{"as_of":"2026-08-18T06:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9ec990e3023d95ec0534bd1250221fba76d6a61728bcde16e00ac2285b5a6441","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T11:17:01.831710Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-17T04:15:38.632039Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-17T04:19:00.680668Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"cited_work":{"arxiv_id":"2502.07987","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.07987","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Universal adversarial attack on aligned multimodal llms","venue":null,"work_id":"7c951306-74ec-4abc-b661-087d85fa2e97","year":2025},"citing_paper":{"arxiv_id":"2511.21893","last_updated":"2026-04-21T12:31:10Z","snapshot_observed_at":"2026-08-16T22:05:14.977216Z","submitted_at":"2025-11-26T20:18:20Z","title":"Breaking the Illusion: Consensus-Based Generative Mitigation of Adversarial Illusions in Multi-Modal Embeddings","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-17T04:15:38.632039Z"},"links":{"cited_paper":"/paper/2502.07987","citing_paper":"/paper/2511.21893"},"observation_digest":"sha256:02b0cb962501063728908795964a0c67083d1c546aafbce8774a02f157e4b660","observation_id":"6790d80d-ccf0-4bfb-88a8-452029705eb7","resolution":{"observed_at":"2026-05-17T04:19:00.683342Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"cited_work":{"arxiv_id":"2502.07987","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.07987","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Universal adversarial attack on aligned multimodal llms","venue":null,"work_id":"7c951306-74ec-4abc-b661-087d85fa2e97","year":2025},"citing_paper":{"arxiv_id":"2605.01449","last_updated":"2026-05-02T13:56:50Z","snapshot_observed_at":"2026-08-16T07:26:45.113879Z","submitted_at":"2026-05-02T13:56:50Z","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-09T14:24:48.999632Z"},"links":{"cited_paper":"/paper/2502.07987","citing_paper":"/paper/2605.01449"},"observation_digest":"sha256:c674a70326a441856b01444182debe8ea316b3fd2ab9bc8eb6c2be37e228d60e","observation_id":"49a54231-3544-4055-9c6b-11b542bcc400","resolution":{"observed_at":"2026-05-11T16:56:08.033580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.07987/citation-record","integrity":"/paper/2502.07987/integrity","json":"/paper/2502.07987/citation-record.json","paper":"/paper/2502.07987"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.526225Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.526225Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:7271b052e8931555c60904e3737a9379acbdad7ef4e715248e3bfc31619d1030","observation_id":"83947996-04f4-4e25-a36d-baf4911657c2","resolution":{"observed_at":"2026-08-08T11:17:01.526225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.531793Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.531793Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:9089e5dd96d1f39f37999f07c1a4e2038ddf7fc211436b7bbedf06f85292fcbd","observation_id":"6b6d5c79-8967-4e8e-9002-2915490634ed","resolution":{"observed_at":"2026-08-08T11:17:01.531793Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14219","last_updated":"2024-08-30T21:17:17Z","snapshot_observed_at":"2026-08-17T03:25:04.404839Z","submitted_at":"2024-04-22T14:32:33Z","title":"Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.14219","snapshot_observed_at":"2026-08-08T11:17:01.536814Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.536814Z"},"links":{"cited_paper":"/paper/2404.14219","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:fbf361265a9db723dff2292d8877495500d8612f137ff4773bb05ecfb305db76","observation_id":"996f2071-832e-41f8-a5ff-3288471d2623","resolution":{"observed_at":"2026-08-08T11:17:01.536814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.541668Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.541668Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:8480d2d0bd6987c4b2d3da1a92db758004dd4a7b7614104bf8dd6f55bfc4fc8d","observation_id":"109c4f58-ee20-42cb-97d9-ed2e6bff3762","resolution":{"observed_at":"2026-08-08T11:17:01.541668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.545940Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.545940Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:9ad43e3d6e8096d161871ccefd03878ac127c6fe3061b14ef0f7d9e8899d036f","observation_id":"109dba70-18a6-4f8d-812e-e1ebcfa6663c","resolution":{"observed_at":"2026-08-08T11:17:01.545940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:02.464795Z","title":null,"venue":null,"work_id":"fcfa5aef-932d-44cc-b82f-889cf0ce56db","year":2017},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.550649Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:012c8e2438a93a4b448481d99b1e85ac0576d6b1e2739cfb8f16abb6d499f6f2","observation_id":"87d96075-48ce-417a-a5d6-07c92ebf8825","resolution":{"observed_at":"2026-08-08T11:17:02.469027Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.00833","last_updated":"2023-03-01T21:37:49Z","snapshot_observed_at":"2026-08-16T15:51:34.386225Z","submitted_at":"2023-03-01T21:37:49Z","title":"Hearing