{"as_of":"2026-08-07T18:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6ba8e5f986a7e90e06b16f80646be3a8b4e01dfe92b632b7a28bd1205b0f9868","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:35:29.734144Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.24519/citation-record","integrity":"/paper/2505.24519/integrity","json":"/paper/2505.24519/citation-record.json","paper":"/paper/2505.24519"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:25.933568Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:25.933568Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:2fad9dd52462477d650ba3160d567b0f0f4d19789c4c52927a9d43ab905fc203","observation_id":"e1b8b59c-2071-448b-9953-4396531b7cf8","resolution":{"observed_at":"2026-08-07T12:35:25.933568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:25.982927Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:25.982927Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:f99c41fbf2a4bef7d8ad44d5773d432c52513d319331ae6b1ddf0157736f39a8","observation_id":"5ec3fc88-97c6-44ed-89bc-6ffec363f147","resolution":{"observed_at":"2026-08-07T12:35:25.982927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T12:35:26.079150Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.079150Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:545bc1053ec9031f0af1da7ded7995e306f2c47ac0f5c3907fb1727f8d4f38e2","observation_id":"39107875-e453-4a4d-9130-873c64d3a0a4","resolution":{"observed_at":"2026-08-07T12:35:26.079150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12966","last_updated":"2023-10-13T02:41:28Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-08-24T17:59:17Z","title":"Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyond","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12966","snapshot_observed_at":"2026-08-07T12:35:26.166915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.166915Z"},"links":{"cited_paper":"/paper/2308.12966","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:ec68679cdd49de198a1454008ce95439f32fc15e9d66142cd39fe2ae7e511a21","observation_id":"ccd595d5-669e-4bd3-b9d5-5f75e0235220","resolution":{"observed_at":"2026-08-07T12:35:26.166915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.635822Z","title":null,"venue":null,"work_id":"e168b7d6-7844-4a1a-a441-d9a8d4a725f9","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.271208Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:3050fa2f33121bb491390af9542609ba757d8fe0219052ae40a796eecb1931a6","observation_id":"482ab8ce-1631-47f2-ac94-31d182adad7e","resolution":{"observed_at":"2026-08-07T12:35:31.713996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.10081","last_updated":"2024-03-19T17:51:45Z","snapshot_observed_at":"2026-07-06T16:48:44.861171Z","submitted_at":"2023-11-16T18:37:29Z","title":"DRESS: Instructing Large Vision-Language Models to Align and Interact with Humans via Natural Language Feedback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.10081","snapshot_observed_at":"2026-08-07T12:35:26.371851Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.371851Z"},"links":{"cited_paper":"/paper/2311.10081","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:e914cd6be226c09fb95de124b0647a1dc6b8b1d5bedad02d38d767d524b73894","observation_id":"9519eda1-bd00-4a51-b2da-7a4555a3bfff","resolution":{"observed_at":"2026-08-07T12:35:26.371851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.491130Z","title":null,"venue":null,"work_id":"3e23f6ef-ff75-4068-ac5f-b504c377f48e","year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.477651Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:bf23c6faec21989494ae173335ed71d0e264104917b7be5ccbd21ee09e6c3381","observation_id":"c2cbd348-5c46-4b5e-89c5-44af4ff6e641","resolution":{"observed_at":"2026-08-07T12:35:31.584942Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06625","last_updated":"2025-02-10T05:47:27Z","snapshot_observed_at":"2026-07-06T19:30:13.003609Z","submitted_at":"2024-10-09T07:21:43Z","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06625","snapshot_observed_at":"2026-08-07T12:35:26.553538Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.553538Z"},"links":{"cited_paper":"/paper/2410.06625","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:f7d511d7163f813dc39f9ec46