{"as_of":"2026-08-09T06:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d37b48835515984938c683b68751e3e69084115f425058e5f4cc5ce771282815","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T08:08:41.257593Z","state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.21243/citation-record","integrity":"/paper/2607.21243/integrity","json":"/paper/2607.21243/citation-record.json","paper":"/paper/2607.21243"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:35.126183Z","title":"Huang, Q","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:35.126183Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:7b86f7dd199339e7fc6bdd05768f60a76352b03659d6d4f07bc9212e67aeca58","observation_id":"9777a3d3-cbbc-42e5-be80-2757dc4678a0","resolution":{"observed_at":"2026-08-01T08:08:35.126183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:35.237615Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:35.237615Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:8c105f32be85979f3c770ebf4f7f85ea9ba4ae773d20894e7c8826cb5f7384f2","observation_id":"96fde7f0-b976-41e7-9ea9-d03d3bd63795","resolution":{"observed_at":"2026-08-01T08:08:35.237615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:35.371816Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:35.371816Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:e25ab137fd9eef7326cf80ee47232eca7cd2d74e11a06291e2392b8dd1021afb","observation_id":"cb055f87-8a96-4f79-afb8-a7297085711c","resolution":{"observed_at":"2026-08-01T08:08:35.371816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:35.544086Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:35.544086Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:0031f1d814a1c4189c4b2dfdfacdda00048a8605b37c49ed7bb5cd0d42d724f8","observation_id":"e17866cd-8ed1-4c05-b04b-a098c266123b","resolution":{"observed_at":"2026-08-01T08:08:35.544086Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:35.644345Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:35.644345Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:8585dd617418aac06253bf45e153c57d4fc8b1458f93bf7b87a262d4bdda67d5","observation_id":"5db9761b-6dbb-4995-bf47-c8faf97e9f2d","resolution":{"observed_at":"2026-08-01T08:08:35.644345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:35.725719Z","title":"Kumar, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:35.725719Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:f5c116c04958ccc4f7cea1d45a165e571f60d792e17e4cc9441be5c9b270a785","observation_id":"0a163f1a-1f04-444c-bbfd-b596e4cd385b","resolution":{"observed_at":"2026-08-01T08:08:35.725719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-01T08:08:35.841944Z","title":"Madry, A","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:35.841944Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:4c165349847be9a5c5852bb223380f0606dd1dedd9fa6d574ea9a00b55ba02c2","observation_id":"591c3975-249a-4849-8a17-2f119552f231","resolution":{"observed_at":"2026-08-01T08:08:35.841944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:36.034105Z","title":"Zhang, J","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.034105Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:8584cbd60e55fdf3a69cf1699879dcde690d0dc3f664a2f17c85d78822a66272","observation_id":"d1e2d9ac-94d1-4a23-9c2a-5156b57dafa0","resolution":{"observed_at":"2026-08-01T08:08:36.034105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:36.164397Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.164397Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:1e0e844496042a00c87a77a15dc23a1e4c73603aa4993eb3d57343a7e143dd69","observation_id":"fa51ce94-8b66-4443-9612-9d460a331828","resolution":{"observed_at":"2026-08-01T08:08:36.164397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-07-06T05:17:20.642708Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-01T08:08:36.305091Z","title":"Kurakin, I","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.305091Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:f84754255ce2c5d0f668029ff79f835ffbba4c7e5d48c898c7af86c8ae1e4d4a","observation_id":"d0f33046-eb1d-4703-9e60-2660d837e243","resolution":{"observed_at":"2026-08-01T08:08:36.305091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:36.426052Z","title":"Geirhos, J.-H","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.426052Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:54e40b9a927dff4730d83113968d2a731d1f16a1bd8cdbde3c5889d87e63092e","observation_id":"98a49dc5-d304-430e-88d8-424477ed2a28","resolution":{"observed_at":"2026-08-01T08:08:36.426052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:36.544391Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.544391Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:28120d5db971bfdb5443d1fc5a7174d2f657d2f2073d3f006fa58def07891dfc","observation_id":"dd5258ff-e5cf-4f72-8997-7245e2b5ed2e","resolution":{"observed_at":"2026-08-01T08:08:36.544391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:36.646709Z","title":"Bayer, S","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