Shapes via p-Adic Laplacians","version":1},"cited_work":{"arxiv_id":"2303.00833","doi":null,"metadata_source":"pith","pith_arxiv_id":"2303.00833","snapshot_observed_at":"2026-08-08T11:17:02.339812Z","title":"Hearing Shapes via p-Adic Laplacians","venue":"math.SP","work_id":"6c721861-5020-404f-a12f-3c42bd86a982","year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.554736Z"},"links":{"cited_paper":"/paper/2303.00833","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:710bf400e26907e72eb3c841a3e9e739cc663135b0172b1f93be1b301fe2981c","observation_id":"2190d16d-822a-4cb5-b0d2-23090ffdb6e2","resolution":{"observed_at":"2026-08-08T11:17:02.344403Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10414","last_updated":"2024-11-15T18:34:07Z","snapshot_observed_at":"2026-08-17T21:40:47.016297Z","submitted_at":"2024-11-15T18:34:07Z","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.10414","snapshot_observed_at":"2026-08-08T11:17:01.558974Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.558974Z"},"links":{"cited_paper":"/paper/2411.10414","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:29df35304fbf6152d20bebcef7de15e3c3f912e811b846bc5dc6ed1bce72013a","observation_id":"17d1a7cf-e579-4cbb-b1dd-91f41bbf9764","resolution":{"observed_at":"2026-08-08T11:17:01.558974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.11381","last_updated":"2023-03-20T18:31:47Z","snapshot_observed_at":"2026-08-16T13:20:46.785210Z","submitted_at":"2023-03-20T18:31:47Z","title":"MM-REACT: Prompting ChatGPT for Multimodal Reasoning and Action","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.11381","snapshot_observed_at":"2026-08-08T11:17:01.564096Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.564096Z"},"links":{"cited_paper":"/paper/2303.11381","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:8ae88546e4b6e44bc8a522e66bf9ef18737b730306da8c79266e2c7bee5b0e18","observation_id":"32567272-1931-4005-a1b7-e44f6576d82e","resolution":{"observed_at":"2026-08-08T11:17:01.564096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.06081","last_updated":"2018-03-22T12:46:44Z","snapshot_observed_at":"2026-08-15T08:36:59.613655Z","submitted_at":"2017-10-17T04:03:04Z","title":"Boosting Adversarial Attacks with Momentum","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.06081","snapshot_observed_at":"2026-08-08T11:17:01.568844Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.568844Z"},"links":{"cited_paper":"/paper/1710.06081","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:9492ee4f1d1cd0c21f7c22134bae21a375c3a4f2c88099fec4e9a4770eb47765","observation_id":"23ad244c-07b0-4d5f-9f76-0268cb8e4009","resolution":{"observed_at":"2026-08-08T11:17:01.568844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-13T17:20:44.002518Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-08T11:17:01.573464Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.573464Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:e5e3ff71fa4773c8796c8b94e905bf72f8840463b34489c7eaf97a61d9b7e761","observation_id":"5070495d-a696-4e3b-a55c-2f5e606318f4","resolution":{"observed_at":"2026-08-08T11:17:01.573464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05608","last_updated":"2025-01-19T16:23:38Z","snapshot_observed_at":"2026-08-16T14:44:33.111232Z","submitted_at":"2023-11-09T18:59:11Z","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05608","snapshot_observed_at":"2026-08-08T11:17:01.577794Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.577794Z"},"links":{"cited_paper":"/paper/2311.05608","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:0ba1c8b92d031e62828fde7482d7bc79a34b8fdf0f74347de1b391a29e3c0e26","observation_id":"8a28ffb6-f22f-4ade-aba3-4914e6ba9bfe","resolution":{"observed_at":"2026-08-08T11:17:01.577794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08567","last_updated":"2024-06-03T14:15:03Z","snapshot_observed_at":"2026-08-17T08:35:47.444199Z","submitted_at":"2024-02-13T16:06:17Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08567","snapshot_observed_at":"2026-08-08T11:17:01.583853Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.583853Z"},"links":{"cited_paper":"/paper/2402.08567","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:fec56371cb4588c8fa78aa79fc02a80e45251264fb7710d85c409800970802dd","observation_id":"e168420d-133e-496c-addd-12cea8c905d2","resolution":{"observed_at":"2026-08-08T11:17:01.583853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.13733","last_updated":"2021-04-15T17:43:43Z","snapshot_observed_at":"2026-08-16T18:31:18.416352Z","submitted_at":"2021-04-15T17:43:43Z","title":"Gradient-based