d3efb28e5b55da87df3705c195cc2e645a11359","observation_id":"71bdcb01-8904-4e8f-96c7-830263e41da1","resolution":{"observed_at":"2026-08-07T12:35:26.553538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4647.36855","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:30.648666Z","title":null,"venue":null,"work_id":"3821991b-ed69-4601-a988-5efce3dec436","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.629200Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:033049996775efa1e2559a0888364040b81671cbdef3af644bcdea81dc860dd4","observation_id":"2da1b165-06a7-454d-b2b0-4971301913eb","resolution":{"observed_at":"2026-08-07T12:35:30.703721Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-07T12:35:26.772719Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.772719Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:8ba1e9bcb3d8179131575d0b99083ec7221d1a080f81da292386883dd39cc5e2","observation_id":"dcf6d652-8dbb-4351-829b-31ada64094cb","resolution":{"observed_at":"2026-08-07T12:35:26.772719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05608","last_updated":"2025-01-19T16:23:38Z","snapshot_observed_at":"2026-07-06T16:45:24.070954Z","submitted_at":"2023-11-09T18:59:11Z","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05608","snapshot_observed_at":"2026-08-07T12:35:26.878499Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.878499Z"},"links":{"cited_paper":"/paper/2311.05608","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:b5117ce0f5397259d3b2b9d1a340cfa7c36999fdad884950086b1001e034ff70","observation_id":"15745a6e-fa80-4aa0-b09a-8879aa8366e6","resolution":{"observed_at":"2026-08-07T12:35:26.878499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09572","last_updated":"2024-10-15T04:55:36Z","snapshot_observed_at":"2026-07-06T17:44:41.822709Z","submitted_at":"2024-03-14T17:03:04Z","title":"Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09572","snapshot_observed_at":"2026-08-07T12:35:26.935873Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.935873Z"},"links":{"cited_paper":"/paper/2403.09572","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:47460388ce21f610f236b2127a458949d15cf3df2dd8bd9bd4041e50acce0632","observation_id":"34d5c27d-c373-4429-bc04-7021f7871f58","resolution":{"observed_at":"2026-08-07T12:35:26.935873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18495","last_updated":"2024-12-09T20:21:56Z","snapshot_observed_at":"2026-08-06T04:32:59.039501Z","submitted_at":"2024-06-26T16:58:20Z","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18495","snapshot_observed_at":"2026-08-07T12:35:27.036330Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.036330Z"},"links":{"cited_paper":"/paper/2406.18495","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:ecc61121d3a3ecdb2da458da88f2ad99d0e44a79f8e0e598eccfa7a3dc006e05","observation_id":"383440b7-5bbc-492a-812b-4f773c789803","resolution":{"observed_at":"2026-08-07T12:35:27.036330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1603.07396","last_updated":"2016-03-24T00:02:58Z","snapshot_observed_at":"2026-08-02T15:46:58.530939Z","submitted_at":"2016-03-24T00:02:58Z","title":"A Diagram Is Worth A Dozen Images","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1603.07396","snapshot_observed_at":"2026-08-07T12:35:27.138684Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.138684Z"},"links":{"cited_paper":"/paper/1603.07396","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:c23bd36e8f6f2b55fe3f223186aa3c33e19b8e40b7d2654fa908d589f4ef7989","observation_id":"829353e0-621a-4b52-89c0-78ac6ac7e9c0","resolution":{"observed_at":"2026-08-07T12:35:27.138684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03744","last_updated":"2024-05-15T19:22:44Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:59:56Z","title":"Improved Baselines with Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03744","snapshot_observed_at":"2026-08-07T12:35:27.244469Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.244469Z"},"links":{"cited_paper":"/paper/2310.03744","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:222deb29a9ec963717a0b3bf554ebceeef46c1d5ef09998e2a66f8ecec311ee7","observation_id":"4b0f4459-02d0-447c-a4c4-cbe4f500a9b6","resolution":{"observed_at":"2026-08-07T12:35:27.244469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17600","last_updated":"2024-06-19T08:32:14Z","snapshot_observed_at":"2026-07-06T16:54:22.039181Z","submitted_at":"2023-11-29T12:49:45Z","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17600","snapshot_observed_at":"2026-08-07T12:35:27.358332Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.358332Z"},"links":{"cited_paper":"/paper/2311.17600","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:10932dbc185fd55898c4ec0519da7ade4aaa4a36850129a1dfc711eed8399494","observation_id":"fc9f6bfe-fd97-4e71-832b-1f1fccf337f9","resolution":{"observed_at":"2026-08-07T12:35:27.358332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T12:35:27.438621Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.438621Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:8f6d668cae831cbdd3f2179320eadd73854c0c4f1b46554f90c7f11540004114","observation_id":"4b4b497e-7604-43f3-a40b-f86b1d603876","resolution":{"observed_at":"2026-08-07T12:35:27.438621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-07T12:35:27.577719Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.577719Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:896df1ee04c510917ba502eb651d10905bca107b9a245bd38176d933471d9600","observation_id":"b0f156a1-1c31-4c81-bd4e-6e068d4595a6","resolution":{"observed_at":"2026-08-07T12:35:27.577719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09345","last_updated":"2024-11-01T06:30:11Z","snapshot_observed_at":"2026-08-01T15:45:58.202651Z","submitted_at":"2024-02-14T17:49:07Z","title":"InfoRM: Mitigating Reward Hacking in RLHF via Information-Theoretic Reward Modeling","version":5},"cited_work":{"arxiv_id":"2402.09345","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09345","snapshot_observed_at":"2026-08-07T12:35:30.314941Z","title":"InfoRM: Mitigating Reward Hacking in RLHF via Information-Theoretic Reward Modeling","venue":"cs.LG","work_id":"9c5a8d87-ceae-4a46-8fdf-2cc2356fee33","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.696015Z"},"links":{"cited_paper":"/paper/2402.09345","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:d99f46c13820ddb078dcde7cd65e3402239253d344fcbc9c4b940aeb0445ed6a","observation_id":"b5eb8da3-2fb5-4a0b-a87f-592c7f958673","resolution":{"observed_at":"2026-08-07T12:35:30.381649Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.19358","last_updated":"2025-06-02T16:30:23Z","snapshot_observed_at":"2026-08-04T06:11:49.462081Z","submitted_at":"2025-01-31T18:10:53Z","title":"The Energy Loss Phenomenon in RLHF: A New Perspective on Mitigating Reward Hacking","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.19358","snapshot_observed_at":"2026-08-07T12:35:27.803525Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.803525Z"},"links":{"cited_paper":"/paper/2501.19358","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:f927db93c54f7e19e3c095317927cbf073dbe08b03350bfce93e14b2bf8d96d9","observation_id":"f47762c9-4d25-41ad-b147-744e6e0ad953","resolution":{"observed_at":"2026-08-07T12:35:27.803525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T12:35:27.915330Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.915330Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:bceafd82e33617b3767b5ccb822344b0bec0cec47d38239448b3c1c63066f552","observation_id":"aaec619b-8e1a-4d76-ad0a-f774bf657377","resolution":{"observed_at":"2026-08-07T12:35:27.915330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.00020","last_updated":"2021-02-26T19:04:58Z","snapshot_observed_at":"2026-07-06T10:45:03.059688Z","submitted_at":"2021-02-26T19:04:58Z","title":"Learning Transferable Visual Models From Natural Language Supervision","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.00020","snapshot_observed_at":"2026-08-07T12:35:28.065494Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.065494Z"},"links":{"cited_paper":"/paper/2103.00020","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:14cebd524cf9c167a8542461a1dc862e10b4f5a84b3b86e4ce8346496ff39f70","observation_id":"a4a215b9-c758-49c1-9c63-548fa95d2a35","resolution":{"observed_at":"2026-08-07T12:35:28.065494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.10752","last_updated":"2022-04-13T11:38:44Z","snapshot_observed_at":"2026-07-06T12:20:47.369918Z","submitted_at":"2021-12-20T18:55:25Z","title":"High-Resolution