{"as_of":"2026-08-08T07:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6a0d350de465ba9ba91a6aa2430f951935d95032ae6d89d23b81e0bf8e064980","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T19:45:18.501499Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T17:20:00.272653Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-07T19:45:18.501499Z","title":"Jailbreak attacks and defenses against multimodal generative models: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T19:45:18.501499Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2502.14881"},"observation_digest":"sha256:8b916a5b0b09e43ec608a4f48bd7f7d5bfe03edb37373b1fccb4a89dd2b9eac9","observation_id":"27124562-0815-40c5-a592-257b84ea0a07","resolution":{"observed_at":"2026-08-07T19:45:18.501499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-07T15:03:35.615647Z","title":"Jail- break attacks and defenses against multimodal generative models: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16446","last_updated":"2025-05-22T09:34:47Z","snapshot_observed_at":"2026-08-08T01:24:44.977675Z","submitted_at":"2025-05-22T09:34:47Z","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:03:35.615647Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2505.16446"},"observation_digest":"sha256:bbfeb92c967bf1f98dfc7b544e846725cadd950a08f7ccef521a2c9a0c4490e8","observation_id":"22cd4118-cbb3-4f54-9993-a9cb10e74468","resolution":{"observed_at":"2026-08-07T15:03:35.615647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-07T04:08:48.559350Z","title":"arXiv preprint arXiv:2411.09259 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11521","last_updated":"2025-06-13T07:22:36Z","snapshot_observed_at":"2026-08-07T12:06:46.005829Z","submitted_at":"2025-06-13T07:22:36Z","title":"Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-07T04:08:48.559350Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2506.11521"},"observation_digest":"sha256:d5b66cd3e35071b1624de7c607810a52d2489ea3f9c5a40641a6d0b206c6fb99","observation_id":"6b995f9b-280f-4712-aec3-df69f68af75e","resolution":{"observed_at":"2026-08-07T04:08:48.559350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-06T16:26:21.309150Z","title":"Jailbreak attacks and defenses against multimodal generative models: A survey.arXiv preprint arXiv:2411.09259, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13598","last_updated":"2025-07-18T01:47:07Z","snapshot_observed_at":"2026-08-06T16:18:44.313450Z","submitted_at":"2025-07-18T01:47:07Z","title":"GIFT: Gradient-aware Immunization of diffusion models against malicious Fine-Tuning with safe concepts retention","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T16:26:21.309150Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2507.13598"},"observation_digest":"sha256:221cb1ffb5c48a9d3fd49c5173b8221b7d198b1b85f63bb8cb3297a5de2fc110","observation_id":"98d7d340-2893-4e82-9905-965fbde5a342","resolution":{"observed_at":"2026-08-06T16:26:21.309150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-06T11:54:43.242527Z","title":"”Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey” arXiv preprint arXiv:2411.09259 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.242527Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:a5354dc62e4bbda2758bd322fecced333babcf373c9d3fde289260026ba4ea93","observation_id":"9e0b78cb-4f63-44f2-bcbf-5a7b8fd736bb","resolution":{"observed_at":"2026-08-06T11:54:43.242527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":"2411.09259","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-07-04T17:20:00.272653Z","title":"arXiv preprint arXiv:2411.09259 , year=","venue":null,"work_id":"399f7c92-197c-4e8b-823b-1a50bf0ccea8","year":2024},"citing_paper":{"arxiv_id":"2604.09253","last_updated":"2026-04-10T12:09:06Z","snapshot_observed_at":"2026-07-06T22:58:12.847181Z","submitted_at":"2026-04-10T12:09:06Z","title":"Mosaic: Multimodal Jailbreak against Closed-Source VLMs via Multi-View Ensemble Optimization","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T18:03:36.805784Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2604.09253"},"observation_digest":"sha256:3341244aa543c33df64e85a88f30a3c19f17303b871a513295fd9e8987440f74","observation_id":"4da70b34-d1ac-45e5-bd14-ea2616f1901a","resolution":{"observed_at":"2026-05-11T05:35:58.994123Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":"2411.09259","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-07-04T17:20:00.272653Z","title":"arXiv