Adversarial Attacks against Text Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.13733","snapshot_observed_at":"2026-08-08T11:17:01.588766Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.588766Z"},"links":{"cited_paper":"/paper/2104.13733","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:1567404c0772b04399c62fccfa866809ee4b4083f0d18d45ed4cfd59c0578ca6","observation_id":"4e6df700-2e4b-420b-9ba3-1f0f723e8b69","resolution":{"observed_at":"2026-08-08T11:17:01.588766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14296","last_updated":"2026-05-15T15:43:44Z","snapshot_observed_at":"2026-08-15T05:15:04.246228Z","submitted_at":"2025-02-20T06:20:36Z","title":"On the Trustworthiness of Generative Foundation Models: Guideline, Assessment, and Perspective","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14296","snapshot_observed_at":"2026-08-08T11:17:01.593548Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.593548Z"},"links":{"cited_paper":"/paper/2502.14296","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:f23cb45ad98e2dc1e90bcaaeb49e86e126e87f0acb91b9c63460287a55544f6e","observation_id":"d7b17c01-f97d-47a8-9e84-3273d8c500a9","resolution":{"observed_at":"2026-08-08T11:17:01.593548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.598626Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.598626Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:b23a3376803da9a458b572dbd30081f7d60cff83ffa2ff2151e893cdc798fa4a","observation_id":"3a7b6563-8297-4968-ba73-803a0947a0f4","resolution":{"observed_at":"2026-08-08T11:17:01.598626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-16T03:14:49.760924Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-08T11:17:01.603196Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.603196Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:632cd18ec97814eb60757a7221b792f79e8701063fa9f6eca29eeaa7aa0446ba","observation_id":"29bc14b6-a180-4c1f-be2a-f8f134fc2e9a","resolution":{"observed_at":"2026-08-08T11:17:01.603196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03666","last_updated":"2023-10-05T16:43:04Z","snapshot_observed_at":"2026-08-16T14:54:44.238873Z","submitted_at":"2023-10-05T16:43:04Z","title":"MapperGPT: Large Language Models for Linking and Mapping Entities","version":1},"cited_work":{"arxiv_id":"2310.03666","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.03666","snapshot_observed_at":"2026-08-08T11:17:02.199826Z","title":"MapperGPT: Large Language Models for Linking and Mapping Entities","venue":"cs.CL","work_id":"0e09b57f-49c6-412b-aaf4-0f2afc38f904","year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.608272Z"},"links":{"cited_paper":"/paper/2310.03666","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:faef493e63e60850dfd8c349a1b2878eb8f5ce16f31abe05132af5c76f305382","observation_id":"02e6487d-713d-474f-a74e-70382d7182c1","resolution":{"observed_at":"2026-08-08T11:17:02.205156Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.06854","last_updated":"2023-11-12T14:10:21Z","snapshot_observed_at":"2026-08-16T14:44:00.979455Z","submitted_at":"2023-11-12T14:10:21Z","title":"Multiuser Resource Allocation for Semantic-Relay-Aided Text Transmissions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.06854","snapshot_observed_at":"2026-08-08T11:17:01.613090Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.613090Z"},"links":{"cited_paper":"/paper/2311.06854","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:fbac7732ca7abf0e2fccd9591e839c2b6c5ddd8cb487f6dafe49ff2a9c6728cf","observation_id":"7b390dee-a4e2-4152-98a3-03b84154d200","resolution":{"observed_at":"2026-08-08T11:17:01.613090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.05271","last_updated":"2018-12-13T05:32:43Z","snapshot_observed_at":"2026-08-14T17:44:22.692965Z","submitted_at":"2018-12-13T05:32:43Z","title":"TextBugger: Generating Adversarial Text