Image Synthesis with Latent Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.10752","snapshot_observed_at":"2026-08-07T12:35:28.220688Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.220688Z"},"links":{"cited_paper":"/paper/2112.10752","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:24b611f4ec6f1489475554da2e2e002e2656d13bbdaee0ea418c70f80ad24deb","observation_id":"0aa3501a-d4ae-46ab-9dbc-fb8b7f141be9","resolution":{"observed_at":"2026-08-07T12:35:28.220688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06209","last_updated":"2024-04-25T07:12:39Z","snapshot_observed_at":"2026-07-06T17:14:32.455890Z","submitted_at":"2024-01-11T18:58:36Z","title":"Eyes Wide Shut? Exploring the Visual Shortcomings of Multimodal LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06209","snapshot_observed_at":"2026-08-07T12:35:28.325476Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.325476Z"},"links":{"cited_paper":"/paper/2401.06209","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:e2d7deffa9ecb6aaf76d6aa514eec1ce1f48f661947da8de865c74a63c22ffca","observation_id":"91e87091-4d6a-46ae-b4f2-9f348ae857a9","resolution":{"observed_at":"2026-08-07T12:35:28.325476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-07T12:35:28.439965Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.439965Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:0b9e62db1dc9a574cd02863d4d7967fbd18377d6148822bf711fdb62fb710a60","observation_id":"0f84160e-c117-47a7-adf9-dc7131e81afb","resolution":{"observed_at":"2026-08-07T12:35:28.439965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.16721","last_updated":"2025-05-01T22:22:43Z","snapshot_observed_at":"2026-07-06T19:56:48.086175Z","submitted_at":"2024-11-23T02:17:17Z","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","version":3},"cited_work":{"arxiv_id":"2411.16721","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.16721","snapshot_observed_at":"2026-08-07T12:35:30.068295Z","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","venue":"cs.CV","work_id":"4bbc7827-ddb2-4d34-98e3-6377754be278","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.553131Z"},"links":{"cited_paper":"/paper/2411.16721","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:eab716468420f670053782bf501c900b7dd26391d4003987d0def277943d1c35","observation_id":"e1749e4a-3499-471e-977b-bffb9a1376c6","resolution":{"observed_at":"2026-08-07T12:35:30.147706Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.349894Z","title":null,"venue":null,"work_id":"484292e6-5a26-408a-bbc7-d0cbc4be06e1","year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.662888Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:11b9c13c8ef3735d79aedbc5593f14682085c42591af7e3caf2fa8e8551c243f","observation_id":"d05710b4-f375-435f-bf7b-37595393caff","resolution":{"observed_at":"2026-08-07T12:35:31.415390Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-981-96-0151-6_1","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:29.842533Z","title":null,"venue":null,"work_id":"fd2bd116-b914-4722-b6e7-d9f4cb927c22","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.772053Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:d8e568c3cbfa1edff0ed861f6d283260a3097028cebd7017ca2f3379c97506f1","observation_id":"c64e1a0a-08d5-4cb2-94be-b018a4da1163","resolution":{"observed_at":"2026-08-07T12:35:29.943613Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.178834Z","title":null,"venue":null,"work_id":"4c6c6b8f-c4e7-4795-9559-b821f23fb218","year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.847475Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:45d622916e180a3207168a924324b4fb578e596a5ce25bcd3c1a62061086dd82","observation_id":"b8d999a5-3168-44d8-9a4f-025c2ed97d02","resolution":{"observed_at":"2026-08-07T12:35:31.251711Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.01222","last_updated":"2025-05-22T15:55:37Z","snapshot_observed_at":"2026-08-07T17:34:43.114568Z","submitted_at":"2025-03-03T06:40:21Z","title":"Retrieval-Augmented Perception: High-Resolution Image Perception Meets Visual