.646709Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:4d15db49f103b14076c003c92a5934181d2c9d7a7dfe8d521a2a82cd61ab54ae","observation_id":"8de289b8-3715-4d0f-b131-58bca12e2cea","resolution":{"observed_at":"2026-08-01T08:08:36.646709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:36.746161Z","title":"Strack, F","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.746161Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:ca6149997bdb2a9f9bd05dc904026e7c5f8056590de3644c67987865e0ca769e","observation_id":"af18f1a2-5013-4c45-a941-9634bc5fef2b","resolution":{"observed_at":"2026-08-01T08:08:36.746161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:36.913482Z","title":"Ilyas, S","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:36.913482Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:9a156bee3a6d4aa57a707cc567bfd8ff51be70c6c241c96b27375dd2eb2d2060","observation_id":"cb8ec54f-1b7d-4420-8a3f-d587f3817a5f","resolution":{"observed_at":"2026-08-01T08:08:36.913482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T08:08:37.019430Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.019430Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:d3c655b5661d54aa35d2f0ab1b1ff1b063feda02226f4f095e0e64ec0e4dd8e2","observation_id":"75377226-b53f-4394-a53e-3dc3e30a3039","resolution":{"observed_at":"2026-08-01T08:08:37.019430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:37.081018Z","title":"Hu, B.-H","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.081018Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:e74ef20bf719bae9a3c6e98267071cb52a615ed27cb7822b0dd65461589fdc8a","observation_id":"bf8824a5-8424-4b5b-be51-0dfcab27ac71","resolution":{"observed_at":"2026-08-01T08:08:37.081018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:37.244532Z","title":"Huang, Z","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.244532Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:4b71e3eecc9633c52e6689a34282055a608e878b6553d39498b7b3c4b8355a15","observation_id":"92e48be1-c87d-4703-ba51-09d773eaad8f","resolution":{"observed_at":"2026-08-01T08:08:37.244532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:37.366046Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.366046Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:f535274810a4d878afecff4f4ee6303b64b8c2c35d891095110dab0b92037950","observation_id":"f7f02de5-96d7-4cce-abbd-ee3e738b3947","resolution":{"observed_at":"2026-08-01T08:08:37.366046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:37.473228Z","title":"Huang, Y","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.473228Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:b018871325591a758493774cb77d5e9a9363038e5885a5b13353d76394c94617","observation_id":"f6f493fb-dde8-49b5-a073-691872d5f1f5","resolution":{"observed_at":"2026-08-01T08:08:37.473228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.17069","last_updated":"2026-07-19T04:21:10Z","snapshot_observed_at":"2026-08-04T19:28:33.914715Z","submitted_at":"2026-07-19T04:21:10Z","title":"AdvSerial: Physical Adversarial Attacks on Infrastructure-mounted Pedestrian Detectors via Semantic Feature Suppression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.17069","snapshot_observed_at":"2026-08-01T08:08:37.587592Z","title":"Huang, Y","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.587592Z"},"links":{"cited_paper":"/paper/2607.17069","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:27b60312d87d4ff7e7e86cbbeb7ff7df2aa3fd21daf892c12e43fbcb2995ded2","observation_id":"209b6287-1501-4893-a607-3eebc4e121eb","resolution":{"observed_at":"2026-08-01T08:08:37.587592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:37.709378Z","title":"Naseer, S","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.709378Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:a83e5669b9a268e3922ab17b99bf69c0f1d9032bbe90ee87ee832eed415d78c0","observation_id":"2ec1521d-5105-40b5-bf7b-4570b9dc97c2","resolution":{"observed_at":"2026-08-01T08:08:37.709378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:37.804551Z","title":"Tarchoun, A","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.804551Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:e06387723e5b5131bcdeab69e1e8e3c3ace91f13baa32d2c49a4ee35b8ed8286","observation_id":"4c103f8b-8d37-4b56-bd18-bb1db5cfddc0","resolution":{"observed_at":"2026-08-01T08:08:37.804551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:37.933677Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.933677Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:348a88dea6eef2d43e2f37b3e592440fba188a591e0504ee6f2f596418bdbe27","observation_id":"5aed5d74-2b7c-4c97-a4dc-811dd17d57de","resolution":{"observed_at":"2026-08-01T08:08:37.933677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:38.031559Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.031559Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:dd9912f1a812892ff3a57ddeeb78f07f6bf3cdd19cb3446bae3a14c2ff842dd3","observation_id":"d4881eb6-0876-4f65-9b98-6d68c