{"as_of":"2026-08-11T05:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f5b7ca46ed366f01bc07800ffef6e43a8e8d80f4eda21147f4883c09eccd1ed7","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T22:52:57.330924Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.27936/citation-record","integrity":"/paper/2607.27936/integrity","json":"/paper/2607.27936/citation-record.json","paper":"/paper/2607.27936"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:53.450995Z","title":"IEEE Transactions on Neural Networks and Learning Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:53.450995Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:0245ec117d134cfbcf7948a7d84212560cda0df14778d35a46c9d666a2963c3c","observation_id":"d3bf9712-0f6a-448f-8781-c7ebba58258e","resolution":{"observed_at":"2026-07-31T22:52:53.450995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:53.521426Z","title":"Stealing Machine Learning Models via Prediction APIs , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:53.521426Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:c7a70085d2d177fb0c646b71fbcc3db1830110b6d05654049d8c66e10ad12a35","observation_id":"9df56bf5-9942-44ec-8acc-a0eb89573a10","resolution":{"observed_at":"2026-07-31T22:52:53.521426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:53.591140Z","title":"IEEE Transactions on Pattern Analysis and Machine Intelligence , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:53.591140Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:c5a68ad3d7ef4b97c7382a1987b08fdcfc3d79b0f32ba73f6e78e91f57676627","observation_id":"f96e720d-5295-44aa-816d-57dbbb4b3628","resolution":{"observed_at":"2026-07-31T22:52:53.591140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:53.666730Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:53.666730Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:3749ebe45682f5e39b5f2b1f2925894caacf4236b1367a3bb5bc4b0d6dc0043a","observation_id":"3ca57d4a-936b-4eb1-99ca-8fe191d5387c","resolution":{"observed_at":"2026-07-31T22:52:53.666730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:53.737811Z","title":"25th Annual Network and Distributed System Security Symposium , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:53.737811Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:24f7af57cc3f11e3b516ac55c1d37c37b0bb2b70d0cc2ba0f0bcbcdab8b43dbb","observation_id":"a3164e67-5f81-47f3-9e1c-69734592b82e","resolution":{"observed_at":"2026-07-31T22:52:53.737811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-07-31T22:52:53.845277Z","title":"arXiv preprint arXiv:1712.05526 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:53.845277Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:bf604649c4701b3b2bc3d05c2743688e0f6a923e30423b62cfb66029efee30ca","observation_id":"8e3bfda1-3a6f-4462-9243-6d49fb2432c0","resolution":{"observed_at":"2026-07-31T22:52:53.845277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:53.927008Z","title":"2019 IEEE International Conference on Image Processing , pages =","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:53.927008Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:6872ba7ed38174ee0b2639b0b74c058bf4514454144665444374cd8d5eb9bc63","observation_id":"5b2a2db6-2747-40e2-9a78-0e4dcd26cd85","resolution":{"observed_at":"2026-07-31T22:52:53.927008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.000897Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.000897Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:b13fb1e5a50592b0602e4f5831b19eccf3d8d2c64f948e0d7f612206b6b31f3f","observation_id":"d407aa5c-cf80-45b1-8be4-e42dfcb9187f","resolution":{"observed_at":"2026-07-31T22:52:54.000897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.104096Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision , pages =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.104096Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:1e8f283061614324e8b0a6cd1b050d4f329c0d4a63210a6b0a2e8dfc262e70f7","observation_id":"259e2607-ab4c-4cf9-9073-0a79ef77b6c7","resolution":{"observed_at":"2026-07-31T22:52:54.104096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.167891Z","title":"International Conference on Learning Representations , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.167891Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:f3f50d112fba58bf16b13a828abe20021b64a9e4e9e44a1bbbd89ed048ee78c2","observation_id":"de58c3f5-2a02-4d94-a693-4ed5d8ea7936","resolution":{"observed_at":"2026-07-31T22:52:54.167891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.257712Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.257712Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:a4717c44ce81421e236a080a56780aa3b87d49e5c4550039a69475c13d362f40","observation_id":"fdcf0bdf-0e3d-46ac-85ac-8f125a4692a7","resolution":{"observed_at":"2026-07-31T22:52:54.257712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.351489Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.351489Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:ba1c94274f76f7a0a2c1fa8d58a41caaca004ea28d8d7096739748136b544b94","observation_id":"5dbb7766-fbaf-4927-abe7-60708cd088a3","resolution":{"observed_at":"2026-07-31T22:52:54.351489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.447598Z","title":"International and European Labour Law , pages =","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.447598Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:710d45667a27f7240c1faca992e51cb98a3f79aa7e64daaa07fe3209e0f48dd9","observation_id":"31e66c50-90ab-4c29-b7bc-e598ed8430f2","resolution":{"observed_at":"2026-07-31T22:52:54.447598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.540594Z","title":"2015 IEEE Symposium on Security and Privacy , pages =","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.540594Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:9adf75aa276ce0cfadfd7609d002bfe9862ff4c805554d61ec4acecb9087527f","observation_id":"f59a09be-efed-4670-b59d-ce6214d3341a","resolution":{"observed_at":"2026-07-31T22:52:54.540594Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-10T18:11:31.253134Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-07-31T22:52:54.601042Z","title":"arXiv preprint arXiv:1912.02771 , year=","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.601042Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:9c86babdb7ba93885a7e7690e2ac884d0b88135a12ff004d60a5e32c0c2d80bc","observation_id":"59bf7910-64de-41f7-8052-5cd39c9c78af","resolution":{"observed_at":"2026-07-31T22:52:54.601042Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.685791Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.685791Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:b90c23e345019d50c8c965763ad25aa454f1c2b80084dac4dbe87c27015a93b8","observation_id":"6a28d4aa-e8a8-45ff-8a31-c7f235a769d8","resolution":{"observed_at":"2026-07-31T22:52:54.685791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.748346Z","title":"and Jia, Hengrui and Travers, Adelin and Zhang, Baiwu and Lie, David and Papernot, Nicolas , title =","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.748346Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:f140b02b48c55f61ef45df59b23e0bfb9d4c747358e9b8c97c38ab8b4062411e","observation_id":"e343eecf-ffab-40ec-8587-3059cf95d216","resolution":{"observed_at":"2026-07-31T22:52:54.748346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.845905Z","title":"2022 IEEE 7th European Symposium on Security and Privacy , pages =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.845905Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:adad26bc10251618cbe81a14a3479626e429ad098783b21ac39b71b82724d709","observation_id":"4f40b27b-fac6-48cb-a3ac-6858c4ce3812","resolution":{"observed_at":"2026-07-31T22:52:54.845905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:54.941684Z","title":"Proceedings 2023 Network and Distributed System Security Symposium , year =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:54.941684Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:6f5c0a96e26856220bf7de8cf1f01e90c51e9dd9de33bf51f5daab9454026bc9","observation_id":"678fb621-c668-4aee-add9-c2f124bd2a0d","resolution":{"observed_at":"2026-07-31T22:52:54.941684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.001724Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.001724Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:f367516b5259bb27ab4ff3e87cba3da02d689559125bafc03dc734fffc63fa69","observation_id":"2a7466f3-5e1c-4779-a4c8-1dc9101a1985","resolution":{"observed_at":"2026-07-31T22:52:55.001724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.093387Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.093387Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:0f782a8b71a465be55a27878bdc49b7099d16939c861a9cfe8a96cb8e396c3fe","observation_id":"431fed40-011b-4a98-8f5e-fd0be8769ab1","resolution":{"observed_at":"2026-07-31T22:52:55.093387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.156157Z","title":"IEEE INFOCOM 2022 -- IEEE Conference on Computer Communications , pages =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.156157Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:e6f5ad2b1ae906e95627b5fd170d674620f3ae6e988599d4a105a5aa4dcc023e","observation_id":"1e1cb1d1-0614-4373-9dd9-5d422099cbcf","resolution":{"observed_at":"2026-07-31T22:52:55.156157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10659","last_updated":"2023-12-13T15:00:28Z","snapshot_observed_at":"2026-07-06T16:34:04.003157Z","submitted_at":"2023-09-12T02:42:39Z","title":"Exploiting Machine Unlearning for Backdoor Attacks in Deep Learning System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10659","snapshot_observed_at":"2026-07-31T22:52:55.245308Z","title":"arXiv preprint arXiv:2310.10659 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.245308Z"},"links":{"cited_paper":"/paper/2310.10659","citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:b17e3735d6c9261909aee53fb889896c569ffd24f0fd434e556e6c5686ed7a29","observation_id":"7f580be4-6c50-450d-b75a-afed3d069a26","resolution":{"observed_at":"2026-07-31T22:52:55.245308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.305393Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.305393Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:3ba117f7d43ee9e13b4e2da0f2344a82e5d9ca481e1d94adcebf8bce03d9d469","observation_id":"46fac197-deac-4f9e-b4c9-5c1ef63d93db","resolution":{"observed_at":"2026-07-31T22:52:55.305393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.425565Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.425565Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:d0a47485a55f4ef154c274a80de2bd2bdba4d804ae71dc685c8e9fa30891df93","observation_id":"cb094e48-97a4-430e-8d96-88e4108e35de","resolution":{"observed_at":"2026-07-31T22:52:55.425565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.488137Z","title":"When Forgetting Triggers Backdoors: A Clean Unlearning Attack , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.488137Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:371afb347f9827d5d231736831d6c74d54111ff966ecdd15bf97e7573b42377d","observation_id":"c924d37d-a41b-4f45-830e-ea5564e534fd","resolution":{"observed_at":"2026-07-31T22:52:55.488137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.566418Z","title":", title =","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.566418Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:5ad29ea6af8b61138470b9403aba5ac2c69c057d72d76a9b87fb5548489de1c9","observation_id":"9992c57e-ae73-4a2c-b213-833cd3d48f83","resolution":{"observed_at":"2026-07-31T22:52:55.566418Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.652984Z","title":"International