{"as_of":"2026-08-08T09:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3580adb2264f3cb9f4425ded4c2339739e51a053ccd1ef3d2b76e31acb9ed309","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:21:42.346479Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T12:36:44.253836Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T02:59:25.273490Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2604.22552","last_updated":"2026-04-24T13:45:11Z","snapshot_observed_at":"2026-07-06T23:08:56.419589Z","submitted_at":"2026-04-24T13:45:11Z","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T12:27:14.499810Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2604.22552"},"observation_digest":"sha256:e7e0415d166dc1eb540dfa59b2db37711bb9edf4449de1f6c13e5d5b4301def6","observation_id":"ea248668-5f1a-44d3-b223-564b66d90c86","resolution":{"observed_at":"2026-05-11T19:16:08.022968Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2604.23105","last_updated":"2026-04-25T02:00:01Z","snapshot_observed_at":"2026-08-02T21:29:37.320382Z","submitted_at":"2026-04-25T02:00:01Z","title":"Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T08:32:18.670096Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2604.23105"},"observation_digest":"sha256:f2b3cd5385aea353d91a2f10111142072dd7ce394d20793682d8da07c431db37","observation_id":"cc8e46ee-6eca-402a-9c50-bac5ec6150b8","resolution":{"observed_at":"2026-05-11T20:36:08.954153Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2605.10253","last_updated":"2026-05-11T09:22:53Z","snapshot_observed_at":"2026-07-06T23:22:13.774652Z","submitted_at":"2026-05-11T09:22:53Z","title":"Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-05-12T05:29:41.946357Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2605.10253"},"observation_digest":"sha256:9d3cc58d5e733449ec7e4e5502b14d513cac2cb857c5efbd803fb59ccbf5335c","observation_id":"f807f4e1-2291-4076-9ca0-51efa30d9a07","resolution":{"observed_at":"2026-05-12T05:31:23.683665Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2606.19736","last_updated":"2026-06-18T03:00:43Z","snapshot_observed_at":"2026-08-04T21:14:26.902678Z","submitted_at":"2026-06-18T03:00:43Z","title":"VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-26T18:45:43.733268Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2606.19736"},"observation_digest":"sha256:79ccf2cda53ae2c4a962eeb2ad37d59157f4d62d93785d3c03978f9b75ba6197","observation_id":"87f325dc-e554-4200-a2ef-724c9ac6d6da","resolution":{"observed_at":"2026-07-04T02:59:25.275804Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-06T18:15:05.904038Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:380407f578f473073510f5dde676b156d88b92171c183cd0b8c184a7bcc4a70d","observation_id":"92160704-b664-48cc-9512-28fbb974dd52","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.23828/citation-record","integrity":"/paper/2505.23828/integrity","json":"/paper/2505.23828/citation-record.json","paper":"/paper/2505.23828"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:39.392740Z","title":"Survey of hallucination in natural language generation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.392740Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:2e824da292b3575e79031153e83fbe1cf4b5a047c7087fc66657160f14c83c36","observation_id":"529c4620-40d3-4113-aa05-3cbafec494d2","resolution":{"observed_at":"2026-08-07T13:21:39.392740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.866397Z","title":"Transforming healthcare education: Harnessing large language models for frontline health worker capacity building using retrieval-augmented generation,","venue":null,"work_id":"6909be2d-c29a-491e-adb3-f1b800f702f1","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.421876Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:c3efeeffd0917c002e2e014b15c3b9f8993cb0dbfbe7f4a78fb87b73512f15c5","observation_id":"b97802ee-5bcb-47ba-bfa2-49aafbe01463","resolution":{"observed_at":"2026-08-07T13:21:45.916794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.732172Z","title":"Potential for gpt technology to optimize future clinical decision-making using retrieval-augmented generation,","venue":null,"work_id":"dfeb81a7-b21e-417a-bde8-34f44509a7f7","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.518083Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:0e729c700c9bb4a068d4b0c8927f6f51b4323f65547aeea85e30be9bc3d7808d","observation_id":"d02dc5e4-0919-47ab-836c-db2f29384ac5","resolution":{"observed_at":"2026-08-07T13:21:45.782414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.581484Z","title":"Chain of reference prompting helps llm to think like a