483095f","resolution":{"observed_at":"2026-08-01T08:08:38.031559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:38.137557Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.137557Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:3b92b742279bb3f54c6c9422df2e4f3e791a0b01ce873df4278e650320bd980c","observation_id":"f14ac6d9-6778-45b2-b52f-324ed7e3481b","resolution":{"observed_at":"2026-08-01T08:08:38.137557Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:38.278546Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.278546Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:b2c536a389c630063048a100833cf7b6b7f22ae4c9db17483a36ef1fd496a08e","observation_id":"76c6346c-eedf-473c-8c03-1f0c9e6734a1","resolution":{"observed_at":"2026-08-01T08:08:38.278546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:38.422493Z","title":"Shafahi, M","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.422493Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:1e59c9326c9ee3bb87760ab268c8c28452c49fccb0161a320918e4393ec5ad3b","observation_id":"65940f2a-718f-4fff-8158-38efa0b042b4","resolution":{"observed_at":"2026-08-01T08:08:38.422493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.09552","last_updated":"2020-02-14T20:07:55Z","snapshot_observed_at":"2026-08-08T14:08:39.341444Z","submitted_at":"2019-09-20T15:11:09Z","title":"Defending Against Physically Realizable Attacks on Image Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.09552","snapshot_observed_at":"2026-08-01T08:08:38.573203Z","title":null,"venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.573203Z"},"links":{"cited_paper":"/paper/1909.09552","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:c272a7999d6b04706dc47cd4d0af1654280088b2df7257ef2d170734e42b6335","observation_id":"b54ca719-7115-4224-8958-04e9f08948b7","resolution":{"observed_at":"2026-08-01T08:08:38.573203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:38.701707Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.701707Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:a9daaafc6d1fd01b52b5b7df390070f8c3bd97cc51922728682df6dfe731d2fb","observation_id":"9f236fa6-e68d-4269-bb9a-2cf611b98f2e","resolution":{"observed_at":"2026-08-01T08:08:38.701707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2101.11453","last_updated":"2021-06-22T14:07:54Z","snapshot_observed_at":"2026-08-05T02:33:28.239759Z","submitted_at":"2021-01-27T14:36:23Z","title":"Meta Adversarial Training against Universal Patches","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.11453","snapshot_observed_at":"2026-08-01T08:08:38.821534Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.821534Z"},"links":{"cited_paper":"/paper/2101.11453","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:42f1741ac637513fed3a27017f7a039abcaf3416b929bf40b567b65469715028","observation_id":"956714bb-11a9-4c5e-81db-0d95e91479a9","resolution":{"observed_at":"2026-08-01T08:08:38.821534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.09994","last_updated":"2020-06-17T16:54:43Z","snapshot_observed_at":"2026-07-06T09:30:08.595544Z","submitted_at":"2020-06-17T16:54:43Z","title":"Noise or Signal: The Role of Image Backgrounds in Object Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.09994","snapshot_observed_at":"2026-08-01T08:08:38.940143Z","title":null,"venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:38.940143Z"},"links":{"cited_paper":"/paper/2006.09994","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:cca38005ccd41a2b2e575c463a7a20a73445dac031557f0ae8966ee11e739a84","observation_id":"441b7cda-44cb-44d0-a894-18f8ff0fd67f","resolution":{"observed_at":"2026-08-01T08:08:38.940143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:39.154180Z","title":"Geirhos, P","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:39.154180Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:dcf6ab01bac56cfc2cc656ed627f7669f7bbd1d1a3b5994c9e0d890ccdcc3d66","observation_id":"907d7706-f482-4524-9802-906bf254f18b","resolution":{"observed_at":"2026-08-01T08:08:39.154180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:39.302535Z","title":"Burgert, O","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:39.302535Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:79a97ce614827794ce63364cac0f2ccfd27a7fcbca55bd2f1adfcaa741bada13","observation_id":"67a7b0de-a511-4355-b206-8dc1eba66fb2","resolution":{"observed_at":"2026-08-01T08:08:39.302535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:39.471360Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:39.471360Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:943888613bcad8965a9cea40df91c143c1bc24eee7cb41b32eb73f03a46f5395","observation_id":"4646ae1d-4f3b-4599-86ee-4c792a96cbb9","resolution":{"observed_at":"2026-08-01T08:08:39.471360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:39.602446Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:39.602446Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:f513158f40cc0713b1c3c70b10284147a79fb2456efbb07704a0d77c955457bd","observation_