{"as_of":"2026-08-05T17:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:237b73523201fcf7992bc786a2445695b6259d8f7c6dbec02bf45c8513e8e29e","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":16,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T13:44:56.261344Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":13,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2502.18864","last_updated":"2025-02-26T06:17:13Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-26T06:17:13Z","title":"Towards an AI co-scientist","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-11T13:02:43.571234Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2502.18864"},"observation_digest":"sha256:5fcb49271a7c3c87c2e7dc1d85a5bdb37ba484255688bae9e4d515c220eaed0b","observation_id":"65b0250c-a2b7-456a-a846-6ac6b5dc2f96","resolution":{"observed_at":"2026-05-11T13:02:44.356995Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T13:44:56.261344Z","title":"Christian Schlarmann and Matthias Hein","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.00373","last_updated":"2025-08-30T06:00:53Z","snapshot_observed_at":"2026-08-05T13:44:53.225141Z","submitted_at":"2025-08-30T06:00:53Z","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T13:44:56.261344Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2509.00373"},"observation_digest":"sha256:39a1ae2d266077b1a1d869e544861902258de91795a14ffe727f900d6692d17b","observation_id":"2a5973cb-a02f-4be9-a475-36a9752362cd","resolution":{"observed_at":"2026-08-05T13:44:56.261344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-04T13:45:27.025943Z","title":"Visual adversarial examples jailbreak aligned large language models.arXiv preprint arXiv:2306.13213,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25533","last_updated":"2026-07-06T05:00:34Z","snapshot_observed_at":"2026-08-04T13:45:23.778832Z","submitted_at":"2025-09-29T21:43:18Z","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:27.025943Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2509.25533"},"observation_digest":"sha256:7bfe11e911d9008d16dfff470af38ad14dd676b18eb07f51c1a7cab71f4faeaf","observation_id":"9a351771-dc91-40a1-969e-0b6c8e39baf7","resolution":{"observed_at":"2026-08-04T13:45:27.025943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-04T09:25:51.343016Z","title":"Visual adversarial examples jailbreak large language models.CoRR, abs/2306.13213, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-04T09:25:33.987336Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":144,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:51.343016Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:1cf260aafee500a780f3b1220d06f390a536dfa86019f3dbaacbce1b464328b3","observation_id":"531ffd92-d8cd-4423-bc72-0320ad466a2e","resolution":{"observed_at":"2026-08-04T09:25:51.343016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2512.00520","last_updated":"2026-04-27T13:00:45Z","snapshot_observed_at":"2026-07-06T22:37:16.933664Z","submitted_at":"2025-11-29T15:31:16Z","title":"Toward a Safe Internet of Agents","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-17T03:16:40.622915Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2512.00520"},"observation_digest":"sha256:1f3a9d0812459633eb7d0b9ae4d0b14a11d4aa2a29f6dfc68e851f44c66a480a","observation_id":"f107f72a-e7bd-4c96-9a39-fd1ce2e05c5d","resolution":{"observed_at":"2026-05-17T03:18:56.863655Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2604.06247","last_updated":"2026-04-06T16:29:05Z","snapshot_observed_at":"2026-07-06T22:54:48.916799Z","submitted_at":"2026-04-06T16:29:05Z","title":"SALLIE: Safeguarding Against Latent Language & Image Exploits","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T19:04:46.426969Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2604.06247"},"observation_digest":"sha256:c474ab1faa3a4740eaaa5e5ac14bc36aff5ee4ba5f66bc93fa328b08c03ed9a8","observation_id":"1f9debe2-c222-4d8d-bac2-b0d82b3df792","resolution":{"observed_at":"2026-05-10T23:30:51.168905Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2604.13803","last_updated":"2026-04-15T12:38:51Z","snapshot_observed_at":"2026-07-06T23:01:41.643335Z","submitted_at":"2026-04-15T12:38:51Z","title":"Gaslight, Gatekeep, V1-V3: Early Visual Cortex Alignment Shields Vision-Language Models from Sycophantic