"2026-08-01T23:49:13.492152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.596700Z","title":"Towards transferable adversarial attacks on vision transformers,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.596700Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:7dfa8681a5960b38005ed10165c5f8da9a33c1d1e4c30d291da435d9e11c5d6f","observation_id":"996d64e9-105b-41dd-93ba-7fdbcdb59926","resolution":{"observed_at":"2026-08-01T23:49:13.596700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.717189Z","title":"Frequency domain model augmentation for adversarial attack,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.717189Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:41389f1ba3adcc4015b1726640c6850d7cc7ca619f9b630241a23046e8bbe65b","observation_id":"65f6467d-087f-41a8-b75b-0bcfa9cc3432","resolution":{"observed_at":"2026-08-01T23:49:13.717189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.814732Z","title":"Boosting adversarial transferability by block shuffle and rotation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.814732Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:c8d936873e0736bebcc75ec4b81b11faf9c579a96772efebfb457af7ab451a7b","observation_id":"599153a9-028d-4bde-9d1e-7dadd9a9584a","resolution":{"observed_at":"2026-08-01T23:49:13.814732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.884888Z","title":"ARMOR: Agentic reasoning for methods orchestration and reparameterization for robust adversarial attacks,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.884888Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:5a514caf664d92c51b2dbb1c28839962f4e0bea8a780b024a78d757d15eb0dd9","observation_id":"2ab415d2-6436-438a-ac95-3ebcb7d3b779","resolution":{"observed_at":"2026-08-01T23:49:13.884888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:13.974429Z","title":"Agentic AI: Autonomous intelligence for complex goals — a comprehensive survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:13.974429Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:6805b43cb73bf5a8f27abf082a8c781e84a00714fe4b8033e21a9126ed28959d","observation_id":"58dc9a06-905d-4f34-9379-d55c1ec7509e","resolution":{"observed_at":"2026-08-01T23:49:13.974429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.06322","last_updated":"2025-01-10T19:56:50Z","snapshot_observed_at":"2026-07-30T22:07:13.869232Z","submitted_at":"2025-01-10T19:56:50Z","title":"Multi-Agent Collaboration Mechanisms: A Survey of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.06322","snapshot_observed_at":"2026-08-01T23:49:14.060856Z","title":"Multi-agent collaboration mechanisms: A survey of LLMs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.060856Z"},"links":{"cited_paper":"/paper/2501.06322","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:3855e79003a534e13b1f1042f499b9622b16edd502184af611f002585ba92acd","observation_id":"6ebf2fce-2271-490a-9f5c-ae9d4642d488","resolution":{"observed_at":"2026-08-01T23:49:14.060856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.177548Z","title":"Agentic AI: A com- prehensive survey of architectures, applications, and future directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.177548Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:b3cdf1938ed2e46f0c6973ebab533f167a889cea7fe4e1738d38ccf60bc78ae2","observation_id":"09576b84-01fc-4397-94fb-444722b7b118","resolution":{"observed_at":"2026-08-01T23:49:14.177548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-01T23:49:14.252395Z","title":"Qwen2.5-VL technical report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.252395Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:80ab421c900389db37dd2935d51aba8cc8610b058208cd2a4f4aa5087863496d","observation_id":"4b945bdd-d76e-4b12-aa54-d30a11283aee","resolution":{"observed_at":"2026-08-01T23:49:14.252395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-08-01T23:49:14.347193Z","title":"Qwen3 technical report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.347193Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:d7a77638060cd287ddfa116b9ea161285a23028c711b0a39f1e31b75fa25d59d","observation_id":"07ed48e3-032b-49e9-bea6-7d3a4a41ea43","resolution":{"observed_at":"2026-08-01T23:49:14.347193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.436567Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.436567Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:4e9a3d733c60daa771f26df9045d8f41e70f1917c451939c1314ea823dd84ab6","observation_id":"b72c8f02-a649-4ac9-be7b-6a81700c49a7","resolution":{"observed_at":"2026-08-01T23:49:14.436567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.497975Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.497975Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:aa3f48f4faebb08e1ba88601fe6d42ac48be9403d66acf339c1f14c3234b5691","observation_id":"b0d81842-cd6b-4c6e-8078-4f4082b9294f","resolution":{"observed_at":"2026-08-01T23:49:14.497975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.575133Z","title":"Spatially