id":"17bc83ee-a71f-4a70-8fdb-a0e5f6001a22","resolution":{"observed_at":"2026-08-01T08:08:39.602446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:39.756700Z","title":"Jiang, T","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:39.756700Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:da69a5b5e33147b864b41afa9ef65e64cc3b54f97c5a6541701840d3bde127c6","observation_id":"ee18cd0f-d671-44a6-bf4b-ff8738cad5dd","resolution":{"observed_at":"2026-08-01T08:08:39.756700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:39.892144Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:39.892144Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:0586e36cfc27ee95c6a140b068ac0e37b6b124a1982469e2cc4b57bdf42a47eb","observation_id":"18203d0e-b493-4d01-8253-4cea3bd11daf","resolution":{"observed_at":"2026-08-01T08:08:39.892144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:40.090680Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.090680Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:0f3d16332fccfa61a47f1446c86bdd948f0fff642b794052e26e61cc7748092e","observation_id":"83b9ef8d-5712-4adf-867c-838ed0cef070","resolution":{"observed_at":"2026-08-01T08:08:40.090680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:40.219227Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.219227Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:0518e3a070a0b877dfe9076e5447c364c10eddac2ca635e7d7cb3ccc2302cd65","observation_id":"569af3a7-3e0c-43cf-8ebe-9d3b2bbe7fa5","resolution":{"observed_at":"2026-08-01T08:08:40.219227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:40.333722Z","title":"Caesar, V","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.333722Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:446392afa25d24f5c77fde088b76133fc670219d3e55196c0764cedb187babec","observation_id":"27480a3f-54bb-4ea3-908f-5f120bebca4a","resolution":{"observed_at":"2026-08-01T08:08:40.333722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1702.04267","last_updated":"2017-02-21T06:53:38Z","snapshot_observed_at":"2026-08-04T06:28:06.255085Z","submitted_at":"2017-02-14T15:44:26Z","title":"On Detecting Adversarial Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1702.04267","snapshot_observed_at":"2026-08-01T08:08:40.471561Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.471561Z"},"links":{"cited_paper":"/paper/1702.04267","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:f678c5ebbf7449db1e85d44ba2abdce2e88b828b0f683c752054161b77910238","observation_id":"6e204bc9-b514-45ba-a07c-9511aaa628fc","resolution":{"observed_at":"2026-08-01T08:08:40.471561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:40.602684Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.602684Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:a1fdbaba9ab87a2dd78752c47eaa96d7acf7c739ce5f6d866516e070aa1d1047","observation_id":"38ba520c-6ab5-4d73-940a-8076e129af00","resolution":{"observed_at":"2026-08-01T08:08:40.602684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:40.723679Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.723679Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:6465ead1014d41374d8522e604c4a787ac339c9cabc2b55c694f54abec6ab43b","observation_id":"9d146b68-a87b-4986-abc9-0d64079361f2","resolution":{"observed_at":"2026-08-01T08:08:40.723679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:40.839998Z","title":"Dalal, B","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.839998Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:37cbd87e7b8fdc68f5a8bd0b4b150a859ab6c205bd02758740b557af766089df","observation_id":"bb607974-63bc-4778-ab40-1be382f8ace9","resolution":{"observed_at":"2026-08-01T08:08:40.839998Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:40.982391Z","title":"Jocher, A","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:40.982391Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:f52ca4cccc8d2de0838f3e2eec000eab48ac853d25ee7cf066ce08a99eee77ce","observation_id":"7930791d-112c-47f8-952a-0fde9157e2ef","resolution":{"observed_at":"2026-08-01T08:08:40.982391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:41.141806Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:41.141806Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:76af06de930763be02b2c60d45e57a10dff3a1962afd051d9a607195aa78337a","observation_id":"4997fb15-578b-4560-a0ba-8f90e6bb8358","resolution":{"observed_at":"2026-08-01T08:08:41.141806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T08:08:41.257593Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:41.257593Z"},"links":{"citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:ccbb2b21c3996f2f8e48ef13972cfda4f73a00fc59cacd9d63095177497c7ac5","observation_id":"49d240f4-e5c5-44a2-8056-1fc3072e6c77","resolution":{"observed_at":"2026-08-01T08:08:41.257593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T02:32:28.908342Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":47,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 0 inbound Pith citation observations for arXiv:2607.21243."}