Against Real-world Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.05271","snapshot_observed_at":"2026-08-08T11:17:01.618425Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.618425Z"},"links":{"cited_paper":"/paper/1812.05271","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:3f40b89175f223da09bc5a87f7ab629b8227291b58721bd81d026f49fe5b75c6","observation_id":"98a38884-cb80-4a7c-88ad-8b8316838b43","resolution":{"observed_at":"2026-08-08T11:17:01.618425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:02.442682Z","title":null,"venue":null,"work_id":"a6b0705b-f231-4477-abfe-92749a086a50","year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.623913Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:cf7602fae013da636a621f0d957ab0964adfe03507a119557448854e81d52d88","observation_id":"d5c48b04-37e5-45a9-bdb2-12075fdccf43","resolution":{"observed_at":"2026-08-08T11:17:02.447021Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2503.10635","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":null,"venue":"ArXiv.org","work_id":"24214465-b25e-48e2-92b8-47c4d46d6706","year":2025},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.629382Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:ebaefd00dd74dd4aa69c45310f2843cca83afb4aebcb531f1e0501a1dd8eaccc","observation_id":"944b41db-afbb-4b61-a489-1b1cbbdd1221","resolution":{"observed_at":"2026-08-08T11:17:01.939365Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.635636Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.635636Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:e97516bd6e7be133910cea55e6c05d811e6434ef74fa15a571b63234cdddb4ad","observation_id":"ec4694b8-8ef6-4ce1-b7aa-632e13e9f2db","resolution":{"observed_at":"2026-08-08T11:17:01.635636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.642768Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.642768Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:e8dd8dde80e63392173b4b4b8f90b1e662d8b67873a4bfe2305e82e3a1893224","observation_id":"66b2a7e3-3117-4657-9023-6d592449408f","resolution":{"observed_at":"2026-08-08T11:17:01.642768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.650328Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.650328Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:5ec311222805bcd8a7677f7e1fb7b97446e2ed6c3085ecf2fd9c32de5651bbb8","observation_id":"952d636f-32e5-4444-bf2e-33fb637c2390","resolution":{"observed_at":"2026-08-08T11:17:01.650328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20773","last_updated":"2024-06-12T07:13:48Z","snapshot_observed_at":"2026-08-17T15:14:45.354691Z","submitted_at":"2024-05-25T17:17:18Z","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20773","snapshot_observed_at":"2026-08-08T11:17:01.654636Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.654636Z"},"links":{"cited_paper":"/paper/2405.20773","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:bf8aa368aef90d3b787bf83ca4c8db20c54639c274b64b0ddd42744b09d62487","observation_id":"f7fb9fc0-da95-4b8a-b745-96f5d8022a25","resolution":{"observed_at":"2026-08-08T11:17:01.654636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.08401","last_updated":"2017-03-09T17:01:25Z","snapshot_observed_at":"2026-08-16T06:22:21.817620Z","submitted_at":"2016-10-26T16:30:45Z","title":"Universal adversarial perturbations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.08401","snapshot_observed_at":"2026-08-08T11:17:01.659359Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.659359Z"},"links":{"cited_paper":"/paper/1610.08401","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:b35a1e2149282afb659a540019c11f6b76a4278d2e3b28cffbd63ec6189a0cd9","observation_id":"0c736bd0-5358-47bf-bfb5-ce75fcc33230","resolution":{"observed_at":"2026-08-08T11:17:01.659359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.01829","last_updated":"2019-08-15T05:16:18Z","snapshot_observed_at":"2026-08-14T18:32:22.266435Z","submitted_at":"2018-09-06T05:29:46Z","title":"Adversarial Reprogramming of Text Classification Neural Networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1809.01829","snapshot_observed_at":"2026-08-08T11:17:01.663868Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.663868Z"},"links":{"cited_paper":"/paper/1809.01829","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:a8d4427dbd09a972353facfb5f1dba610f045ed0e69f07a95d1493fa001d6d05","observation_id":"91100ab9-a510-47be-b52d-59235c18ba6b","resolution":{"observed_at":"2026-08-08T11:17:01.663868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-15T19:47:29.283675Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-08T11:17:01.668357Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.668357Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:4f069d409ee4f16255300557ac9dacb6ba01099f98a3fce636506e19a37a1fa7","observation_id":"4740269b-d406-4648-b9b6-1501d37f8428","resolution":{"observed_at":"2026-08-08T11:17:01.668357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-08-16T15:21:48.065276Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-08T11:17:01.672767Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.672767Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:e49464af43c37aa1f5c80d189d9df7a65fa0ab4d9677e9871fc4db5c495acfed","observation_id":"08fdb8bf-d39d-44ee-8847-db4b383435d5","resolution":{"observed_at":"2026-08-08T11:17:01.672767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.677370Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.677370Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:e2525d8482b53587ffec29baf32ae99b770826695a8cbcd54f0e6828ebe401bc","observation_id":"8947be28-0ed6-4562-b3fa-b12be27cd4c7","resolution":{"observed_at":"2026-08-08T11:17:01.677370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-08-16T15:12:59.003865Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-08T11:17:01.681810Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.681810Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:128dd08bc1f766a179c5f4d0702839572dec2d66bd145c1288cd43fa687a2936","observation_id":"780e3805-7313-4a42-8263-d1977ff01bf1","resolution":{"observed_at":"2026-08-08T11:17:01.681810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-08T11:17:01.686151Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.686151Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:f73667068ded40dbe15ce40a696d98a4889b2db82cac23b54f2558e54d0a67dd","observation_id":"8b83f0c6-28b2-43b2-88ce-baf6873700af","resolution":{"observed_at":"2026-08-08T11:17:01.686151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.19786","last_updated":"2025-03-25T15:52:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-25T15:52:34Z","title":"Gemma 3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.19786","snapshot_observed_at":"2026-08-08T11:17:01.690284Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.690284Z"},"links":{"cited_paper":"/paper/2503.19786","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:83d1595abb4263d476d80ee2b01506c560d20e512d799e1d5c4e8c9bab54b1f4","observation_id":"6c42bb88-5bcf-4288-9a99-d8cb2fec011b","resolution":{"observed_at":"2026-08-08T11:17:01.690284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:01.695069Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.695069Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:27f7edb680ef1afdd2cd8621aa88a08ce571ad0bf8fe908473cd904b9c8e14b3","observation_id":"0a81a350-d305-4711-ad03-6cfc9b6a80b3","resolution":{"observed_at":"2026-08-08T11:17:01.695069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.07125","last_updated":"2021-01-03T19:58:55Z","snapshot_observed_at":"2026-08-18T00:51:28.882719Z","submitted_at":"2019-08-20T01:51:40Z","title":"Universal Adversarial Triggers for Attacking and Analyzing NLP","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.07125","snapshot_observed_at":"2026-08-08T11:17:01.699125Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.699125Z"},"links":{"cited_paper":"/paper/1908.07125","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:c3e1b80f446bfdcd0e9070e4346228ff1d5bf69241d82ad6962f427561d69f25","observation_id":"d5deb967-4af0-4aae-ba2f-2045e62dfd03","resolution":{"observed_at":"2026-08-08T11:17:01.699125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12191","last_updated":"2024-10-03T15:54:49Z","snapshot_observed_at":"2026-08-06T05:35:29.109022Z","submitted_at":"2024-09-18T17:59:32Z","title":"Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolution","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12191","snapshot_observed_at":"2026-08-08T11:17:01.703623Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.703623Z"},"links":{"cited_paper":"/paper/2409.12191","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:a5c3f1a457570ac6b4c942407903db9601c97c4d4d1e087045f78c617cf2cb0c","observation_id":"daea1bbc-d260-462a-a271-7d8ac90e2d65","resolution":{"observed_at":"2026-08-08T11:17:01.703623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-15T10:16:52.688429Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-08T11:17:01.716035Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.716035Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:a885083eb7b75644e355e4faad15e629db93d40ba5a3bd4ddd1a043cd9840445","observation_id":"0b6b6ce2-e9a8-46c6-80b3-923d950082c2","resolution":{"observed_at":"2026-08-08T11:17:01.716035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02000","last_updated":"2021-04-05T16:46:45Z","snapshot_observed_at":"2026-08-16T18:33:48.499449Z","submitted_at":"2021-04-05T16:46:45Z","title":"Can