{"as_of":"2026-08-08T22:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:16d50f2d542f22fe18b7ecd6476dea660eeeac80edfc6a90d9452ee9e6ba31a0","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:26:01.236234Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T01:37:30.924252Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T14:26:01.236234Z","title":"Divide-and-Conquer Attack: Harnessing the Power of LLM to Bypass Safety Filters of Text-to-Image Models, March 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18979","last_updated":"2026-05-23T07:45:54Z","snapshot_observed_at":"2026-08-07T14:20:18.070444Z","submitted_at":"2025-05-25T05:13:06Z","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:26:01.236234Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2505.18979"},"observation_digest":"sha256:766036db73bee9cc7f91a0e0610e5a21a9a8345c48faec8f62a86110c816902c","observation_id":"09b1064f-b7a6-44c5-ba4d-98966ebe83d0","resolution":{"observed_at":"2026-08-07T14:26:01.236234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T13:46:18.229670Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model.arXiv preprint arXiv:2312.07130, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21074","last_updated":"2025-05-27T12:00:19Z","snapshot_observed_at":"2026-08-07T13:33:55.193306Z","submitted_at":"2025-05-27T12:00:19Z","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:46:18.229670Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2505.21074"},"observation_digest":"sha256:ce97a0bebd9f4b228c3fd07224420693d51b076f3031941c6c1ea1c588ef2c02","observation_id":"e67544bf-ce66-444a-bb28-aef262b2cd78","resolution":{"observed_at":"2026-08-07T13:46:18.229670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T12:25:30.761175Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model.arXiv preprint arXiv:2312.07130, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24539","last_updated":"2026-07-28T16:02:36Z","snapshot_observed_at":"2026-08-07T14:30:36.260777Z","submitted_at":"2025-05-30T12:46:44Z","title":"Localizing Persona Representations in LLMs","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:30.761175Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2505.24539"},"observation_digest":"sha256:22caf13e44e600a0ed9e5d2fc5addc7384a2cd3d20d7ba45a5b799598ea138d4","observation_id":"7cbacef2-0873-40c4-b0e7-318c830dd4f3","resolution":{"observed_at":"2026-08-07T12:25:30.761175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T11:02:04.729201Z","title":"Divide-and-Conquer Attack: Harnessing the Power of LLM to Bypass the Censorship of Text-to-Image Generation Model.arXiv2023, arXiv:2312.07130v1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03683","last_updated":"2025-06-04T08:13:53Z","snapshot_observed_at":"2026-08-07T10:55:11.199820Z","submitted_at":"2025-06-04T08:13:53Z","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:02:04.729201Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2506.03683"},"observation_digest":"sha256:369b9f275e3ea31b2f2d27ade1bcb5077f177b39b8038b85743f71cae4274187","observation_id":"0bd67f19-757b-4812-a191-9dc6fb7a20b7","resolution":{"observed_at":"2026-08-07T11:02:04.729201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T04:52:17.658739Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass safety filters of text-to-image models.arXiv preprint arXiv:2312.07130, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.10047","last_updated":"2025-06-11T09:09:12Z","snapshot_observed_at":"2026-08-07T04:43:52.945667Z","submitted_at":"2025-06-11T09:09:12Z","title":"GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T04:52:17.658739Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2506.10047"},"observation_digest":"sha256:107621c4a3418b30d576c43a2c8260ecdaa93163b37aa0e68d3171ab02d36792","observation_id":"c043d22d-33ad-42b4-af50-2e85c8abd877","resolution":{"observed_at":"2026-08-07T04:52:17.658739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-05T20:31:42.811235Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass safety filters of text-to-image models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":106,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:42.811235Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:1a637f67f2fb49f20dfa434e8105a65e180398c9c5c9c891229ff43a844231f3","observation_id":"dd7cf4ac-fed9-4686-a71f-b72d7d97adb3","resolution":{"observed_at":"2026-08-05T20:31:42.811235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-03T11:47:40.843593Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.05150","last_updated":"2026-05-29T00:04:54Z","snapshot_observed_at":"2026-08-03T11:47:39.412842Z","submitted_at":"2026-01-08T17:40:50Z","title":"$PC^2$: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T11:47:40.843593Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2601.05150"},"observation_digest":"sha256:f9b1084825eceac463c16ee17d41d9783ca0c78c04dc818173639d74c934e7aa","observation_id":"0d94cf66-b3c6-4cbd-8922-44ae15260d29","resolution":{"observed_at":"2026-08-03T11:47:40.843593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2605.01113","last_updated":"2026-05-01T21:33:06Z","snapshot_observed_at":"2026-08-08T22:01:38.242789Z","submitted_at":"2026-05-01T21:33:06Z","title":"Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-09T19:03:00.734760Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2605.01113"},"observation_digest":"sha256:7918d21857c70342ab75f20a63b5cd8b72e5c957e65eda0c7808890b65125e1b","observation_id":"eed65d44-6bbd-44ab-91e2-30b0763c4dd3","resolution":{"observed_at":"2026-05-11T15:56:27.437056Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2605.01761","last_updated":"2026-05-03T07:49:51Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:49:51Z","title":"TrajShield: Trajectory-Level Safety Mediation for Defending Text-to-Video Models Against Jailbreak Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T19:27:00.278658Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2605.01761"},"observation_digest":"sha256:e44a81e27d7bd0808fdfe445e0b42a46b8a5bbcf372b95041ae151a255884843","observation_id":"bca2c67e-5de6-454f-817d-2b6e390170d5","resolution":{"observed_at":"2026-05-09T05:55:29.254214Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2605.26332","last_updated":"2026-05-25T21:11:59Z","snapshot_observed_at":"2026-08-06T04:03:58.549335Z","submitted_at":"2026-05-25T21:11:59Z","title":"Erased but Exploitable: Black-box Embedding-Aware Prompting Against Unlearned Text-to-Image Diffusion Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T22:14:36.290982Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2605.26332"},"observation_digest":"sha256:caa63f33e3b63f2d1632c148dbe177413bb1d2f2a6be9807d7767163bf114ba7","observation_id":"ad79dc95-b43c-4002-9c83-bfc3ebc1b66e","resolution":{"observed_at":"2026-06-29T22:34:02.812686Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2606.01481","last_updated":"2026-05-31T22:46:35Z","snapshot_observed_at":"2026-08-06T16:16:18.407347Z","submitted_at":"2026-05-31T22:46:35Z","title":"SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T17:05:57.685728Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2606.01481"},"observation_digest":"sha256:e21606227355630edd896a60b9869ad393a4c6a4513d7434bd91d42f3a64d41f","observation_id":"a9013330-d9f2-4af4-a357-6cb40bc19edf","resolution":{"observed_at":"2026-06-28T17:12:25.188871Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2606.01837","last_updated":"2026-06-01T07:49:12Z","snapshot_observed_at":"2026-07-06T23:42:21.252086Z","submitted_at":"2026-06-01T07:49:12Z","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T14:17:52.902183Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2606.01837"},"observation_digest":"sha256:e2720864a42bd9ed41d822b1a8fad2d440d2cf68b2c01d764de86bdbb9e6c170","observation_id":"90de7b73-3379-47dd-adb4-6ee12d030ada","resolution":{"observed_at":"2026-07-01T23:26:23.278766Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2606.09151","last_updated":"2026-06-08T07:45:17Z","snapshot_observed_at":"2026-07-06T23:48:35.190418Z","submitted_at":"2026-06-08T07:45:17Z","title":"Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-27T16:25:37.031986Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2606.09151"},"observation_digest":"sha256:5fe8f7d21d173cc0c6cfc06d266888f491a49575056861c8dfa3cf3f92ff9db0","observation_id":"dc56d335-f8d4-4124-a253-9018c9e9eef6","resolution":{"observed_at":"2026-07-03T01:37:30.925780Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-01T18:33:03.605809Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17279","last_updated":"2026-07-19T14:52:31Z","snapshot_observed_at":"2026-08-07T10:51:42.469511Z","submitted_at":"2026-07-19T14:52:31Z","title":"Between Safe Boundaries: Exploiting Temporal Consistency for Jailbreaking Text-To-Video Generation Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T18:33:03.605809Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.17279"},"observation_digest":"sha256:12cc79ac16c15b3668db134c372edc21d1d3e4064cc1ed8c8814bb86d74f9e4d","observation_id":"b025757d-228c-4f1b-ade2-c0fd4303e0fb","resolution":{"observed_at":"2026-08-01T18:33:03.605809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-01T17:07:54.195408Z","title":"arXiv preprint arXiv:2312.07130 , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17779","last_updated":"2026-07-20T10:09:30Z","snapshot_observed_at":"2026-08-06T08:52:24.582710Z","submitted_at":"2026-07-20T10:09:30Z","title":"Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-01T17:07:54.195408Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.17779"},"observation_digest":"sha256:32ab4db25a7d4b52a5adde4aa082d98a48e3176c363c121e867cca40b184e42d","observation_id":"2e97e4cf-5b05-412d-958c-e64cc40a4987","resolution":{"observed_at":"2026-08-01T17:07:54.195408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-31T09:23:52.445668Z","title":"arXiv preprint arXiv:2312.07130 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.445668Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3262e1e92cabbfbdcfd004d33609b19473e8c0107ce292c726875809b7c06992","observation_id":"8ad9c1c4-8664-475a-ac66-fda8934a1792","resolution":{"observed_at":"2026-07-31T09:23:52.445668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-06T00:43:01.557307Z","title":"arXiv preprint arXiv:2312.07130 , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.00973","last_updated":"2026-08-02T03:53:30Z","snapshot_observed_at":"2026-08-08T01:12:48.297120Z","submitted_at":"2026-08-02T03:53:30Z","title":"Mind the Gap: Zero-Query Jailbreaks via Filter-Generator Discrepancy in Text-to-Image Systems","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-06T00:43:01.557307Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2608.00973"},"observation_digest":"sha256:eee27965925044bd2be5bea527b8d252aa28e29c36f3929d745a9763c0b4653d","observation_id":"4e80bfb8-179d-471a-ab7e-bd77cf2396ce","resolution":{"observed_at":"2026-08-06T00:43:01.557307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2312.07130/citation-record","integrity":"/paper/2312.07130/integrity","json":"/paper/2312.07130/citation-record.json","paper":"/paper/2312.07130"},"outbound":[],"paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","latest_version":4,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2312.07130."}