lawyer,","venue":null,"work_id":"f1845d15-5d8d-4e45-bc99-1ee2272571d5","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.606706Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:f0780f4b7bd03ddb8e0f2ca74038d3e46ef25505c338bd8fd4ee13cff89f79fe","observation_id":"1a43bf60-b4a0-4512-8d7e-4c1ff5aa71c1","resolution":{"observed_at":"2026-08-07T13:21:45.637491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.16034","last_updated":"2021-06-30T13:01:33Z","snapshot_observed_at":"2026-08-08T04:59:56.661596Z","submitted_at":"2021-06-30T13:01:33Z","title":"AutoLAW: Augmented Legal Reasoning through Legal Precedent Prediction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.16034","snapshot_observed_at":"2026-08-07T13:21:39.682688Z","title":"Autolaw: augmented legal reasoning through legal precedent prediction,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.682688Z"},"links":{"cited_paper":"/paper/2106.16034","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:5bfc079536a657d8114be2f3eeeb4fe2f7e269e8cf78166ba616c008feee1e97","observation_id":"96fab2b7-e261-4f54-a336-4e0a429af734","resolution":{"observed_at":"2026-08-07T13:21:39.682688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.384879Z","title":"Mycrunchgpt: A llm assisted framework for scientific machine learn- ing,","venue":null,"work_id":"88328920-9521-4538-a82d-536414e3b18a","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.763259Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:a758e27a2fdd4e910bef41167f078cc7db16d967e85a856d770ebfeb15253f73","observation_id":"f4a79b28-d50b-4070-a3b9-f57923bf5f88","resolution":{"observed_at":"2026-08-07T13:21:45.499498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04929","last_updated":"2023-11-03T19:41:09Z","snapshot_observed_at":"2026-08-07T23:46:27.304102Z","submitted_at":"2023-11-03T19:41:09Z","title":"An Interdisciplinary Outlook on Large Language Models for Scientific Research","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04929","snapshot_observed_at":"2026-08-07T13:21:39.835999Z","title":"An interdisciplinary outlook on large language models for scientific research,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.835999Z"},"links":{"cited_paper":"/paper/2311.04929","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:38d019f825d53003fdfbbfaf2875b0aed34b0d85be79bc3bb0cdae391d842230","observation_id":"15d25f49-b42e-4948-b4be-4e726343a13e","resolution":{"observed_at":"2026-08-07T13:21:39.835999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.127580Z","title":"Opportunities for retrieval and tool augmented large language models in scientific facilities,","venue":null,"work_id":"4da7fa28-d5d7-4b7c-bd4b-d939e03925e5","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.900909Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:fea94996fd54f9aa60c1bc95ca2b0e35b515d11b28e4c2979175678ba6f49bc2","observation_id":"983ce030-0c50-4e21-9382-d59b44f52379","resolution":{"observed_at":"2026-08-07T13:21:45.273194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12735","last_updated":"2024-12-02T02:34:47Z","snapshot_observed_at":"2026-08-05T16:52:46.144105Z","submitted_at":"2024-07-17T16:55:42Z","title":"EchoSight: Advancing Visual-Language Models with Wiki Knowledge","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12735","snapshot_observed_at":"2026-08-07T13:21:39.948489Z","title":"Echosight: Advancing visual-language models with wiki knowledge,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.948489Z"},"links":{"cited_paper":"/paper/2407.12735","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:68f7a8e322df0a52db8cdfd7a1088352a375f9008e35c0328d3f6542b341b529","observation_id":"6585cc9f-7072-4fe3-a5a7-a27ac79cb5cc","resolution":{"observed_at":"2026-08-07T13:21:39.948489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T13:21:40.020790Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.020790Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:e52814af52b981ba4770220207bd9f90cfc85f23198c3124b50b9104e1a7812e","observation_id":"fbf74ff2-eacd-4e67-a4e0-ef15b2f5fb08","resolution":{"observed_at":"2026-08-07T13:21:40.020790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T13:21:40.107539Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.107539Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:2fbe44ba836d5d5f134b99c7387d45afaa88f31fc6eb1df2d7b6a924a4e395c7","observation_id":"bc749ad0-d4f3-4c11-bf0d-2d2ea5713ce2","resolution":{"observed_at":"2026-08-07T13:21:40.107539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T13:21:40.196536Z","title":"Poisoning re- trieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.196536Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:76d7d1a89ab3e5b49da535e3588d27266cc06b27603ea8c3157e426abf1d324e","observation_id":"1352cddc-bea4-444d-a0c2-ac35e9a1594a","resolution":{"observed_at":"2026-08-07T13:21:40.196536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20446","last_updated":"2025-02-04T14:35:38Z","snapshot_observed_at":"2026-07-06T18:23:01.681030Z","submitted_at":"2024-05-30T19:46:36Z","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20446","snapshot_observed_at":"2026-08-07T13:21:40.287773Z","title":"Is my data in your retrieval database? membership inference attacks against retrieval augmented generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.287773Z"},"links":{"cited_paper":"/paper/2405.20446","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:2b681fe94a7609297f9d85e61710d72e9fc77734c837bf43923eaa6d7fb9914c","observation_id":"eeedf574-7b1d-488a-8e1f-a0039365b93b","resolution":{"observed_at":"2026-08-07T13:21:40.287773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:40.381404Z","title":"Phantom: General trigger attacks on retrieval augmented language generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.381404Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:d4706abba8801ce7aae1287f6dc4bc468dcf22aa0c6e3cc83fb10313f7b743d2","observation_id":"459ca39b-2e64-4264-b250-6e2dffa39d30","resolution":{"observed_at":"2026-08-07T13:21:40.381404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.878177Z","title":"Poisoning web- scale training datasets is practical,","venue":null,"work_id":"b31b705e-7e68-4d4a-8bab-1c9104c3d381","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.463167Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:73f27f59a62e48dff4015706779d94b160a52d6e7612d42c82ecf796cb366c89","observation_id":"1f6563ac-2c47-43e2-bbfc-4c186e0a8660","resolution":{"observed_at":"2026-08-07T13:21:45.000137Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.635952Z","title":"Encyclopedic vqa: Visual questions about detailed properties of fine-grained categories,","venue":null,"work_id":"5a43eaf9-56e3-4c7b-a220-52b5051de9ee","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.569961Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:cb583b1768b265fd5a99f1bd55cfc05d7624a1361e6f4d795357e0c41e65effd","observation_id":"aef7ea52-49d6-47a0-81bf-001741b46f25","resolution":{"observed_at":"2026-08-07T13:21:44.739950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.11713","last_updated":"2023-10-17T14:19:13Z","snapshot_observed_at":"2026-08-07T03:19:53.953867Z","submitted_at":"2023-02-23T00:33:54Z","title":"Can Pre-trained Vision and Language Models Answer Visual Information-Seeking Questions?","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.11713","snapshot_observed_at":"2026-08-07T13:21:40.614803Z","title":"Can pre-trained vision and language models answer visual information-seeking questions?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.614803Z"},"links":{"cited_paper":"/paper/2302.11713","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:591fe181676e668f461e4511cce3380941bf81ced4d8dd4d8c618d8244f9a849","observation_id":"261c7fb3-9da8-48e0-95c6-3f92a1fafaf9","resolution":{"observed_at":"2026-08-07T13:21:40.614803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:40.709980Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.709980Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:52cdc76ee1a8bba52085a218e1572eab5f6504fe55aada710451959f8a0c01a0","observation_id":"e30bd1b3-a759-4cd4-a9d3-9dd081fcc786","resolution":{"observed_at":"2026-08-07T13:21:40.709980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1206.6389","last_updated":"2013-03-25T10:16:36Z","snapshot_observed_at":"2026-07-06T02:50:47.096675Z","submitted_at":"2012-06-27T19:59:59Z","title":"Poisoning Attacks against Support Vector Machines","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1206.6389","snapshot_observed_at":"2026-08-07T13:21:40.788169Z","title":"Poisoning attacks against support vector machines,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.788169Z"},"links":{"cited_paper":"/paper/1206.6389","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:4b60c0ad441c7a8ddf6810f8ca91566d252645e54737508b74545d8cf2b0e2e9","observation_id":"ce73dec8-e161-4ab4-b654-4674387cdbb6","resolution":{"observed_at":"2026-08-07T13:21:40.788169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:40.836736Z","title":"Local model poisoning attacks to {Byzantine-Robust} federated learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.836736Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:d0c210fb77cbc6806b04d60243243f4517258f0583db9d40a49632a8026b3641","observation_id":"72865569-082e-4de2-9568-17134d9977c3","resolution":{"observed_at":"2026-08-07T13:21:40.836736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.328426Z","title":"Badencoder: Backdoor attacks to pre- trained