transformed adversarial examples,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.575133Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:5e9e8c77c219df6665d04d753b216029e9611b571e7c98b3fa151fa610a0b756","observation_id":"8b7e3c6f-6f0b-475f-8540-70761a7f727c","resolution":{"observed_at":"2026-08-01T23:49:14.575133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.672312Z","title":"Adversarial attacks on deepfake detec- tors: A challenge in the era of AI-generated media (AADD-2025),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.672312Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:2fbfdae098a6bec2a1e058e81c35a2d1c01ab4195a0d4be2a0059e5a02c3f669","observation_id":"16f7bc03-1cf5-483a-9206-709cb339d9d0","resolution":{"observed_at":"2026-08-01T23:49:14.672312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.08854","last_updated":"2019-10-23T18:47:35Z","snapshot_observed_at":"2026-08-06T07:27:19.098848Z","submitted_at":"2019-10-19T22:35:52Z","title":"The Deepfake Detection Challenge (DFDC) Preview Dataset","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.08854","snapshot_observed_at":"2026-08-01T23:49:14.784031Z","title":"The deepfake detection challenge (DFDC) preview dataset,","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.784031Z"},"links":{"cited_paper":"/paper/1910.08854","citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:ab5de7ff02b2e34dfb443bf4690c93a2e585df6bfcf092e4599b580c50d01c81","observation_id":"5eb21e76-d898-45ca-aeb7-3d518c2afee2","resolution":{"observed_at":"2026-08-01T23:49:14.784031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.883748Z","title":"Multi- attentional deepfake detection,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.883748Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:d7be893cc0c86aeacfe68deddf4a9865a521a3c8a705e7b8d176ed377bec7a8b","observation_id":"7a3b43f8-e162-4e0e-b65d-d934b0bad757","resolution":{"observed_at":"2026-08-01T23:49:14.883748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:14.976061Z","title":"Detecting deepfakes with self-blended images,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:14.976061Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:b72dcb407008f9a90a54ccf78afecc8d9868a528330e753fe1a9b13991bc3b7d","observation_id":"8223f427-546c-4c0f-a5b9-59bfe602da8f","resolution":{"observed_at":"2026-08-01T23:49:14.976061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.140147Z","title":"DeepfakeBench: A comprehensive benchmark of deepfake detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.140147Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:e639775f7114ea112e224e3f4b64ea388a877bf2a3ad3e50dd2058a2a5361f4a","observation_id":"7f9409d9-038c-4114-a80d-126ba34d9896","resolution":{"observed_at":"2026-08-01T23:49:15.140147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.247702Z","title":"Zero-shot detection of AI-generated images,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.247702Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:c253e3b33454889f91e23bd7e9b10443ad8e9ad281f01beeb43976b1c29313e7","observation_id":"b7353f6b-7289-430c-85d7-6e930c25df5f","resolution":{"observed_at":"2026-08-01T23:49:15.247702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.338744Z","title":"Evading deepfake-image detectors with white- and black-box attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.338744Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:4196f08ebc0afab1e5f002b5c1862149b895480f879c67b503ebb43229e26630","observation_id":"0a394d77-988a-464c-8e1d-40c5eaa3cd80","resolution":{"observed_at":"2026-08-01T23:49:15.338744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.482615Z","title":"Adversarial perturbations fool deepfake detec- tors,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.482615Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:f3a1c83a4edc39e3611615de6d2e76f50b30c142646903c8f2ae8b4d880fb9a3","observation_id":"1b4f4d38-7d8f-4879-8d15-096ceb002771","resolution":{"observed_at":"2026-08-01T23:49:15.482615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.592519Z","title":"Adversarial attack on deepfake detection using RL-based texture patches,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.592519Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:dd9ed71fafb32b114e3db91d750c2fe619c55369e376f63bb4725b49aa6916c8","observation_id":"42f2dff8-7cf7-4df0-b0de-16977f81607a","resolution":{"observed_at":"2026-08-01T23:49:15.592519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.714904Z","title":"2D-Malafide: Adversarial attacks against face deepfake detection systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.714904Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:340adbb7a0027124d49acae297b334bf10f4da98eee1ca3996abd5cdcf89c438","observation_id":"34d5b80a-3b07-4569-b74b-9acbcf556246","resolution":{"observed_at":"2026-08-01T23:49:15.714904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.802580Z","title":"MIG-COW: Transferable adversarial attacks on deepfake detectors via gradient decomposition,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.802580Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:aaf0b57b3db8035edf37c7d2de21386560a3923a93cf1402c3358bc59e99046d","observation_id":"eea5ca9c-5107-4316-88ef-a48a0ca9a68e","resolution":{"observed_at":"2026-08-01T23:49:15.802580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:15.958376Z","title":"MS-GAGA: Metric-selective guided adversarial generation attack,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:15.958376Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:afbe1cd9b846bb7c0b79f2c62713434e806361d915b2679dcd3b54854f866442","observation_id":"51425b62-c7a3-4255-aac4-780587b566ef","resolution":{"observed_at":"2026-08-01T23:49:15.958376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.120345Z","title":"Delving into transferable adversarial examples and black-box attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.120345Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:de5c9c0639f9224db9353f25473d4057174319b3b8e9276f55d931abb57309cb","observation_id":"34236ede-a0b0-4b19-ba9b-39df2814f93b","resolution":{"observed_at":"2026-08-01T23:49:16.120345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.253851Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.253851Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:52e1967f105b35e04ce9a3b1b64c5b4ffd59262a4c12e8847a4f8eb1e4d80176","observation_id":"33f9f9eb-3f1c-41db-b690-bd5deeb208ed","resolution":{"observed_at":"2026-08-01T23:49:16.253851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.378563Z","title":"Simple black-box adversarial attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.378563Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:78c24c7ddc2b39219d7c99a6bc2647299605f03955e18216ca2ff0e8f407d00e","observation_id":"5bd683ef-faee-42b6-8352-2074c25fc12d","resolution":{"observed_at":"2026-08-01T23:49:16.378563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.469494Z","title":"Efficient black-box adversarial attacks via bayesian optimization guided by a function prior,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.469494Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:263a9b2ed05702560f54ccc172bae70c17c9614d876ad269c10399229d54ac75","observation_id":"5ce10af3-644a-4f0f-92d1-24d04aac5f8b","resolution":{"observed_at":"2026-08-01T23:49:16.469494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.581874Z","title":"Feature importance-aware transferable adversarial attacks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.581874Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:f482c8664d0f0df877ee23f8bb64e5c4736ea52ad9e98bab937d8decc72dba9d","observation_id":"8620ef02-f307-49d1-a808-7c3f9abb3008","resolution":{"observed_at":"2026-08-01T23:49:16.581874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.691249Z","title":"AnyAttack: Towards large-scale self-supervised adversarial attacks on vision-language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.691249Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:7760b9f2be9cf694786c72a65c77cab7f7f8df91b943e2e2ac7d87f8bd7cbcaf","observation_id":"511a90be-f108-4f14-a522-da4b65be0eff","resolution":{"observed_at":"2026-08-01T23:49:16.691249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.813345Z","title":"Semantic-aligned adversarial evolution triangle for high- transferability vision-language attack,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.813345Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:bdb8af2d7b8896a8f75f8838d4017e62df3ef5bc2d367a97ba384d3b1c5da859","observation_id":"9c3f8dd3-b9ae-4278-b278-9bd9f2590982","resolution":{"observed_at":"2026-08-01T23:49:16.813345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:16.905745Z","title":"Adversarial attacks against closed-source MLLMs via feature optimal alignment,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:16.905745Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:6c59cd36f0da82615fe7f10da6a1813123e0941fcb8ab215fef2fb39f9433fc8","observation_id":"27a8c3cc-4f11-4db4-8d02-6b907b76d107","resolution":{"observed_at":"2026-08-01T23:49:16.905745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.018301Z","title":"AutoGen: Enabling next-gen LLM applications via multi- agent conversation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.018301Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:ee75d39c3b972843477e71fa5c69914ed4f465a7fbbbaf6e283ca772351af855","observation_id":"800a6abd-fbcf-4309-8716-a34040082900","resolution":{"observed_at":"2026-08-01T23:49:17.018301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.124241Z","title":"Generative agents: Interactive simulacra of human