{"as_of":"2026-08-09T00:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ece5a56147672bd169b2e4a94853d6b98ff0233d5001b3b7e58265f275a78b3f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":44,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":44,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T15:04:10.824381Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T19:30:07.408628Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2310.12508","last_updated":"2024-04-04T07:45:38Z","snapshot_observed_at":"2026-08-03T17:30:25.153454Z","submitted_at":"2023-10-19T06:17:17Z","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","version":5},"reference_index":137,"source":"arxiv_source","source_observed_at":"2026-05-16T17:56:23.281678Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2310.12508"},"observation_digest":"sha256:f64bd41bb1336566bed95cb209b8d98afcc68e7306fbcbfeff22de8de364a8dd","observation_id":"30efb5b2-38d4-4a71-be3e-c2532196c174","resolution":{"observed_at":"2026-05-16T17:56:23.405606Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2406.14194","last_updated":"2026-04-05T17:10:43Z","snapshot_observed_at":"2026-07-06T18:34:10.892335Z","submitted_at":"2024-06-20T10:56:59Z","title":"VLBiasBench: A Comprehensive Benchmark for Evaluating Bias in Large Vision-Language Model","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-23T23:37:12.985780Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2406.14194"},"observation_digest":"sha256:3bc242103cafb95983da9b9fa8aa0ab7402d567ee6eef35c42f23686d4eefa38","observation_id":"dc63e949-132a-46ba-8a47-ae149d8a8cf1","resolution":{"observed_at":"2026-05-23T23:38:37.379221Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-08T15:04:10.824381Z","title":"Red-teaming the stable diffusion safety filter.arXiv preprint arXiv:2210.04610, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.06575","last_updated":"2025-02-10T15:44:34Z","snapshot_observed_at":"2026-08-08T14:58:20.533286Z","submitted_at":"2025-02-10T15:44:34Z","title":"Predictive Red Teaming: Breaking Policies Without Breaking Robots","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T15:04:10.824381Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2502.06575"},"observation_digest":"sha256:183c9125fff1d27d53021e6d9e3c1557763a7ff691612da44937d8e56b9004f5","observation_id":"dadb8376-2fe8-4031-baa7-492df68b2ddc","resolution":{"observed_at":"2026-08-08T15:04:10.824381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T13:46:21.103762Z","title":"Red-teaming the stable diffusion safety filter.arXiv preprint arXiv:2210.04610, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.21074","last_updated":"2025-05-27T12:00:19Z","snapshot_observed_at":"2026-08-07T13:33:55.193306Z","submitted_at":"2025-05-27T12:00:19Z","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T13:46:21.103762Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2505.21074"},"observation_digest":"sha256:4d4e4d0f3529013e90b8fc5bf40112f03da9e7a72183dd7c3e646a7d049a7c20","observation_id":"069feabf-56b7-48ad-bcbb-71e4bc0b117f","resolution":{"observed_at":"2026-08-07T13:46:21.103762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T05:27:16.156591Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.08071","last_updated":"2025-06-09T17:54:41Z","snapshot_observed_at":"2026-08-07T23:16:48.649505Z","submitted_at":"2025-06-09T17:54:41Z","title":"CuRe: Cultural Gaps in the Long Tail of Text-to-Image Systems","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:27:16.156591Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2506.08071"},"observation_digest":"sha256:7f71dd6d3b59f27e0fd0d9be2cc74aaa95736fe469b4930008aabf3ecef1202d","observation_id":"4d43f506-93da-43b2-ac54-1d6a5f4cba90","resolution":{"observed_at":"2026-08-07T05:27:16.156591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T04:55:44.680812Z","title":"arXiv preprint arXiv:2210.04610 (2022) 1","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.09363","last_updated":"2025-06-11T03:21:24Z","snapshot_observed_at":"2026-08-07T04:47:51.014501Z","submitted_at":"2025-06-11T03:21:24Z","title":"SAGE: Exploring the Boundaries of Unsafe Concept Domain with Semantic-Augment Erasing","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T04:55:44.680812Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2506.09363"},"observation_digest":"sha256:5f39188a26d41e5ecddea14fbde9c98377149862f37d8fc62eeeb1c90ec519a9","observation_id":"3dba781f-d7fc-48e6-8f27-fad422b04043","resolution":{"observed_at":"2026-08-07T04:55:44.680812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T04:52:19.067456Z","title":"Red-teaming the stable diffusion safety filter.arXiv preprint arXiv:2210.04610, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.10047","last_updated":"2025-06-11T09:09:12Z","snapshot_observed_at":"2026-08-07T04:43:52.945667Z","submitted_at":"2025-06-11T09:09:12Z","title":"GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T04:52:19.067456Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2506.10047"},"observation_digest":"sha256:a2428db591f83bb95e0008d02282e2821995eda14d938abdb2ec7f679eb8e70d","observation_id":"4bda3e92-afa6-4747-8e32-8713eaafad36","resolution":{"observed_at":"2026-08-07T04:52:19.067456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T00:27:19.703033Z","title":"Red-teaming the stable dif- fusion safety filter","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.14018","last_updated":"2025-06-16T21:30:42Z","snapshot_observed_at":"2026-08-08T14:20:33.436519Z","submitted_at":"2025-06-16T21:30:42Z","title":"\"I Cannot Write This Because It Violates Our Content Policy\": Understanding Content Moderation Policies and User Experiences in Generative AI Products","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T00:27:19.703033Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2506.14018"},"observation_digest":"sha256:ab7ad052f3864a4fe3731ce7f2d0655a3b86bac162ad5ff52a6116a9a93531eb","observation_id":"69baffef-f6b4-46e3-9668-eefda73c5a92","resolution":{"observed_at":"2026-08-07T00:27:19.703033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-06T19:06:39.320386Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.07137","last_updated":"2025-07-09T00:51:09Z","snapshot_observed_at":"2026-08-08T19:04:38.089205Z","submitted_at":"2025-07-09T00:51:09Z","title":"Automating Evaluation of Diffusion Model Unlearning with (Vision-) Language Model World Knowledge","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-06T19:06:39.320386Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2507.07137"},"observation_digest":"sha256:989b3ed112d55e4ff5533e5e1e22b7946ab067e6409c1915e17f8d2cc338df23","observation_id":"4eeff8dc-5b69-434e-906a-28513f8aff3a","resolution":{"observed_at":"2026-08-06T19:06:39.320386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-06T16:26:21.324774Z","title":"Red-teaming the stable diffusion safety filter.arXiv preprint arXiv:2210.04610, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.13598","last_updated":"2025-07-18T01:47:07Z","snapshot_observed_at":"2026-08-06T16:18:44.313450Z","submitted_at":"2025-07-18T01:47:07Z","title":"GIFT: Gradient-aware Immunization of diffusion models against malicious Fine-Tuning with safe concepts retention","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:26:21.324774Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2507.13598"},"observation_digest":"sha256:0ff26dd89b533f43d68ca05a542ff2b7bcdbff0a9e92af626a5eb0dc0315b287","observation_id":"097224c5-febd-4b76-8172-0094a64d1d89","resolution":{"observed_at":"2026-08-06T16:26:21.324774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-06T11:42:04.433290Z","title":"Rando, D","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.22499","last_updated":"2025-07-30T09:12:25Z","snapshot_observed_at":"2026-08-07T22:01:09.686657Z","submitted_at":"2025-07-30T09:12:25Z","title":"LoReUn: Data Itself Implicitly Provides Cues to Improve Machine