RAG","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.01222","snapshot_observed_at":"2026-08-07T12:35:28.937202Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.937202Z"},"links":{"cited_paper":"/paper/2503.01222","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:921b5468eb1596ee49d0b930a6ac478d02ebe5d56e9b27a46c89b644d0ccd4f3","observation_id":"92ed591e-d0b9-442d-9796-31b2a290a10c","resolution":{"observed_at":"2026-08-07T12:35:28.937202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.017925Z","title":null,"venue":null,"work_id":"02069e93-253d-45c2-9e99-e04a143c519e","year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.026864Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:4481bbf002766127a387b6556098d9ddfd6296f94ab84dc25292e08538c960c1","observation_id":"16ca3de2-682f-40fc-873e-ac171a18bec1","resolution":{"observed_at":"2026-08-07T12:35:31.101861Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T07:39:27.021441Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14881","snapshot_observed_at":"2026-08-07T12:35:29.141982Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.141982Z"},"links":{"cited_paper":"/paper/2502.14881","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:6a773e5e0ac4bfe6706b7869ba39a0479db770150f20a20ee4a442a37811c2a5","observation_id":"f8bc47bc-ec44-4cb8-81b7-a155ab253df6","resolution":{"observed_at":"2026-08-07T12:35:29.141982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.10594","last_updated":"2025-03-02T01:19:51Z","snapshot_observed_at":"2026-08-02T13:24:00.339129Z","submitted_at":"2024-10-14T15:04:18Z","title":"VisRAG: Vision-based Retrieval-augmented Generation on Multi-modality Documents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.10594","snapshot_observed_at":"2026-08-07T12:35:29.219653Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.219653Z"},"links":{"cited_paper":"/paper/2410.10594","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:be457c53a6f8d6e05b946debc996cc1eca70e832eeb59fa2d06a6f142d2e6a8f","observation_id":"dbf8ac02-46f5-47c5-ad8e-267831a68839","resolution":{"observed_at":"2026-08-07T12:35:29.219653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10766","last_updated":"2025-03-15T00:49:45Z","snapshot_observed_at":"2026-07-06T17:04:17.738921Z","submitted_at":"2023-12-17T17:02:14Z","title":"JailGuard: A Universal Detection Framework for LLM Prompt-based Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10766","snapshot_observed_at":"2026-08-07T12:35:29.349854Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.349854Z"},"links":{"cited_paper":"/paper/2312.10766","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:1f110725498df23c1efbbc85100946de7d36f358798d86896d6d39c65af94da6","observation_id":"12287ed5-b3a7-4724-a9f0-f073f7520f66","resolution":{"observed_at":"2026-08-07T12:35:29.349854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:30.861865Z","title":null,"venue":null,"work_id":"e8d048f2-cca6-4807-9680-5c2803ec9f15","year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.460842Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:ac750fa8c03c01129695768a7fa99c9f8876abf85efd0ef2046039579771f145","observation_id":"9db12ec0-468f-4cdd-83ef-c4c15b7458d6","resolution":{"observed_at":"2026-08-07T12:35:30.932001Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.04931","last_updated":"2025-06-27T10:07:29Z","snapshot_observed_at":"2026-07-06T20:18:31.039569Z","submitted_at":"2025-01-09T02:47:01Z","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.04931","snapshot_observed_at":"2026-08-07T12:35:29.600994Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.600994Z"},"links":{"cited_paper":"/paper/2501.04931","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:0171473604cc3925087abcad4b70b823fdb52454ac2780672c96a058121de165","observation_id":"c0f28e1f-f415-4b5d-a708-3eea649bc713","resolution":{"observed_at":"2026-08-07T12:35:29.600994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T12:35:29.734144Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.734144Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:68034323df272a8a88dd562b35637c7ee18f3628e15520a9fe957aef83406b39","observation_id":"f5cdf2a8-9de9-4834-88b0-95f27cc88802","resolution":{"observed_at":"2026-08-07T12:35:29.734144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":33,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2505.24519."}