{"as_of":"2026-08-07T12:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:effea9a27723c9a88bf0b819238562c7aa341cc54bdbc2cd2c235ee739e113e1","coverage":[{"denominator":95,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":95,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:11:40.585654Z","state":"measured"},{"denominator":112,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":112,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:41:28.189227Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T15:18:33.813982Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-08-05T14:37:25.598981Z","title":"Adversarial attacks on robotic vision language action models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.00117","last_updated":"2025-09-03T17:55:11Z","snapshot_observed_at":"2026-08-06T16:47:07.070236Z","submitted_at":"2025-08-28T17:59:07Z","title":"Embodied AI: Emerging Risks and Opportunities for Policy Action","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T14:37:25.598981Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2509.00117"},"observation_digest":"sha256:297d7f04f1a83b81115c89a0be1e0d1be4828280ac940450f7c4f874be1e2811","observation_id":"56c4544d-d9f6-4201-b6e6-570b1e1f3fab","resolution":{"observed_at":"2026-08-05T14:37:25.598981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2512.21815","last_updated":"2026-06-29T08:03:34Z","snapshot_observed_at":"2026-08-05T12:33:04.952799Z","submitted_at":"2025-12-26T01:01:25Z","title":"High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-16T19:29:43.382392Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2512.21815"},"observation_digest":"sha256:13e66d6da94fe1ae02ca4e133c00b81558e498feb56f192c92bb758778024c24","observation_id":"d785a531-3760-4bc3-ab92-fe42c7835f4f","resolution":{"observed_at":"2026-05-16T19:31:13.125269Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-08-03T14:05:23.448332Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.21815","last_updated":"2026-06-29T08:03:34Z","snapshot_observed_at":"2026-08-05T12:33:04.952799Z","submitted_at":"2025-12-26T01:01:25Z","title":"High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T14:05:23.448332Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2512.21815"},"observation_digest":"sha256:f2a8733495d9c9d16ffbe45aed56c62feb4e954aaa4cb74107c02da44724231f","observation_id":"f820d86b-5131-48c4-8b76-47580c354891","resolution":{"observed_at":"2026-08-03T14:05:23.448332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-13T19:50:50.950451Z","title":"K., Robey, A., Zou, A., Ravichandran, Z., Pappas, G","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2603.23117","last_updated":"2026-06-01T08:02:23Z","snapshot_observed_at":"2026-08-04T07:57:16.483761Z","submitted_at":"2026-03-24T12:14:12Z","title":"TRAP: Hijacking VLA CoT-Reasoning via Adversarial Patches","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-13T19:50:50.950451Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2603.23117"},"observation_digest":"sha256:536451e50cb9ae8cce7dc1b37fe4863ab5f73143a14f9739fccb4ed19425e91b","observation_id":"0aec7b11-f324-47b0-a56b-7a2f3b0d881c","resolution":{"observed_at":"2026-07-13T19:50:50.950451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2603.24935","last_updated":"2026-04-07T10:20:22Z","snapshot_observed_at":"2026-08-06T10:57:09.113964Z","submitted_at":"2026-03-26T01:56:01Z","title":"SABER: A Stealthy Agentic Black-Box Attack Framework for Vision-Language-Action Models","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-15T01:06:42.421062Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2603.24935"},"observation_digest":"sha256:da7a7cf513f0d8fdf25871481a1af17c0b1beea517825f22f882206c79f39da5","observation_id":"e7b3b776-b54d-43bf-a6dc-b989de00f8a8","resolution":{"observed_at":"2026-05-15T01:08:25.791834Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2604.03890","last_updated":"2026-04-04T23:06:16Z","snapshot_observed_at":"2026-07-06T22:52:57.182669Z","submitted_at":"2026-04-04T23:06:16Z","title":"From Prompt to Physical Action: Structured Backdoor Attacks on LLM-Mediated Robotic