audio-visual integration strengthen robustness under multimodal attacks?","version":1},"cited_work":{"arxiv_id":"2104.02000","doi":null,"metadata_source":"pith","pith_arxiv_id":"2104.02000","snapshot_observed_at":"2026-08-08T11:17:01.996496Z","title":"Can audio-visual integration strengthen robustness under multimodal attacks?","venue":"cs.CV","work_id":"2024aaaf-c888-44a5-936d-8d721e4e0f36","year":2021},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.750485Z"},"links":{"cited_paper":"/paper/2104.02000","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:c918a3d6b0088264d4b2c6dfd0859b8415b2c04ccbb41ccddfe27e36e4ad4f19","observation_id":"1f32d48a-0c5b-4d44-af44-097b80cd8401","resolution":{"observed_at":"2026-08-08T11:17:02.002221Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:02.393874Z","title":null,"venue":null,"work_id":"f26cd91b-55b0-4932-91c6-5445fa7b4980","year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.788545Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:813d80fff25049528580cbc654fa6793038b24d59ba2db7f87ab7cdacaf14cf3","observation_id":"9f69df66-1b14-40c5-9abc-d4c005090d4f","resolution":{"observed_at":"2026-08-08T11:17:02.398263Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18927","last_updated":"2024-10-24T17:14:40Z","snapshot_observed_at":"2026-08-16T13:06:11.757117Z","submitted_at":"2024-10-24T17:14:40Z","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18927","snapshot_observed_at":"2026-08-08T11:17:01.814133Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.814133Z"},"links":{"cited_paper":"/paper/2410.18927","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:643ed04f7a0c231412bec15e35cf4c6cc886e4ec492a5d93c8e027f1ecd77cba","observation_id":"70b85627-294c-4a45-b4a4-3a8fbafb761f","resolution":{"observed_at":"2026-08-08T11:17:01.814133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:02.380610Z","title":null,"venue":null,"work_id":"699d4ed6-4671-4e24-bf1c-ccabbfc77899","year":2022},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.818694Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:83e5878784df3139500652efd7975a69fc486474c9a8cdc2b72d2ae2d5eefe6b","observation_id":"e9958c13-871e-4078-9ef3-8abb2e49dfcf","resolution":{"observed_at":"2026-08-08T11:17:02.384817Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T11:17:02.367084Z","title":null,"venue":null,"work_id":"5272f8c1-faf3-4d66-b847-8b46ddc0f727","year":2022},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.823201Z"},"links":{"citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:d1193901bc02e34b079fa113a16f224170ca8bc862b6e1c22f58ba2fd4910c1f","observation_id":"42fe3565-6180-41c2-89c9-b0608923dfc9","resolution":{"observed_at":"2026-08-08T11:17:02.370972Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.06243","last_updated":"2024-04-28T20:05:02Z","snapshot_observed_at":"2026-08-16T14:44:16.323394Z","submitted_at":"2023-11-10T18:59:54Z","title":"Parameter-Efficient Orthogonal Finetuning via Butterfly Factorization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.06243","snapshot_observed_at":"2026-08-08T11:17:01.827247Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.827247Z"},"links":{"cited_paper":"/paper/2311.06243","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:3db8247dd8a1fb36a0c583466858dd41d549ffdf88bfae3a149d37d662c3aca3","observation_id":"27bc654c-76ad-449c-90da-aa545e47a784","resolution":{"observed_at":"2026-08-08T11:17:01.827247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-08T11:17:01.831710Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.831710Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:a297e5994f5568e4a26b9ccf51bac0bc8b4ed1338c457691c430d4af51940a06","observation_id":"8fb4450b-886d-4d54-b91f-33826dc4e87e","resolution":{"observed_at":"2026-08-08T11:17:01.831710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","latest_version":3,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-17T22:10:06.948727Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 2 inbound Pith citation observations for arXiv:2502.07987."}