encoders in self-supervised learning,","venue":null,"work_id":"43481a0a-0c28-41c6-ab78-1c2f27c6511c","year":2022},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.890602Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:6a3d3160d903f654e3721e56fc61a7a8bdaf15e163ff57bf675a54ee9ad999a9","observation_id":"2824b544-a343-4f15-90ef-f8e6b694bede","resolution":{"observed_at":"2026-08-07T13:21:44.456896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.117470Z","title":"Defeat: Deep hidden feature backdoor attacks by imperceptible perturbation and latent representation constraints,","venue":null,"work_id":"b8dd6c32-1863-4c95-9df5-2ee4c1a47c99","year":2022},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.968482Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:e0e81f06704dd13f4160c1d1a2faf9ad385337ce532ac4e17f4b015a7c793d02","observation_id":"d438f0fa-5f3f-4c30-ac65-5e164832ce9d","resolution":{"observed_at":"2026-08-07T13:21:44.198814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.865387Z","title":"Kerckhoffs, La cryptographie militaire","venue":null,"work_id":"c7c2a8a4-6e64-4c86-a29d-8162e1e55ac8","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.106611Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:617a6048e7a5e68b35516c60f0780c7f1e2cb86e7cd3cda0b23a1e801ac6fc84","observation_id":"b7b40b90-4768-4756-8bdb-39216befe95b","resolution":{"observed_at":"2026-08-07T13:21:43.983920Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.609349Z","title":"Unsupervised k-means clustering algo- rithm,","venue":null,"work_id":"ea225f8e-27fb-4018-91f1-c467b7955c82","year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.169190Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:73b0771e0ccfc93ef846ae1dc43036690d5e7f41800e3d1bb5b9a8dee12c7d82","observation_id":"95be1161-39ab-4a86-a697-5a433c51d2a1","resolution":{"observed_at":"2026-08-07T13:21:43.713481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04252","last_updated":"2024-02-06T18:59:48Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:48Z","title":"EVA-CLIP-18B: Scaling CLIP to 18 Billion Parameters","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04252","snapshot_observed_at":"2026-08-07T13:21:41.212978Z","title":"Eva-clip-18b: Scaling clip to 18 billion parameters,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.212978Z"},"links":{"cited_paper":"/paper/2402.04252","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:516e9bd680279779e7451aa5bfcf478d524e1438b1a843a46bdcfdeba39c230d","observation_id":"33163676-9942-43da-96e7-7883f6a5b377","resolution":{"observed_at":"2026-08-07T13:21:41.212978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-07T13:21:41.269897Z","title":"Mistral 7b,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.269897Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:7b9181720df92424291f7a0b7cb02d7bdff3b51f17154a1fac58c00940aaaf2e","observation_id":"4cdc62a5-b2e4-4b08-b23c-388224f71aa6","resolution":{"observed_at":"2026-08-07T13:21:41.269897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.438582Z","title":"Llama 3 model card,","venue":null,"work_id":"6230b000-40ba-421b-9943-0f9de6b77101","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.335774Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:b1770768ce960822924228984ca775db0d39b463760cba9236a3c408b7c2b39a","observation_id":"3d6d30b7-259a-425d-a565-47e182bd736b","resolution":{"observed_at":"2026-08-07T13:21:43.537417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14238","last_updated":"2024-01-15T15:23:55Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-21T18:59:31Z","title":"InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14238","snapshot_observed_at":"2026-08-07T13:21:41.389521Z","title":"Internvl: Scaling up vision foundation models and aligning for generic visual-linguistic tasks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.389521Z"},"links":{"cited_paper":"/paper/2312.14238","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:1c530fb9893b6b1717f0d50c61f389851b6a2c8e3a119fafec0885c253b1c35a","observation_id":"fdbc471c-a998-480e-910c-bd41589940d0","resolution":{"observed_at":"2026-08-07T13:21:41.389521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:41.456553Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.456553Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:ea395d9252699778a15adabd632c0dafef798eb4b19c23e4c19868a941a8ae0b","observation_id":"baf2abde-d710-425f-982c-621fc65b6b36","resolution":{"observed_at":"2026-08-07T13:21:41.456553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T13:21:41.536354Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.536354Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:0f69963