Control Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-13T16:47:10.678447Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2604.03890"},"observation_digest":"sha256:13a1da1236c6cdec32752d563a7d1c70385b6f3fa85be3e2636c1f3750551a0c","observation_id":"11d4d8ed-79e8-4493-a573-143f81210c60","resolution":{"observed_at":"2026-05-13T16:48:02.805576Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2604.09651","last_updated":"2026-03-30T03:54:04Z","snapshot_observed_at":"2026-08-07T01:26:00.994535Z","submitted_at":"2026-03-30T03:54:04Z","title":"FlowHijack: A Dynamics-Aware Backdoor Attack on Flow-Matching Vision-Language-Action Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-14T22:20:35.818770Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2604.09651"},"observation_digest":"sha256:cecbdf2db027f020aa8e3d57fad3b21181d65c32c067ac1b848a14c4ba561a8a","observation_id":"6137c7a4-a2d8-44b0-8bb8-6782d72cfe7a","resolution":{"observed_at":"2026-05-14T22:23:03.846995Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2604.23775","last_updated":"2026-04-26T15:58:19Z","snapshot_observed_at":"2026-07-06T23:09:58.193241Z","submitted_at":"2026-04-26T15:58:19Z","title":"Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanisms","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-08T05:56:13.913710Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2604.23775"},"observation_digest":"sha256:47f09810e5eb5752b9f15deeec85f6b3596bf4f4ff045fdc75f1e33032abffcc","observation_id":"271e1474-c83c-4f4b-a890-278af2b8fe62","resolution":{"observed_at":"2026-05-11T21:21:10.586498Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:b1595c99056cf9a87a259bd72027568c40ad9e2496c962d3a0152e078776d30e","observation_id":"b1d9eb21-727b-4ae6-bdd8-48e5742cbda8","resolution":{"observed_at":"2026-05-11T20:46:14.626428Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2605.02900","last_updated":"2026-05-24T13:33:45Z","snapshot_observed_at":"2026-08-02T11:46:07.449862Z","submitted_at":"2026-03-28T13:21:44Z","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","version":1},"reference_index":198,"source":"pdf_text","source_observed_at":"2026-05-14T22:20:31.623849Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2605.02900"},"observation_digest":"sha256:c6ba66f2a973432619b9eb82454446c03e790d1176109af300e5583cd73ce6ab","observation_id":"9f5e4732-6c6d-4dc5-84e8-371556000c9e","resolution":{"observed_at":"2026-05-14T22:23:04.330888Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-13T17:08:58.831798Z","title":"Adversarial attacks on robotic vision language action models.arXiv preprint arXiv:2506.03350, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.02900","last_updated":"2026-05-24T13:33:45Z","snapshot_observed_at":"2026-08-02T11:46:07.449862Z","submitted_at":"2026-03-28T13:21:44Z","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","version":2},"reference_index":164,"source":"pdf_text","source_observed_at":"2026-07-13T17:08:58.831798Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2605.02900"},"observation_digest":"sha256:c314a336b69957cf1d6fce24aa345ad71b9c12c1a05db3e204891bceda13a767","observation_id":"b4b5feba-993b-45df-b020-5bb525bb5b25","resolution":{"observed_at":"2026-07-13T17:08:58.831798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2605.29114","last_updated":"2026-05-27T21:21:37Z","snapshot_observed_at":"2026-07-06T23:38:37.178378Z","submitted_at":"2026-05-27T21:21:37Z","title":"ReasonBreak: Probing Vulnerabilities in Reasoning-Enabled Vision-Language-Action Models for Autonomous Driving","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-29T11:10:46.269185Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2605.29114"},"observation_digest":"sha256:43e7bc67cc0feeeecd3ebd06f778e46b221352ccb468bb0c86a518113c4d24af","observation_id":"4270abea-ea1e-4112-97b3-b2edf3763d5c","resolution":{"observed_at":"2026-06-29T11:13:20.764580Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2606.11535","last_updated":"2026-06-10T00:37:03Z","snapshot_observed_at":"2026-08-07T11:12:52.147547Z","submitted_at":"2026-06-10T00:37:03Z","title":"Adversarial Attacks on Learned Policies for Surgical Robotic