Symposium on Research in Attacks, Intrusions, and Defenses , pages =","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.652984Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:02cd0ce5abdf662340257470aee3b74d30a77d62eba23e2fa38bbe414cf20fa5","observation_id":"084c9268-a371-40c4-8995-7d2429201b10","resolution":{"observed_at":"2026-07-31T22:52:55.652984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.709949Z","title":"and Nepal, Surya , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.709949Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:0e8a076140c8883eee3bd721c1a7364467fd8185b444cf1d26433126ca681b33","observation_id":"49e13414-2a53-4f06-af2a-e8c313ececd3","resolution":{"observed_at":"2026-07-31T22:52:55.709949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.794170Z","title":"Proceedings of the 34th International Conference on Machine Learning , volume =","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.794170Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:96dca27a4c53c3a6295cdaa27372eed9012d8ee73525810d5ea1f267f4af241d","observation_id":"9f1d73f8-dae6-44a7-b2fe-4e84cc2e9d0f","resolution":{"observed_at":"2026-07-31T22:52:55.794170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.888291Z","title":"Morley and Jia, Ruoxi , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.888291Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:d8bd8177deadb64781080439cd6fdb450af324c2e6e6c57d09b1489844dc41cd","observation_id":"0a6bd932-4215-40f2-aae6-d4472a9d139b","resolution":{"observed_at":"2026-07-31T22:52:55.888291Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:55.978339Z","title":"and Rao, K","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:55.978339Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:85bd7bbd285f9153474aa90b01e2884a13afdf0a5554389b9eef1a1b2ed4f6b8","observation_id":"65f1c80c-3949-483c-a1b8-b35d37460f79","resolution":{"observed_at":"2026-07-31T22:52:55.978339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.065810Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.065810Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:8153fd80eb87f727d9b57356466b005c7080c26b1d933f04ea7faafe51e7ba49","observation_id":"7ea78ff7-45f9-4dbb-9ae2-f94fce775c4d","resolution":{"observed_at":"2026-07-31T22:52:56.065810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.149545Z","title":"2009 IEEE Conference on Computer Vision and Pattern Recognition , pages =","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.149545Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:0123ea7ce734441541e88420e49e8aaaaff4aadbba8ac45178545a5fd90cdfee","observation_id":"f1b0a2a4-1ff0-4813-9f5f-184fed22dea9","resolution":{"observed_at":"2026-07-31T22:52:56.149545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.241077Z","title":"European Conference on Computer Vision , pages =","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.241077Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:796a0ea6444ab3304fb3a0b9062f1bb35017752489a05b7ea1b131b454a1bc09","observation_id":"92fd91e8-c265-458d-9081-918c0a684af4","resolution":{"observed_at":"2026-07-31T22:52:56.241077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.326986Z","title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , pages =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.326986Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:a6d7f37ca804fe9da3615d049236155c4d6b1bed94d2acf7d4a2981d1bb7211c","observation_id":"797ce52f-4213-4213-bb18-29e47df2d46d","resolution":{"observed_at":"2026-07-31T22:52:56.326986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.410332Z","title":"International Conference on Medical Image Computing and Computer-Assisted Intervention , pages =","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.410332Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:d8ea700d64f52427df1ea5a76610fd45b729dfa83111dceb74027c81699dad5f","observation_id":"6da00874-2521-4ffc-9148-e23a2258c484","resolution":{"observed_at":"2026-07-31T22:52:56.410332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.495322Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.495322Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:706c6be2a28722529ba418d3d8243fb79d845bce102aef0cf06fa2563b558375","observation_id":"4192d8ae-6118-4523-bcec-2d2bf22659ab","resolution":{"observed_at":"2026-07-31T22:52:56.495322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.580258Z","title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.580258Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:f0ef02be1995554866c532ac0629025fe605b75bb605a224e178f3f6c7137a86","observation_id":"1b9c41d6-f7da-4263-90ee-4e3dfa925130","resolution":{"observed_at":"2026-07-31T22:52:56.580258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:56.778946Z","title":"2025 , organization=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:56.778946Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:bd3445c963e050b46e72f55298a9e00310edbbdcc4e531052fb326815bcf53a8","observation_id":"964b16eb-f324-4135-bfa8-7fe6b5d54d1e","resolution":{"observed_at":"2026-07-31T22:52:56.778946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:52:57.330924Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-07-31T22:52:57.330924Z"},"links":{"citing_paper":"/paper/2607.27936"},"observation_digest":"sha256:9d5a1a456896c1c042acc88e50e990d36bce60f196811fe1b031c29ff965e707","observation_id":"34425761-9549-4999-9340-914dde37a88b","resolution":{"observed_at":"2026-07-31T22:52:57.330924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.27936","last_updated":"2026-07-30T09:46:02Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T09:16:13.053181Z","submitted_at":"2026-07-30T09:46:02Z","title":"Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2607.27936."}