{"as_of":"2026-08-04T10:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:650b3b217cb5c8442189beee44c48db901edeb3f76d8a1787108f11e88d8fb2c","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T11:41:32.717959Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19855/citation-record","integrity":"/paper/2607.19855/integrity","json":"/paper/2607.19855/citation-record.json","paper":"/paper/2607.19855"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.585404Z","title":"Biggio, I","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.585404Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:ef4624d31324e468aee18562891c3f955cf9aa6ad651f7c7bacbb79d49b1cab5","observation_id":"a033b3a3-bfa9-4a1a-b35f-6e28d1be1060","resolution":{"observed_at":"2026-08-01T11:41:30.585404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.627138Z","title":"Szegedy, W","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.627138Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:7659a3c32742b680ff418fe1afcc8fae76a80f373d60b2eabe626eb04211bb6b","observation_id":"52a15094-01cb-4f7a-a42c-7d63e003c14f","resolution":{"observed_at":"2026-08-01T11:41:30.627138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.717543Z","title":"Croce, M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.717543Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:5f45c64ee91f1289d57f7a9303e9806b4360c14eab0ab039fac18f9d4aea98ad","observation_id":"ec9353b4-a6b9-4387-a9b7-c0bbcb5ec419","resolution":{"observed_at":"2026-08-01T11:41:30.717543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.774764Z","title":"Croce, M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.774764Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:e45c3603142fc1ad1ddd3d3836df114879277ee1088e760943212a5bc27abf70","observation_id":"57c5adeb-bd20-4dfd-8b17-6504e3f4467a","resolution":{"observed_at":"2026-08-01T11:41:30.774764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.842109Z","title":"Biggio, F","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.842109Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:7c11153910e0823a7d3cb8832923b685054e08c0fbbc60a8d0fa13e81c3270c1","observation_id":"6eb5f236-219a-44ef-9ec9-7c97b9a6a553","resolution":{"observed_at":"2026-08-01T11:41:30.842109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06705","last_updated":"2019-02-20T17:38:32Z","snapshot_observed_at":"2026-08-02T02:05:14.321072Z","submitted_at":"2019-02-18T18:18:27Z","title":"On Evaluating Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06705","snapshot_observed_at":"2026-08-01T11:41:30.924111Z","title":"Carlini, A","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.924111Z"},"links":{"cited_paper":"/paper/1902.06705","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:56e8aa3f9fde3a0168016a396fd266488d7e22a611a8a70205938d2ce8778ed6","observation_id":"625443bb-8e5c-464c-850b-1cd57b49eeac","resolution":{"observed_at":"2026-08-01T11:41:30.924111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:30.977759Z","title":"Risse, C","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:30.977759Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:a15301127c9a35393d6bb677e02080b48c660fe4047a5efe06c4d482262e4d7d","observation_id":"8f2df919-d540-450d-bba0-b92920865e80","resolution":{"observed_at":"2026-08-01T11:41:30.977759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.041705Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.041705Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:18f1d7e1ef1ebc697a459b751be85f9c8ee10ad48f541fa62351ee9469514ad4","observation_id":"33f7f071-0ca3-4cc8-a798-612a30034e2a","resolution":{"observed_at":"2026-08-01T11:41:31.041705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.111072Z","title":"Göpfert, J","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.111072Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:513e5caddf609886582c47c9cc6e8f20e5cc21954fd6d01f0dc702e04531dd39","observation_id":"95007dcb-14da-4140-bfc6-47df63c70c2e","resolution":{"observed_at":"2026-08-01T11:41:31.111072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.178081Z","title":"Croce, M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.178081Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:d05e7375badacb61bcebb8164d9787801fa36342f865c14aa42bd328c8d6eec8","observation_id":"2ce7cd96-2a78-423b-b04c-8a1908731ba2","resolution":{"observed_at":"2026-08-01T11:41:31.178081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.226578Z","title":"Pintor, F","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.226578Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:07d2d3ec33ce1ce03840bc0bfa8c36b709e383f6a5b903ffd4f2903b1337b387","observation_id":"f602aee8-6b0d-49b2-a689-a4d4b50895d7","resolution":{"observed_at":"2026-08-01T11:41:31.226578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.276964Z","title":"Addepalli, S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.276964Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:74bbced1118ec45b145b370b0ebcd10259bc5c66facf44b933cc5c7ee8f7f522","observation_id":"2408dec9-d27c-4166-b3c0-d7ec2f0ff5f1","resolution":{"observed_at":"2026-08-01T11:41:31.276964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.317353Z","title":"Rade, S.-M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.317353Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:7c4fa61b289448f29d8699d67fbd8ea40fa780058efcce81c6b0e9229e8c6e78","observation_id":"66f52eb9-5fb0-4c47-a207-976ae1ba56a5","resolution":{"observed_at":"2026-08-01T11:41:31.317353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.401424Z","title":"Chen, C.