Tasks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-27T10:07:43.624430Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2606.11535"},"observation_digest":"sha256:55fbc33c97eb026c804ed8422d4ed045031fe3a737ba12bc06fce1184887e621","observation_id":"a8f39fb6-c78a-4773-b990-ce8864d880b8","resolution":{"observed_at":"2026-07-03T10:17:57.712107Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2606.12978","last_updated":"2026-06-11T07:12:17Z","snapshot_observed_at":"2026-08-03T00:41:34.363368Z","submitted_at":"2026-06-11T07:12:17Z","title":"Trajectory-Level Redirection Attacks on Vision-Language-Action Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T06:33:53.013076Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2606.12978"},"observation_digest":"sha256:e5d6a0dda87859bc5f8af51e56191857cdd109d6efcb0f88edb062fec2068f2b","observation_id":"14643cb9-ab5b-41b3-929e-b61651e4006e","resolution":{"observed_at":"2026-07-03T15:18:33.815886Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-31T14:03:37.094818Z","title":"Adversarial attacks on robotic vision language action models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.28226","last_updated":"2026-07-30T13:58:33Z","snapshot_observed_at":"2026-08-05T18:07:07.575142Z","submitted_at":"2026-07-30T13:58:33Z","title":"Security of World-Model-Based Embodied AI: A Lifecycle of Threats, Defenses, and Evaluation","version":1},"reference_index":110,"source":"pdf_text","source_observed_at":"2026-07-31T14:03:37.094818Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2607.28226"},"observation_digest":"sha256:efc05e1ba3c5f21a3f8939a46aeb01eff0378f1cdc3cafb4f5f3038e72d6d258","observation_id":"4cf02cd1-f5a2-4b89-9fcb-fd4a0c1283e4","resolution":{"observed_at":"2026-07-31T14:03:37.094818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-08-06T00:41:28.189227Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01028","last_updated":"2026-08-02T06:06:28Z","snapshot_observed_at":"2026-08-06T23:25:19.517361Z","submitted_at":"2026-08-02T06:06:28Z","title":"VLAGuard: A Framework for Evaluating and Mitigating Physical Attention Hijacking in Vision-Language-Action Robots within Wireless Sensor Networks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T00:41:28.189227Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2608.01028"},"observation_digest":"sha256:b9dbe31166eadf32325e0aa739527353ac249d50fb4e09558c183a2db0985323","observation_id":"c623575b-7270-4968-8cbe-1d7c034a4973","resolution":{"observed_at":"2026-08-06T00:41:28.189227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-08-05T23:33:28.586419Z","title":"arXiv preprint arXiv:2506.03350 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03207","last_updated":"2026-08-04T06:47:26Z","snapshot_observed_at":"2026-08-07T11:15:36.545108Z","submitted_at":"2026-08-04T06:47:26Z","title":"DRIFT: Derailing Denoising Trajectories of Flow-Matching VLAs with Adversarial Patch Attack","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-05T23:33:28.586419Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2608.03207"},"observation_digest":"sha256:36945b0e57520f0bd3d3f474344df080a599482b0b98c024d6c85d6aed1d60a7","observation_id":"d8894222-796d-4019-834d-cfedfc1712a5","resolution":{"observed_at":"2026-08-05T23:33:28.586419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.03350/citation-record","integrity":"/paper/2506.03350/integrity","json":"/paper/2506.03350/citation-record.json","paper":"/paper/2506.03350"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2407.12998","last_updated":"2024-07-17T20:36:14Z","snapshot_observed_at":"2026-07-06T18:48:08.251086Z","submitted_at":"2024-07-17T20:36:14Z","title":"Surgical Robot Transformer (SRT): Imitation Learning for Surgical Tasks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12998","snapshot_observed_at":"2026-08-07T11:11:40.260798Z","title":"Surgical robot transformer (srt): Imitation learning for surgical tasks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.260798Z"},"links":{"cited_paper":"/paper/2407.12998","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:771f5d604974cc0f63b2380d3d247996f9abc4bc01b959b1b90f3610bbc8045d","observation_id":"e2638f25-9f56-45b6-b855-3f8482c90f3b","resolution":{"observed_at":"2026-08-07T11:11:40.260798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.264747Z","title":"General-purpose foundation models for increased autonomy in robot-assisted surgery.Nature Machine Intelligence, pages 