preprint arXiv:2411.09259 , year=","venue":null,"work_id":"399f7c92-197c-4e8b-823b-1a50bf0ccea8","year":2024},"citing_paper":{"arxiv_id":"2605.00874","last_updated":"2026-04-25T01:01:02Z","snapshot_observed_at":"2026-07-30T23:55:12.391826Z","submitted_at":"2026-04-25T01:01:02Z","title":"Latent Space Probing for Adult Content Detection in Video Generative Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-09T21:07:18.808339Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2605.00874"},"observation_digest":"sha256:9738d038a47b542905cdbf2f4c403651349df79e6b06df985f5f6c37432d6cb5","observation_id":"fa298c4f-227e-49dc-9ece-b73101bfe4ac","resolution":{"observed_at":"2026-05-11T14:46:11.927058Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":"2411.09259","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-07-04T17:20:00.272653Z","title":"arXiv preprint arXiv:2411.09259 , year=","venue":null,"work_id":"399f7c92-197c-4e8b-823b-1a50bf0ccea8","year":2024},"citing_paper":{"arxiv_id":"2605.18104","last_updated":"2026-05-18T09:16:55Z","snapshot_observed_at":"2026-08-02T08:21:56.104408Z","submitted_at":"2026-05-18T09:16:55Z","title":"Safety Geometry Collapse in Multimodal LLMs and Adaptive Drift Correction","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-05-20T10:57:40.997128Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2605.18104"},"observation_digest":"sha256:6a6d6ae1a4c70f18bfbce300c50d6d7f9c58ca3a2d5eaca57833be827a78e2c3","observation_id":"7af958cb-f4df-4a1c-8921-dc2ff70991ad","resolution":{"observed_at":"2026-05-20T10:58:13.607221Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":"2411.09259","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-07-04T17:20:00.272653Z","title":"arXiv preprint arXiv:2411.09259 , year=","venue":null,"work_id":"399f7c92-197c-4e8b-823b-1a50bf0ccea8","year":2024},"citing_paper":{"arxiv_id":"2606.24081","last_updated":"2026-06-23T02:49:10Z","snapshot_observed_at":"2026-08-07T12:50:29.363508Z","submitted_at":"2026-06-23T02:49:10Z","title":"PixJail: Self-Evolving Paper-to-Pipeline Reproduction for Text-to-Image Jailbreak Evaluation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-25T23:47:47.892277Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2606.24081"},"observation_digest":"sha256:ea6a0b5e998a29a7f702890504acd3da8830eba685ed8dea3f5c780cac134535","observation_id":"6d081d0f-b038-4092-9de6-b8b2926b3543","resolution":{"observed_at":"2026-07-04T17:20:00.274254Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-01T08:23:25.193531Z","title":"Jailbreak attacks and defenses against multimodal generative models: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21151","last_updated":"2026-07-26T23:23:12Z","snapshot_observed_at":"2026-08-06T16:53:45.184525Z","submitted_at":"2026-07-23T10:35:38Z","title":"V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failure","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T08:23:25.193531Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2607.21151"},"observation_digest":"sha256:f783f5f8704f068b2976e3e921824068906024d7b1af3993f31d919419311c6f","observation_id":"a4b7d2bc-1709-4d4c-a6fd-1c95fbc5f6b3","resolution":{"observed_at":"2026-08-01T08:23:25.193531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-01T13:07:51.818433Z","title":"arXiv preprint arXiv:2411.09259 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26574","last_updated":"2026-07-29T07:53:35Z","snapshot_observed_at":"2026-08-01T23:27:52.993794Z","submitted_at":"2026-07-29T07:53:35Z","title":"Recover, Decode, Reguard: Guard-Agnostic Defense Amplification againstEncoded VLM Jailbreaks","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-01T13:07:51.818433Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2607.26574"},"observation_digest":"sha256:9289d24975f1344f0300186ce51f849579bf65305e6d7cb022b60dba56297a95","observation_id":"d16fb8a1-8f47-4dc4-88cc-5555cb0c6efd","resolution":{"observed_at":"2026-08-01T13:07:51.818433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2411.09259/citation-record","integrity":"/paper/2411.09259/integrity","json":"/paper/2411.09259/citation-record.json","paper":"/paper/2411.09259"},"outbound":[],"paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2411.09259."}