-R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.401424Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:83e4621132adbd876b4b6627aa61ecf4d814dc9dbc52736fed96612a586921f3","observation_id":"f83ac5d1-5a07-41e4-a930-dd5db4927143","resolution":{"observed_at":"2026-08-01T11:41:31.401424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.458997Z","title":"Augustin, A","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.458997Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:c26d10a698a082c265b6679573f8079c3e5f961f977239b86f85b4acbe1a5a0b","observation_id":"699e704c-8ae5-464a-8b65-67898ddc03a0","resolution":{"observed_at":"2026-08-01T11:41:31.458997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.01946","last_updated":"2021-10-18T16:55:50Z","snapshot_observed_at":"2026-08-02T21:54:52.288981Z","submitted_at":"2021-03-02T18:58:33Z","title":"Fixing Data Augmentation to Improve Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.01946","snapshot_observed_at":"2026-08-01T11:41:31.507101Z","title":"Rebuffi, S","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.507101Z"},"links":{"cited_paper":"/paper/2103.01946","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:374f677a89750b1c437ed79133dccb30b6ac6ebd9acdbbafd96470594643a95e","observation_id":"d378f8bb-7115-474f-88d6-c5513af9d084","resolution":{"observed_at":"2026-08-01T11:41:31.507101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.564743Z","title":"Debenedetti, V","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.564743Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:b0b845e5035fc21d5b049773949d7e5f60578e15aaf45f1e710940e0be1ec774","observation_id":"3b69b67a-d093-4bf8-b2bc-1ca7be5d1b63","resolution":{"observed_at":"2026-08-01T11:41:31.564743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.09425","last_updated":"2022-03-03T15:38:12Z","snapshot_observed_at":"2026-07-06T11:01:45.274067Z","submitted_at":"2021-04-19T16:17:12Z","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.09425","snapshot_observed_at":"2026-08-01T11:41:31.621683Z","title":"Sehwag, S","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.621683Z"},"links":{"cited_paper":"/paper/2104.09425","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:e0292a7e03a68e1d0ff982d5505f93120a2ea910e369abd6a138f965fffcfc58","observation_id":"b3e4c437-9187-400f-abc8-4f71cec9ebf6","resolution":{"observed_at":"2026-08-01T11:41:31.621683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.660244Z","title":"Rodríguez-Muñoz, T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.660244Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:0567102b191ec3098722d5c05a393d3aa9fb97b83a88a525c8681422a42867c0","observation_id":"3ff83206-a062-4161-8e67-0d0f113a66c7","resolution":{"observed_at":"2026-08-01T11:41:31.660244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.715932Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.715932Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:ccea01627ea910ead0421aad08ca28cc753dda5b11122ad9844c4a734f9b5537","observation_id":"d306f4c2-d0c3-460a-b875-cdb7e162b3e8","resolution":{"observed_at":"2026-08-01T11:41:31.715932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.764783Z","title":"Stutz, M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.764783Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:c766ba3de6b2c6658331ac331e2e6d1cc60039b382b46822be93b0e3108faa0b","observation_id":"4370d861-38d4-4408-a30d-c73308dd55c6","resolution":{"observed_at":"2026-08-01T11:41:31.764783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.823721Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.823721Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:a081bab2a5ef3f360bf6e146eb7507b0a624d45685fd758db7c13bd4b08c9f1f","observation_id":"9d8fa90e-fa1d-499d-99e1-0e966d7da75c","resolution":{"observed_at":"2026-08-01T11:41:31.823721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.885651Z","title":"Zhong, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.885651Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:0c0762bd2d7f8b7a48d5cc95b9cd133dfc30a8413231cc389ab4178e1072fdb7","observation_id":"1c125d09-2da1-40dc-931d-85931956455f","resolution":{"observed_at":"2026-08-01T11:41:31.885651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2001.03994","last_updated":"2020-01-12T20:30:22Z","snapshot_observed_at":"2026-07-06T08:49:58.983987Z","submitted_at":"2020-01-12T20:30:22Z","title":"Fast is better than free: Revisiting adversarial training","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.03994","snapshot_observed_at":"2026-08-01T11:41:31.935163Z","title":null,"venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.935163Z"},"links":{"cited_paper":"/paper/2001.03994","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:c62b10869ecb8280a9f2dbdffbf09ab1f58e6726df212b971964fdb753f0305b","observation_id":"3acc324e-d91b-47a5-967a-4ea1038f9535","resolution":{"observed_at":"2026-08-01T11:41:31.935163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:31.994310Z","title":"Gowal, S.