behavior,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.124241Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:3e1ae1124ae49297c2f658bdea7be7914adc1f70aeeedae11f9d31f6651a8f27","observation_id":"1e864c2e-3c06-4c7e-9a07-999f4e9c9c3f","resolution":{"observed_at":"2026-08-01T23:49:17.124241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.203457Z","title":"The rise and potential of large language model based agents: A survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.203457Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:369f144afab47fbf61cecae48438bea41f61e72d71d6ef79df8bf57e08594da7","observation_id":"8a773500-1ff7-4b03-ab89-bd2a259e2db2","resolution":{"observed_at":"2026-08-01T23:49:17.203457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.312571Z","title":"Large language models as optimizers,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.312571Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:f037efd47724ef7a19120ef21b579388c6631923269967ac99af146f8178ead8","observation_id":"123b2c44-767c-44cf-a40b-6b2e38926fdf","resolution":{"observed_at":"2026-08-01T23:49:17.312571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.399511Z","title":"AgentHPO: Large language model agent for hyper-parameter optimization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.399511Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:3fe079a3a8c0549fce92260985294e82cc6f52ce438647a23decc45418e11c71","observation_id":"f146a8dd-7a91-4f34-8d72-9bc9f31c6b32","resolution":{"observed_at":"2026-08-01T23:49:17.399511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.473100Z","title":"AutoDA: Automated decision-based iterative adversarial attacks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.473100Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:0468d5c81203a8696afe6272722b65b0a7973175ff93755d418268a0913f53db","observation_id":"a57b8858-4fa3-4481-a11e-05b8572a5b72","resolution":{"observed_at":"2026-08-01T23:49:17.473100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.553122Z","title":"L-AutoDA: Large language models for automatically evolving decision-based adversarial attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.553122Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:059a3973403a3dc6b625b5407a513ffd174beb9f6c8baf6ecc285164c3669ca6","observation_id":"4143cc4b-a9fa-4186-ab33-260e892f0d17","resolution":{"observed_at":"2026-08-01T23:49:17.553122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.627809Z","title":"Red-teaming LLM multi-agent systems via communication attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.627809Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:2e48051d4d4dc27d01ea71a25f94327029b7a9788a8982c2746661b767770c99","observation_id":"064ae00d-5c67-4034-b468-821d97cefaf1","resolution":{"observed_at":"2026-08-01T23:49:17.627809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.705381Z","title":"Image quality assessment: From error visibility to structural similarity,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.705381Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:07d0e4b87617b408605ed2db9b8f1fb94eb47565a51c5617d152d28981182409","observation_id":"b2a46116-8d91-4c52-bbac-ffb11feaef6b","resolution":{"observed_at":"2026-08-01T23:49:17.705381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.801984Z","title":"Probable inference, the law of succession, and statistical inference,","venue":null,"work_id":null,"year":1927},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.801984Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:172ea7c6bbcfd5674f27f076b9cd4c8b739c9106d59a5d033b08b56e980d1ce1","observation_id":"367754c0-6147-4034-9330-90e07884e9d8","resolution":{"observed_at":"2026-08-01T23:49:17.801984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.870113Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.870113Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:ca040f09b267cda58c887c747824a9121fd5ef60df892ee722ce3514941ff81a","observation_id":"2399c185-5a84-407d-a0db-91b96e2a064b","resolution":{"observed_at":"2026-08-01T23:49:17.870113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T23:49:17.980388Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-01T23:49:17.980388Z"},"links":{"citing_paper":"/paper/2607.15246"},"observation_digest":"sha256:fd5913502f3365eb74b7e71d2c31ae8eb6edee27bcd4eb2cf5b1091daa69b2bd","observation_id":"6c169e95-910e-48c9-b8b2-b5ab6228c057","resolution":{"observed_at":"2026-08-01T23:49:17.980388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.15246","last_updated":"2026-07-16T17:45:13Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-04T00:54:53.617307Z","submitted_at":"2026-07-16T17:45:13Z","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors"},"reference_resolution":{"displayed":70,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":70,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":70},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2607.15246."}