Unlearning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T11:42:04.433290Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2507.22499"},"observation_digest":"sha256:cc56489c7eec16db35832ac35abba3cb41f6645868db28292a80075b8c9615e5","observation_id":"2fbce953-4f82-4367-8d18-e88c5bd672cc","resolution":{"observed_at":"2026-08-06T11:42:04.433290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-06T17:42:50.883150Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.883150Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:ffabfebf925c6318e272ea25e06efa2a406500f4dd9d48157188a5878c221b2b","observation_id":"d30b25dc-9f4c-4de3-884c-2cbb25a12374","resolution":{"observed_at":"2026-08-06T17:42:50.883150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-06T00:04:32.495158Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.04472","last_updated":"2025-08-06T14:19:32Z","snapshot_observed_at":"2026-08-06T00:04:30.410604Z","submitted_at":"2025-08-06T14:19:32Z","title":"Zero-Residual Concept Erasure via Progressive Alignment in Text-to-Image Model","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T00:04:32.495158Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2508.04472"},"observation_digest":"sha256:38ea7fc924abb60a7455f8a386174d7c73373d34b160830ce3390a611a339b82","observation_id":"90b66d53-051e-443c-8811-51c3df87e4ca","resolution":{"observed_at":"2026-08-06T00:04:32.495158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-05T22:32:12.208299Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.06841","last_updated":"2025-08-09T05:48:30Z","snapshot_observed_at":"2026-08-07T07:34:45.871968Z","submitted_at":"2025-08-09T05:48:30Z","title":"Memory Enhanced Fractional-Order Dung Beetle Optimization for Photovoltaic Parameter Identification","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T22:32:12.208299Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2508.06841"},"observation_digest":"sha256:51460a66e342ace0f4843c4c2a278f01d2e644b222d1bf1393be5b8e7bf74cf3","observation_id":"f987b762-6819-4523-97cb-fd03d07f2c17","resolution":{"observed_at":"2026-08-05T22:32:12.208299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-03T19:59:09.542591Z","title":"and et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2512.11815","last_updated":"2026-05-23T23:07:49Z","snapshot_observed_at":"2026-08-03T19:58:58.153442Z","submitted_at":"2025-11-26T18:59:43Z","title":"Video Deepfake Abuse: How Company Choices Predictably Shape Misuse Patterns","version":3},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-03T19:59:09.542591Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2512.11815"},"observation_digest":"sha256:8a92291092c3028a624f7f1eedbe180b2d046eda813facdf62c82a9c048b1595","observation_id":"9a309734-ec7d-45e8-956f-e17ebd7a4b4c","resolution":{"observed_at":"2026-08-03T19:59:09.542591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-03T05:05:53.583424Z","title":"Red-teaming the stable diffusion safety filter.arXiv preprint arXiv:2210.04610,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.03410","last_updated":"2026-06-03T20:46:40Z","snapshot_observed_at":"2026-08-03T05:05:52.770581Z","submitted_at":"2026-02-03T11:37:08Z","title":"UnHype: CLIP-Guided Hypernetworks for Dynamic LoRA Unlearning","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T05:05:53.583424Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2602.03410"},"observation_digest":"sha256:90a2eacbc6bf1cd9d008959c6d8e7d487af125043e485c4fe2b2e627170a09a9","observation_id":"dceef4ca-9a89-4e9f-a4f9-a8325bacb57a","resolution":{"observed_at":"2026-08-03T05:05:53.583424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2604.04575","last_updated":"2026-04-06T10:16:42Z","snapshot_observed_at":"2026-07-06T22:53:33.177713Z","submitted_at":"2026-04-06T10:16:42Z","title":"Erasure or Erosion? Evaluating Compositional Degradation in Unlearned Text-To-Image Diffusion Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T19:13:19.165859Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2604.04575"},"observation_digest":"sha256:a7b43f00be9016c84c5356e4e1410e8c8286bb5b5866d12b356d9e012859a493","observation_id":"92d5cfe2-ccd0-4d97-a30c-51ef6141b5c3","resolution":{"observed_at":"2026-05-10T23:20:51.485800Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2604.06285","last_updated":"2026-04-07T12:49:24Z","snapshot_observed_at":"2026-08-05T21:05:58.046027Z","submitted_at":"2026-04-07T12:49:24Z","title":"Harnessing