-A","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:31.994310Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:8ec8ef2244eb7575e97540cb6b3b178cc6255d78c81430621e5b37b7b6917aa4","observation_id":"a41f1a9f-2a2e-44e2-9202-9e56dda83676","resolution":{"observed_at":"2026-08-01T11:41:31.994310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.040877Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.040877Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:921dbd3bbc0ca3936dd76cafef604b0495d9f2fd4532b97bcb914e0df311a903","observation_id":"8222c5ea-7f28-47ad-9606-1fd441fb33a0","resolution":{"observed_at":"2026-08-01T11:41:32.040877Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.091514Z","title":"Salman, A","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.091514Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:0bbd9cc4fdefa567b7d3c56b14cf8a5ec6e5901a3ef769eb06ae3dce16fd43e4","observation_id":"5b23bb6e-8b1f-4c59-82a9-bff3ba8a6bee","resolution":{"observed_at":"2026-08-01T11:41:32.091514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.148289Z","title":"Jiang, C","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.148289Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:73636c4d9fb9ea53867665df176cd459e2431cf43a71357a84c6f6aef3c24d79","observation_id":"f9049c78-9cef-46a5-ac0c-b70793a7fecb","resolution":{"observed_at":"2026-08-01T11:41:32.148289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.214171Z","title":"Maini, E","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.214171Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:3fce4b349c2d24236e532d47d6a4fb3b06d0d515d996718efb9beee21496ea8b","observation_id":"7b80dc46-0c7e-43fe-8c19-6cbadd4cdfb9","resolution":{"observed_at":"2026-08-01T11:41:32.214171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.267633Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.267633Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:c7b93d63095db66f5d021d6ad34e07f2024827b99f430adc4479bf7902e2f21f","observation_id":"f6d2234c-0a10-41c6-97ad-ec670e43a872","resolution":{"observed_at":"2026-08-01T11:41:32.267633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03015","last_updated":"2023-04-15T21:18:41Z","snapshot_observed_at":"2026-08-03T20:48:08.716963Z","submitted_at":"2023-02-06T18:54:58Z","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03015","snapshot_observed_at":"2026-08-01T11:41:32.325664Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.325664Z"},"links":{"cited_paper":"/paper/2302.03015","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:75fceed090222ea0342df9005f2a3a1786da87ba6ff22e6cc43866e6b2952ecd","observation_id":"4734b313-e6a1-49bd-b351-a6bb08a7ca00","resolution":{"observed_at":"2026-08-01T11:41:32.325664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.01538","last_updated":"2021-06-03T01:45:48Z","snapshot_observed_at":"2026-07-06T11:15:26.915483Z","submitted_at":"2021-06-03T01:45:48Z","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.01538","snapshot_observed_at":"2026-08-01T11:41:32.360839Z","title":"Matyasko, L.-P","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.360839Z"},"links":{"cited_paper":"/paper/2106.01538","citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:f84bbbdab3ce764eaf57d59aff73d7fa8f4c04af3292cb9af6bbb33d21d64bc2","observation_id":"72b7c908-72f7-4f04-b9fb-fb6dbd8f1b0c","resolution":{"observed_at":"2026-08-01T11:41:32.360839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.419625Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.419625Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:9809c19c199c964120460759b91ae7cf5820cd0a9f7a4c2cde243d0f8567488b","observation_id":"e57068f6-b4cd-4edb-94ea-7c9467315665","resolution":{"observed_at":"2026-08-01T11:41:32.419625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.486021Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.486021Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:44555a825e1cb128c11016400333002b791133fc257c3272a8814939a008e3af","observation_id":"54a48fd8-9d98-41a3-8eed-c4794764e51a","resolution":{"observed_at":"2026-08-01T11:41:32.486021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.541333Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.541333Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:c2784fa77f72f7e57b80b74812abb49aa1e0eb32342ef05fa3fda44912c572f2","observation_id":"7e08121c-1a1f-4663-b63a-8f07a805e9d9","resolution":{"observed_at":"2026-08-01T11:41:32.541333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.601689Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.601689Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:986dc037f08be75a69f4a85d7c118fbeba3bdc980167972c8bb591706ca17646","observation_id":"e182e76c-99f1-4f9a-8e98-0378c9ea8089","resolution":{"observed_at":"2026-08-01T11:41:32.601689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.658766Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.658766Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:4351dbca344ad7da55ac200a3746f73a0661328cb642325c8bced3168051a07c","observation_id":"c65f7b03-62fa-4956-a62f-f8379aaaaaf3","resolution":{"observed_at":"2026-08-01T11:41:32.658766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T11:41:32.717959Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T11:41:32.717959Z"},"links":{"citing_paper":"/paper/2607.19855"},"observation_digest":"sha256:c6ad77904e3a2f35252f92bf6c321a5b40af9810c6a8758075bb4a7e90bafec3","observation_id":"8176965f-0dff-479c-9117-f3373094cffd","resolution":{"observed_at":"2026-08-01T11:41:32.717959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19855","last_updated":"2026-07-22T07:43:38Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-01T11:41:27.738543Z","submitted_at":"2026-07-22T07:43:38Z","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2607.19855."}