{"as_of":"2026-08-18T22:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:91a0bfc59c96e4509987d04b83bb839ea4e6e17ea7ae2ba8457707c21ca0c912","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":13,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:55:40.140423Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-09T00:25:48.569323Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-10T14:01:10.956183Z","title":"Vl- trojan: Multimodal instruction backdoor attacks against autoregressive visual language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.956183Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:bc3c219c6eb77c78c005b794d69da2573b1c6f07d629c2d7b0e0b5b8ec48ae59","observation_id":"05ea58e2-400e-409d-b323-a41fa360a799","resolution":{"observed_at":"2026-08-10T14:01:10.956183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-09T00:50:00.305089Z","title":"Available: https://arxiv.org/abs/2402.13851","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-13T00:35:04.918294Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.305089Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:3212e13785ff7ca65682eb1e229732df5044e08c30a768749a5a3f2cdaf0fd13","observation_id":"59878673-9152-4343-b80b-cb4ef971216e","resolution":{"observed_at":"2026-08-09T00:50:00.305089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-08T15:38:17.472292Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06390","last_updated":"2025-02-11T04:42:24Z","snapshot_observed_at":"2026-08-18T08:50:10.871536Z","submitted_at":"2025-02-10T12:20:08Z","title":"When Data Manipulation Meets Attack Goals: An In-depth Survey of Attacks for VLMs","version":2},"reference_index":105,"source":"pdf_text","source_observed_at":"2026-08-08T15:38:17.472292Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2502.06390"},"observation_digest":"sha256:caf37014270b0d315de1cbedf9c8267ee4330c539f7e3f6485f451b606313a12","observation_id":"585da69c-28c8-45aa-813b-e4c1fe95ca41","resolution":{"observed_at":"2026-08-08T15:38:17.472292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-07T19:46:40.702031Z","title":"arXiv preprint arXiv:2402.13851","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.10486","last_updated":"2025-02-14T08:44:43Z","snapshot_observed_at":"2026-08-09T21:15:29.298237Z","submitted_at":"2025-02-14T08:44:43Z","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T19:46:40.702031Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2502.10486"},"observation_digest":"sha256:d02945695984da09cc5a6ae212c36e7dd84f66cfdf0eeabe62e6b2e609b03967","observation_id":"e1291f85-f7d6-4eba-b332-8b02014b865f","resolution":{"observed_at":"2026-08-07T19:46:40.702031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-07T19:45:18.399693Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-12T22:07:51.112849Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T19:45:18.399693Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2502.14881"},"observation_digest":"sha256:64a64eece815679f5dd306e9fb232fcf1f74302f1e9b6963d141d91c6e91b99c","observation_id":"56ac1a45-fda1-44d7-9d65-ac4475af3515","resolution":{"observed_at":"2026-08-07T19:45:18.399693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-16T11:55:40.140423Z","title":"arXiv preprint arXiv:2402.13851 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-16T23:34:33.311300Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-16T11:55:40.140423Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2504.14348"},"observation_digest":"sha256:8f5bb2e25e899d95c4294d7d5d7742c4afc6b3336c2e632bbfc1bc487f928034","observation_id":"99d78df8-a3c9-478f-9bf2-9b17815d9d7f","resolution":{"observed_at":"2026-08-16T11:55:40.140423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-16T11:31:11.188335Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregres- sive visual language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15512","last_updated":"2025-04-26T16:17:55Z","snapshot_observed_at":"2026-08-18T00:47:28.167584Z","submitted_at":"2025-04-22T01:18:42Z","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-16T11:31:11.188335Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2504.15512"},"observation_digest":"sha256:9de40cead4fec0b1dd1eb051e246aebc7f126d9815a44260855fddde131cc120","observation_id":"e865ff22-c32b-49e8-a4fe-b900a84afbc3","resolution":{"observed_at":"2026-08-16T11:31:11.188335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-15T23:36:01.034418Z","title":"VL -trojan: Multimodal instruction backdoor attacks against autoregressive visual language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.04673","last_updated":"2025-05-07T10:09:55Z","snapshot_observed_at":"2026-08-18T04:15:02.081138Z","submitted_at":"2025-05-07T10:09:55Z","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T23:36:01.034418Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2505.04673"},"observation_digest":"sha256:5b8592fecdb4cf04e3718e781ef9ad90f5f3ba5ce1b8cc117cd5d81db8b9df98","observation_id":"850ad2b9-03f8-4803-bbc3-0aaf1d9a6ecc","resolution":{"observed_at":"2026-08-15T23:36:01.034418Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-15T22:46:49.539496Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.539496Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:1a81406924b8f7c43dc5912e0ec3137b6c44202c0cbb2b34a144388914de743a","observation_id":"4c33e723-8bbd-48c8-b624-07daa3f74884","resolution":{"observed_at":"2026-08-15T22:46:49.539496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-07T14:56:52.269038Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models.arXiv preprint arXiv:2402.13851, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16916","last_updated":"2025-05-22T17:11:58Z","snapshot_observed_at":"2026-08-14T09:05:00.522868Z","submitted_at":"2025-05-22T17:11:58Z","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T14:56:52.269038Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2505.16916"},"observation_digest":"sha256:5a8552dbc868725dbce7b349421f27141bdb9e28fe5ade60574f0d97730dcf75","observation_id":"3f59a9e5-7133-4693-a295-fe76fd678585","resolution":{"observed_at":"2026-08-07T14:56:52.269038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-07T11:07:37.462457Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-17T22:56:23.104502Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.462457Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:54872d626f2bb58cb308e3a8213a98a958920a042c71a4b4580783bd5e1d314a","observation_id":"c4ee062e-5b6e-47f2-aeca-55edf2c1d653","resolution":{"observed_at":"2026-08-07T11:07:37.462457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-07T05:45:56.040880Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07214","last_updated":"2025-06-08T16:40:40Z","snapshot_observed_at":"2026-08-17T01:31:03.836304Z","submitted_at":"2025-06-08T16:40:40Z","title":"Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:45:56.040880Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2506.07214"},"observation_digest":"sha256:99b2b1ea7be01d6c7be84f57c12f60a74dc9ef502f1c719c53d08ede6110c726","observation_id":"8fd0ed94-953b-4294-a669-865a17b2ce9f","resolution":{"observed_at":"2026-08-07T05:45:56.040880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":"2402.13851","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-07-09T00:25:48.569323Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","venue":"cs.CV","work_id":"37e44bd2-13dd-4dc6-82ce-0e0b412508bd","year":2024},"citing_paper":{"arxiv_id":"2607.05783","last_updated":"2026-07-07T03:15:00Z","snapshot_observed_at":"2026-08-12T14:29:09.951586Z","submitted_at":"2026-07-07T03:15:00Z","title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-09T00:16:03.334057Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2607.05783"},"observation_digest":"sha256:a04ed829820c8622ba2b54970d6c40011f1f2f9356818d29cfcd9e977fd74f7a","observation_id":"1ad4bbb2-2fc3-4d56-b3e3-9000442d0959","resolution":{"observed_at":"2026-07-09T00:25:48.570818Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.13851/citation-record","integrity":"/paper/2402.13851/integrity","json":"/paper/2402.13851/citation-record.json","paper":"/paper/2402.13851"},"outbound":[],"paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 13 inbound Pith citation observations for arXiv:2402.13851."}