Manipulation","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-05-10T13:09:35.407790Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2604.13803"},"observation_digest":"sha256:64b852792cda1ccc5edd137096434b32787ac3e8d7326003fcf2f19ed2f0ae5c","observation_id":"a4b2afe4-6b81-4278-9a47-a7b21d37858c","resolution":{"observed_at":"2026-05-10T13:10:26.230242Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2605.01449","last_updated":"2026-05-02T13:56:50Z","snapshot_observed_at":"2026-08-03T12:34:05.607551Z","submitted_at":"2026-05-02T13:56:50Z","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-09T14:24:48.999632Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2605.01449"},"observation_digest":"sha256:51a105a97743461365ece6dc2cbe87958f502c261d3dff2046c7e3709471f785","observation_id":"ec89f14c-30b9-4c5e-aa7e-c98dd706d83b","resolution":{"observed_at":"2026-05-11T16:56:08.117312Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-15T07:11:16.568353Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:0056754fe192cb95618fce4c9372dec71e8425a00b608025961c14ec1ddc9e4c","observation_id":"2f395c81-659c-41af-a702-2abee27ca02f","resolution":{"observed_at":"2026-05-15T07:15:12.011445Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2605.17341","last_updated":"2026-05-17T09:21:11Z","snapshot_observed_at":"2026-07-06T23:28:21.395050Z","submitted_at":"2026-05-17T09:21:11Z","title":"Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-20T14:07:56.386933Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2605.17341"},"observation_digest":"sha256:f755fd8467e0aae028f2aef0024622dc89a0eb0816bbb312a10ebdbd8f0cc7c0","observation_id":"c5dcd8a0-1ecd-4bba-ae02-34177f862ff6","resolution":{"observed_at":"2026-05-20T14:08:20.903832Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.07595","last_updated":"2026-05-29T05:17:03Z","snapshot_observed_at":"2026-08-03T21:14:55.280239Z","submitted_at":"2026-05-29T05:17:03Z","title":"VisualLeakBench: Reproducible Action-Boundary Propagation Failures in Vision-Language Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-28T22:59:43.041678Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.07595"},"observation_digest":"sha256:2f20bd2f9be61b4cc1f6d7b81af1847fa695a02b209b03165414e7e3a31fd518","observation_id":"95cd0a8a-75c5-4b9a-82fd-0fa8c46dafdd","resolution":{"observed_at":"2026-06-28T23:02:46.377898Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.09125","last_updated":"2026-06-08T07:19:42Z","snapshot_observed_at":"2026-07-06T23:48:30.569726Z","submitted_at":"2026-06-08T07:19:42Z","title":"Unveiling Privacy Risks in Multi-modal Large Language Models: Task-specific Vulnerabilities and Mitigation Challenges","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-06-27T16:33:28.848573Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.09125"},"observation_digest":"sha256:d9c6d4e92d7bc2c74304591bcdffbefc6d986b93b71e0aef9f55de5a14d0f39f","observation_id":"91d8210c-4431-484c-9eeb-1075252bf4a4","resolution":{"observed_at":"2026-07-03T01:27:30.909100Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.11854","last_updated":"2026-06-10T09:30:37Z","snapshot_observed_at":"2026-08-01T08:16:13.928240Z","submitted_at":"2026-06-10T09:30:37Z","title":"Fine-tuning Multi-modal LLMs with ART: Art-based Reinforcement Training","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T10:30:51.490047Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.11854"},"observation_digest":"sha256:a2f4fa151dc882f68af2b792b881a7a4286991085408e17bf5d2e1a74aad1232","observation_id":"4bbe5218-121c-47a8-9c65-c0a83595a84b","resolution":{"observed_at":"2026-07-03T09:07:48.157454Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:f123a1eaa304ad98d00725ad5293a86cb63db93578512903d338b34643b9563b","observation_id":"5e9a01e2-6a59-421f-91a3-95693b5f4c73","resolution":{"observed_at":"2026-07-03T21:08:58.336406Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.26566","last_updated":"2026-06-25T03:32:12Z","snapshot_observed_at":"2026-08-03T17:22:40.185111Z","submitted_at":"2026-06-25T03:32:12Z","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-26T04:35:51.583460Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.26566"},"observation_digest":"sha256:8a5b79466ab5de2e51e06b6bbea15385a9360f6b4c9090ffffcc44ece43f6831","observation_id":"0d447d9b-423f-4ea3-b4c0-762534a77e4a","resolution":{"observed_at":"2026-06-26T04:38:59.046933Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-02T15:03:00.459707Z","title":"org/abs/2306.13213","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.21600","last_updated":"2026-05-03T19:21:06Z","snapshot_observed_at":"2026-08-04T12:21:28.482345Z","submitted_at":"2026-05-03T19:21:06Z","title":"Securing Multimodal AI through Internal Information Decomposition","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T15:03:00.459707Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2607.21600"},"observation_digest":"sha256:68bd13eb984e7cd2d6e9fedaf9f6f59454e7eb25f1e2501574a51ee9f87069f0","observation_id":"ec5622d3-6877-43fe-9108-89fb88938cc3","resolution":{"observed_at":"2026-08-02T15:03:00.459707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2306.13213/citation-record","integrity":"/paper/2306.13213/integrity","json":"/paper/2306.13213/citation-record.json","paper":"/paper/2306.13213"},"outbound":[],"paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 16 inbound Pith citation observations for arXiv:2306.13213."}