Hyperbolic Geometry for Harmful Prompt Detection and Sanitization","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T19:55:16.003348Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2604.06285"},"observation_digest":"sha256:f0d00f051b3c3f7a498b5aed4769c0a90d90e4a6fc30a301250c3d9b02969ab3","observation_id":"e1bdc07c-9e5e-4a0a-8116-98935ba9876c","resolution":{"observed_at":"2026-05-10T22:25:49.139747Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2604.09213","last_updated":"2026-04-10T11:07:33Z","snapshot_observed_at":"2026-08-03T11:22:09.371179Z","submitted_at":"2026-04-10T11:07:33Z","title":"SHIFT: Steering Hidden Intermediates in Flow Transformers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-10T18:33:59.134475Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2604.09213"},"observation_digest":"sha256:ac467d8523425bff36e8aed15eaf82ae1f9a9cb62dffc2f6b8369080df07c7ab","observation_id":"e5cfc204-e8dd-4a88-b43c-d39fea4360d7","resolution":{"observed_at":"2026-05-11T00:20:55.653350Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2604.09253","last_updated":"2026-04-10T12:09:06Z","snapshot_observed_at":"2026-07-06T22:58:12.847181Z","submitted_at":"2026-04-10T12:09:06Z","title":"Mosaic: Multimodal Jailbreak against Closed-Source VLMs via Multi-View Ensemble Optimization","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-10T18:03:36.805784Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2604.09253"},"observation_digest":"sha256:5e8d0b912375436a76ef34df3eefddc12ee8d5e07552f5e3ec2fb416897ef79a","observation_id":"b5b97f17-2c94-4283-9dba-15eed072a9e5","resolution":{"observed_at":"2026-05-11T05:35:59.083195Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2604.10032","last_updated":"2026-04-11T05:06:15Z","snapshot_observed_at":"2026-07-06T22:58:43.155246Z","submitted_at":"2026-04-11T05:06:15Z","title":"Closed-Form Concept Erasure via Double Projections","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-10T16:44:57.265729Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2604.10032"},"observation_digest":"sha256:f004a412f5cf65957e72eb9b13a0335267bf88bc1d3935d30ce01bf766ff72f7","observation_id":"189cbbb5-cfcd-4f2c-91f3-49d1b99dfcec","resolution":{"observed_at":"2026-05-11T08:16:00.850753Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:d4f49fe85e299cc146b9d20416f3c3812bd327028433a7e8a57de99f6ae7cb72","observation_id":"ba0a17e2-f99f-49b2-8b94-91b70afdf8fc","resolution":{"observed_at":"2026-05-11T23:31:14.149119Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2605.01113","last_updated":"2026-05-01T21:33:06Z","snapshot_observed_at":"2026-08-08T22:01:38.242789Z","submitted_at":"2026-05-01T21:33:06Z","title":"Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-09T19:03:00.734760Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2605.01113"},"observation_digest":"sha256:54a3fc10f8e4bf0dc3c61937341f314d8344bbaa9dc1d5766d6c4abb551da4e4","observation_id":"62d51980-131a-4b20-a2a3-6194ef5b767d","resolution":{"observed_at":"2026-05-11T15:56:27.429603Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2605.18719","last_updated":"2026-05-18T17:50:04Z","snapshot_observed_at":"2026-08-03T04:40:08.919496Z","submitted_at":"2026-05-18T17:50:04Z","title":"SafeDiffusion-R1: Online Reward Steering for Safe Diffusion Post-Training","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-05-20T11:26:55.810822Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2605.18719"},"observation_digest":"sha256:24e74e02f8831a80a4087975ef1bc26e4374257944b87b86358ad8f1993fd940","observation_id":"edc70e0c-ed98-45da-84d0-95b651723d13","resolution":{"observed_at":"2026-05-20T11:28:14.348923Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2605.19739","last_updated":"2026-05-25T09:07:55Z","snapshot_observed_at":"2026-08-01T10:43:34.293585Z","submitted_at":"2026-05-19T12:10:09Z","title":"FlowErase-RL: Rethinking Concept Erasure as Reward Optimization in Flow