ed53d0c9c93a8185b1da9d3dd78f133902cd6d72b99e9e31984a154ef","observation_id":"b07ae3a4-f922-4f4d-924f-3a1d3288c8dc","resolution":{"observed_at":"2026-08-07T13:21:41.536354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-07T13:21:41.598385Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.598385Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:fd9ca7ca78a3ff523010698655ddc84063b89d5895c732bef7e2350cf5aa96c6","observation_id":"30aa5610-ab9b-44d7-81eb-f9b685d4f56b","resolution":{"observed_at":"2026-08-07T13:21:41.598385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.277965Z","title":"Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,","venue":null,"work_id":"a5221491-aa7e-4b60-aec4-c29c4c61a75f","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.670709Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:f4551dcea65d05f88e6791a74218c37c523cb4eee5461b3939b948b3fe73d0ba","observation_id":"568593c2-1d52-4fde-9d20-11fc2ce3f893","resolution":{"observed_at":"2026-08-07T13:21:43.350327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:41.770586Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.770586Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:fe655bf8e70db66ae13973b99effb62b66e7809aced04b298fbba76415db31a7","observation_id":"5395f5fc-363e-42d1-88a5-201d09c27030","resolution":{"observed_at":"2026-08-07T13:21:41.770586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T13:21:41.845428Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.845428Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:9be418e995341d1bfbc4ffc08215f2185e0e82dccc5c5306ce94af0725223d14","observation_id":"34bbff10-6a13-4662-91df-064b1288c47a","resolution":{"observed_at":"2026-08-07T13:21:41.845428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:41.891174Z","title":"Theoretically principled trade-off between robustness and accuracy,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.891174Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:02479cc8f7637a93418bcf7210c28570427333cec146948627cfc0495395f48f","observation_id":"814f94bc-f151-430d-834c-27c9d3bf286b","resolution":{"observed_at":"2026-08-07T13:21:41.891174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T13:21:41.966464Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.966464Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:a29015c3e90987177bfee571f37ef74513c6f170c52dd0ff54b77fc77b122464","observation_id":"19b04edd-5048-486a-a247-d1d459f40f8a","resolution":{"observed_at":"2026-08-07T13:21:41.966464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-04T13:57:53.214741Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T13:21:42.030726Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.030726Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:ba8348aaa7085f897e7a84dfb84a0b117f37a3ffea440dcab907e153ee7faec4","observation_id":"96aade47-d54a-489b-8694-17e91fe211e1","resolution":{"observed_at":"2026-08-07T13:21:42.030726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:42.113542Z","title":"Denoising diffusion probabilistic models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.113542Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:8df53e48b9526ee8e14ddb7a6994ac52f86c17633a21b584fe9536522282c999","observation_id":"43290c99-1617-4479-9b40-996ce1ac1c73","resolution":{"observed_at":"2026-08-07T13:21:42.113542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T13:21:42.188870Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.188870Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:0706a98bb044b84055a9f847d9fb3de48de41ba1ddac52f5ce3b9be77eb9ae0d","observation_id":"3c44f82d-a9fa-45a5-aaeb-a7d689c79cf6","resolution":{"observed_at":"2026-08-07T13:21:42.188870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T13:21:42.271921Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.271921Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:bcdfc6a3e6688b548fc94d26b641574c1d8bb2a9824caa1d02c5d19088ef63c1","observation_id":"d3bef515-93f2-4525-8851-2aceec43d073","resolution":{"observed_at":"2026-08-07T13:21:42.271921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.099328Z","title":"FlexRAG,","venue":null,"work_id":"bc0d663a-434b-4528-8ff7-b0c5838c7b05","year":2025},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.346479Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:fec68f04cdd9fbdc95dffd2627c5acf7964b12bb944ea2628bd13f51db968fee","observation_id":"75eae8ed-9459-483a-a4c6-cb844ae05f39","resolution":{"observed_at":"2026-08-07T13:21:43.142562Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":27,"verified_exact":0,"verified_fuzzy":14},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 5 inbound Pith citation observations for arXiv:2505.23828."}