{"as_of":"2026-08-16T21:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:287d19b3753f76915462a18d45b3f96c6e1a50ceda0de9bf07ee6f3258a952d2","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":6,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":6,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":6,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:35:59.381565Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T15:47:06.715624Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","snapshot_observed_at":"2026-08-16T14:57:52.542004Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14122","snapshot_observed_at":"2026-08-10T17:05:50.532867Z","title":"Sur- rogateprompt: Bypassing the safety filter of text-to-image models via substitution","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.12612","last_updated":"2025-07-25T08:18:26Z","snapshot_observed_at":"2026-08-16T17:38:44.657176Z","submitted_at":"2025-01-22T03:29:43Z","title":"T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T17:05:50.532867Z"},"links":{"cited_paper":"/paper/2309.14122","citing_paper":"/paper/2501.12612"},"observation_digest":"sha256:424704fd52d7df8af92932a21992cb3ae50dbc69602648759f350d47b8776283","observation_id":"41c25ca5-ebf2-41da-8808-364e140769e5","resolution":{"observed_at":"2026-08-10T17:05:50.532867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","snapshot_observed_at":"2026-08-16T14:57:52.542004Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14122","snapshot_observed_at":"2026-08-15T22:35:59.381565Z","title":"Surrogateprompt: Bypassing the safety filter of text-to-image models via substitution,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.08804","last_updated":"2025-05-11T06:32:33Z","snapshot_observed_at":"2026-08-15T22:28:37.495619Z","submitted_at":"2025-05-11T06:32:33Z","title":"TokenProber: Jailbreaking Text-to-image Models via Fine-grained Word Impact Analysis","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T22:35:59.381565Z"},"links":{"cited_paper":"/paper/2309.14122","citing_paper":"/paper/2505.08804"},"observation_digest":"sha256:bd6e5ca43302bd224f0632fe2fa88b54caa941d8438790412fa69d21cac3e963","observation_id":"83b4289b-bb55-4647-9cc3-a9fb374fec2b","resolution":{"observed_at":"2026-08-15T22:35:59.381565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","snapshot_observed_at":"2026-08-16T14:57:52.542004Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14122","snapshot_observed_at":"2026-08-15T21:36:15.232968Z","title":"arXiv:2309.14122 [cs.CV], 17th Oct 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T21:36:15.232968Z"},"links":{"cited_paper":"/paper/2309.14122","citing_paper":"/paper/2505.18172"},"observation_digest":"sha256:2d9e50232a600b48d63fc9cee4cc559a64024c93a58892007be0614981895d6c","observation_id":"adcc0633-faa9-4eaa-ba80-8083bb30bb8b","resolution":{"observed_at":"2026-08-15T21:36:15.232968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","snapshot_observed_at":"2026-08-16T14:57:52.542004Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14122","snapshot_observed_at":"2026-08-05T20:31:42.559690Z","title":"Surrogateprompt: Bypassing the safety filter of text-to-image models via substitution","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-15T19:14:10.464568Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":103,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:42.559690Z"},"links":{"cited_paper":"/paper/2309.14122","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:9712ec9b8a6ebe39f9f4ef441374a53c601d082a4948c196db63755265b0276c","observation_id":"7ff72c68-e30c-44dd-bed8-db143b044052","resolution":{"observed_at":"2026-08-05T20:31:42.559690Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","snapshot_observed_at":"2026-08-16T14:57:52.542004Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","version":3},"cited_work":{"arxiv_id":"2309.14122","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14122","snapshot_observed_at":"2026-07-02T15:47:06.715624Z","title":"WaveletGPT : Wavelets meet large language models","venue":null,"work_id":"7571bf7a-c962-420c-b1ac-18d96fd17a20","year":2024},"citing_paper":{"arxiv_id":"2606.01481","last_updated":"2026-05-31T22:46:35Z","snapshot_observed_at":"2026-08-13T00:51:45.121124Z","submitted_at":"2026-05-31T22:46:35Z","title":"SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T17:05:57.685728Z"},"links":{"cited_paper":"/paper/2309.14122","citing_paper":"/paper/2606.01481"},"observation_digest":"sha256:8dc13e3c95e84a0d7c8428c930d0b5b183e065adabcc1dc99c8a595c2949e589","observation_id":"bf010261-3dbc-40b2-9ee7-72fcdbf552ec","resolution":{"observed_at":"2026-06-28T17:12:25.177012Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","snapshot_observed_at":"2026-08-16T14:57:52.542004Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","version":3},"cited_work":{"arxiv_id":"2309.14122","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14122","snapshot_observed_at":"2026-07-02T15:47:06.715624Z","title":"WaveletGPT : Wavelets meet large language models","venue":null,"work_id":"7571bf7a-c962-420c-b1ac-18d96fd17a20","year":2024},"citing_paper":{"arxiv_id":"2606.06573","last_updated":"2026-06-04T17:59:53Z","snapshot_observed_at":"2026-08-08T13:52:28.291422Z","submitted_at":"2026-06-04T17:59:53Z","title":"Multiscale POD of Transformer Attention Fields: Scale-Selective Analysis via Morlet Scalogram","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-27T23:22:41.835971Z"},"links":{"cited_paper":"/paper/2309.14122","citing_paper":"/paper/2606.06573"},"observation_digest":"sha256:b88706d2f1f515bc873568ed91b4024d8be69c441d55bac8c97aef782f1a0409","observation_id":"386bb25e-9c97-4ce5-a98e-815a74704156","resolution":{"observed_at":"2026-07-02T15:47:06.717028Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2309.14122/citation-record","integrity":"/paper/2309.14122/integrity","json":"/paper/2309.14122/citation-record.json","paper":"/paper/2309.14122"},"outbound":[],"paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","latest_version":3,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T14:57:52.542004Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 6 inbound Pith citation observations for arXiv:2309.14122."}