Matching Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-20T05:27:47.218349Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2605.19739"},"observation_digest":"sha256:d57e3ec2ef703bb24061abd1eec8c5f0747f28b8bd87261f037a035a6d9ea0e3","observation_id":"509a8273-35c9-4845-9910-af04415903b5","resolution":{"observed_at":"2026-05-20T05:28:04.249811Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2605.19739","last_updated":"2026-05-25T09:07:55Z","snapshot_observed_at":"2026-08-01T10:43:34.293585Z","submitted_at":"2026-05-19T12:10:09Z","title":"FlowErase-RL: Rethinking Concept Erasure as Reward Optimization in Flow Matching Models","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-30T18:18:15.772860Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2605.19739"},"observation_digest":"sha256:2f47a0db45052a88636f669b1b63bd456a7c45ada1c3b407ba0ab2419e787769","observation_id":"c1b7f489-b809-418a-8ea3-e69f29e76800","resolution":{"observed_at":"2026-07-01T15:05:47.554863Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2605.26332","last_updated":"2026-05-25T21:11:59Z","snapshot_observed_at":"2026-08-06T04:03:58.549335Z","submitted_at":"2026-05-25T21:11:59Z","title":"Erased but Exploitable: Black-box Embedding-Aware Prompting Against Unlearned Text-to-Image Diffusion Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-29T22:14:36.290982Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2605.26332"},"observation_digest":"sha256:99cb57ba7bc5487c5f52a915717d13f2720f0faca033e016b5cfda0c2236c44c","observation_id":"09ed3b0f-e5aa-46df-a790-2325131c2d3f","resolution":{"observed_at":"2026-06-29T22:34:02.827904Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2605.29390","last_updated":"2026-05-28T05:43:43Z","snapshot_observed_at":"2026-08-07T09:40:21.399335Z","submitted_at":"2026-05-28T05:43:43Z","title":"Orthogonal Negative Guidance in Attention Feature Space for Text-to-Image Generation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-29T08:30:02.532832Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2605.29390"},"observation_digest":"sha256:55a578092d67127ea35932639c90a18df72350d09c1c71d84597d30930606e8b","observation_id":"a6519072-f836-4a2b-960e-a315f47b80ce","resolution":{"observed_at":"2026-06-29T08:33:15.048106Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.00140","last_updated":"2026-06-10T10:51:44Z","snapshot_observed_at":"2026-08-08T09:53:22.854267Z","submitted_at":"2026-05-29T00:02:41Z","title":"Geometric Erasure by Contrastive Velocity Matching in Rectified Flows","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-06-28T23:50:44.624338Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.00140"},"observation_digest":"sha256:10371e458f956aacd50faa7fb53ff493a2ebcb045bd09aaf23cf88652855c4be","observation_id":"63f3040b-738c-4105-bb12-15918d9fe22a","resolution":{"observed_at":"2026-06-28T23:52:49.372925Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.01837","last_updated":"2026-06-01T07:49:12Z","snapshot_observed_at":"2026-07-06T23:42:21.252086Z","submitted_at":"2026-06-01T07:49:12Z","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-28T14:17:52.902183Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.01837"},"observation_digest":"sha256:c9c2da2ddfff787c002c4c92398b0f116f0495df617643cf027c0f20773f8b05","observation_id":"cc55cab7-ae3a-47b2-a32c-79e6451a5842","resolution":{"observed_at":"2026-07-01T23:26:23.287355Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.02453","last_updated":"2026-06-01T16:25:10Z","snapshot_observed_at":"2026-08-02T22:48:07.065976Z","submitted_at":"2026-06-01T16:25:10Z","title":"Initialization is Half the Battle: Generating Diverse Images from a Guidance Potential Posterior","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-28T15:19:32.238094Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.02453"},"observation_digest":"sha256:7de56793ec1da5cff426b8f59fb48556c7508625260e1feac9ea1307adf28ff9","observation_id":"eec0650a-35c6-4258-bffd-8661e9867565","resolution":{"observed_at":"2026-07-01T22:36:16.679465Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.06140","last_updated":"2026-06-04T13:19:53Z","snapshot_observed_at":"2026-07-06T23:46:01.165261Z","submitted_at":"2026-06-04T13:19:53Z","title":"RedEdit: Agentic Red-Teaming of Image Safety Classifiers via MCTS-Guided Photo-Editing","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-06-28T00:42:33.088388Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.06140"},"observation_digest":"sha256:c84033164fa8eca4331c732e10d861d0c848acadc5d9c0438fd2f970ffffc66f","observation_id":"771d36e9-0670-42fd-936b-1f580833b4b8","resolution":{"observed_at":"2026-07-02T14:07:02.811855Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.06356","last_updated":"2026-06-20T22:01:08Z","snapshot_observed_at":"2026-08-07T19:08:32.937069Z","submitted_at":"2026-06-04T16:24:39Z","title":"Where Should Knowledge Enter? A Layered Framework for Knowledge Infusion in Multimodal Iterative Generative Model","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-28T01:28:55.698724Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.06356"},"observation_digest":"sha256:e1f61f6920bde3af5e6ff4956d12bba0b47bfbcc96450815fa32c4ee28459e8c","observation_id":"3831dd77-d44e-4b0f-8849-4381e9cb55a6","resolution":{"observed_at":"2026-07-02T13:16:58.543137Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.06875","last_updated":"2026-06-05T03:43:04Z","snapshot_observed_at":"2026-08-08T17:46:30.236646Z","submitted_at":"2026-06-05T03:43:04Z","title":"Unified Safe In-context Image Generation in Multimodal Diffusion Transformers via Restricting Unsafe Information Flows","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T22:58:44.478077Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.06875"},"observation_digest":"sha256:0dbfc50042c81a8bcd1899698b54a706665791c002e2dec40fc308a061115e35","observation_id":"ce4804bc-5012-46ae-86b3-58ab0b04dd2b","resolution":{"observed_at":"2026-07-02T16:07:09.105956Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.17257","last_updated":"2026-06-15T20:03:09Z","snapshot_observed_at":"2026-08-02T05:58:02.918004Z","submitted_at":"2026-06-15T20:03:09Z","title":"Pulling The REINS: Training-Free Safety Alignment of Video Diffusion Models via Representation Steering","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T03:44:36.071488Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.17257"},"observation_digest":"sha256:a64a6afec25a44bbfeb8c46e51410367dfc47b53806c2f5ea405b9d2581c8b91","observation_id":"508e50a8-f7bf-454a-a0cd-32d27c4895c5","resolution":{"observed_at":"2026-07-03T17:48:45.925768Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.24192","last_updated":"2026-06-23T06:22:00Z","snapshot_observed_at":"2026-08-06T06:51:13.657171Z","submitted_at":"2026-06-23T06:22:00Z","title":"Co-occurring associated retained concepts in Diffusion Unlearning","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-26T00:50:58.689718Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.24192"},"observation_digest":"sha256:23ec92674024f0b458cab3917e79be48d54d37bf908cb8316ece7a3959f1f7c9","observation_id":"9edef38f-2782-43e0-97bf-b8ffdb098c6a","resolution":{"observed_at":"2026-07-04T16:09:57.486746Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.25548","last_updated":"2026-06-24T08:25:30Z","snapshot_observed_at":"2026-08-02T15:09:20.888954Z","submitted_at":"2026-06-24T08:25:30Z","title":"Concept Removal for Frontier Image Generative Models","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-06-25T21:18:32.620951Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.25548"},"observation_digest":"sha256:db3bfc685130532882623442e948dbe6fd72d21beab30a629a3b84fff0874a6e","observation_id":"11244526-f4b7-414c-80b4-95699b93d437","resolution":{"observed_at":"2026-07-04T19:30:07.410007Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2606.27147","last_updated":"2026-06-25T15:18:31Z","snapshot_observed_at":"2026-07-07T00:01:24.919835Z","submitted_at":"2026-06-25T15:18:31Z","title":"Safe Autoregressive Image Generation with Iterative Self-Improving Codebooks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-26T05:51:01.446139Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2606.27147"},"observation_digest":"sha256:2b2ebf075dca634a0a4981e9d2666bb1e82af2d9af52dd768f595947f4cf9754","observation_id":"9d19c59f-add2-4392-a18a-58a68fe889b0","resolution":{"observed_at":"2026-07-04T12:49:52.907553Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-12T09:37:15.997513Z","title":"Red-teaming the stable diffusion safety filter.arXiv preprint arXiv:2210.04610, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.02582","last_updated":"2026-07-01T00:20:58Z","snapshot_observed_at":"2026-08-06T16:34:37.501029Z","submitted_at":"2026-07-01T00:20:58Z","title":"Evaluating Intellectual Property Guardrails of Generative Image Models: A Technical Report","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-12T09:37:15.997513Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2607.02582"},"observation_digest":"sha256:6cd092803df11702df21a4a148340e1d30929be90e6c5a8093907fa6bad0adef","observation_id":"b4211f0d-2159-4da2-837f-294e9363b48e","resolution":{"observed_at":"2026-07-12T09:37:15.997513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-02T00:41:54.327706Z","title":"arXiv preprint arXiv:2210.04610 (2022) 1, 3","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14945","last_updated":"2026-07-16T12:53:45Z","snapshot_observed_at":"2026-08-06T05:40:33.810215Z","submitted_at":"2026-07-16T12:53:45Z","title":"Introspective Attention Modulation for Safe Text-to-Image Generation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-02T00:41:54.327706Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2607.14945"},"observation_digest":"sha256:8da718358850db9c78ef3092693d7efad35ed421376e3e74b093ef0d6a68e839","observation_id":"5bc1920f-8788-4ea1-adde-2a285b409554","resolution":{"observed_at":"2026-08-02T00:41:54.327706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-01T17:07:54.486767Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17779","last_updated":"2026-07-20T10:09:30Z","snapshot_observed_at":"2026-08-06T08:52:24.582710Z","submitted_at":"2026-07-20T10:09:30Z","title":"Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-01T17:07:54.486767Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2607.17779"},"observation_digest":"sha256:d54e76e28052ad707101223592a41e009c69b90a43a7afa55582887743534fe8","observation_id":"87ceca04-b934-45cf-a12e-bcc1bdbcd289","resolution":{"observed_at":"2026-08-01T17:07:54.486767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-31T23:33:57.639498Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.23934","last_updated":"2026-07-27T02:11:58Z","snapshot_observed_at":"2026-08-07T14:21:47.373100Z","submitted_at":"2026-07-27T02:11:58Z","title":"DECAF: De-Clustering for Adaptive Representational Unlearning","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-07-31T23:33:57.639498Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2607.23934"},"observation_digest":"sha256:94cfa1e127726230378dce546d8016a95c844b95b09778689a4eb83c26b08902","observation_id":"dab85d5f-c012-4c50-b048-84e37d048f83","resolution":{"observed_at":"2026-07-31T23:33:57.639498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-31T09:23:52.492793Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.492793Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:32031f1888679502ecc2b0f977664078b8fec433962c7a139d88bb00534e3153","observation_id":"d1e860ea-16ee-43f7-bec3-4b0c4c30aa4a","resolution":{"observed_at":"2026-07-31T09:23:52.492793Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T00:14:43.164166Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-08T23:10:53.848778Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.164166Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:a3ca951a75212062abd9add2c8d7dfd6872037acb63408ab4658d7368c26988e","observation_id":"01080458-b9aa-43e6-a40b-854760dd5075","resolution":{"observed_at":"2026-08-07T00:14:43.164166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2210.04610/citation-record","integrity":"/paper/2210.04610/integrity","json":"/paper/2210.04610/citation-record.json","paper":"/paper/2210.04610"},"outbound":[],"paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","latest_version":5,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 44 inbound Pith citation observations for arXiv:2210.04610."}