1–9, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.264747Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:de8548486cd7647ec772ddf14585c303d09d7fa4396e2ef460b6b61a74b6af7b","observation_id":"0ed4bea1-ba5d-466b-8b89-6155f1232930","resolution":{"observed_at":"2026-08-07T11:11:40.264747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.08735","last_updated":"2024-07-11T17:59:22Z","snapshot_observed_at":"2026-07-06T18:45:01.801741Z","submitted_at":"2024-07-11T17:59:22Z","title":"Real-Time Anomaly Detection and Reactive Planning with Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.08735","snapshot_observed_at":"2026-08-07T11:11:40.268031Z","title":"Real-time anomaly detection and reactive planning with large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.268031Z"},"links":{"cited_paper":"/paper/2407.08735","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:76ae48207599ab5f85bc22aef5e3e3a0a2c8ed9bd81990af3eeb5b590f83bf7a","observation_id":"0d042e41-996c-40a5-8a96-c74ece747715","resolution":{"observed_at":"2026-08-07T11:11:40.268031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.271537Z","title":"Dolphins: Multimodal language model for driving","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.271537Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a8936f5e8d54461e5f7e539568ba19db4ff42ca71539bd3e06a48d5a70e2ff2a","observation_id":"216ff483-159e-4104-945f-fd527514230b","resolution":{"observed_at":"2026-08-07T11:11:40.271537Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06225","last_updated":"2023-10-12T17:06:17Z","snapshot_observed_at":"2026-07-06T16:30:12.703492Z","submitted_at":"2023-10-10T00:39:04Z","title":"GPT-4 as an Agronomist Assistant? Answering Agriculture Exams Using Large Language Models","version":2},"cited_work":{"arxiv_id":"2310.06225","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.06225","snapshot_observed_at":"2026-08-07T11:11:41.540821Z","title":"GPT-4 as an Agronomist Assistant? Answering Agriculture Exams Using Large Language Models","venue":"cs.AI","work_id":"a958d7a6-fa76-4c05-ba2f-3a89f5a06b02","year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.274805Z"},"links":{"cited_paper":"/paper/2310.06225","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:e25e3831da37bd65e83a767358c3756ebf54591585f330f525456c076ebd1c7b","observation_id":"923b1969-c838-4021-8026-4f628b6de4be","resolution":{"observed_at":"2026-08-07T11:11:41.550160Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.279146Z","title":"Large language models can help boost food production, but be mindful of their risks.Frontiers in Artificial Intelligence, 7: 1326153, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.279146Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:54296a63ac00d14d94d8e3d04ee67bc5c3c2fe3949bf4e057537cd396131fb17","observation_id":"807cd2f2-78e2-4d0c-94a7-ae0358f52552","resolution":{"observed_at":"2026-08-07T11:11:40.279146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.283521Z","title":"Master plan","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.283521Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:7359fbcc733711283f13949c0a33f1c7fe561691e1c2203c9d256edc1891bc80","observation_id":"fdcea2ce-bd8d-44ae-a516-318f872a4e76","resolution":{"observed_at":"2026-08-07T11:11:40.283521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.288010Z","title":"Unitree go2","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.288010Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:4e79feb917ac7418dacc231f2d722647ced288e0d6750dabe31fac5dbe5c13a2","observation_id":"9e218c89-4030-44c4-af9a-5901d2ad0205","resolution":{"observed_at":"2026-08-07T11:11:40.288010Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.24164","last_updated":"2026-01-08T17:01:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-31T17:22:30Z","title":"$\\pi_0$: A Vision-Language-Action Flow Model for General Robot Control","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.24164","snapshot_observed_at":"2026-08-07T11:11:40.294364Z","title":"π0: A vision-language-action flow model for general robot control, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.294364Z"},"links":{"cited_paper":"/paper/2410.24164","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:2b9ea73bb66fb832cc41a1b0d413f85978b476894eeb2af9995c558bea4a3e0f","observation_id":"b849afe8-229e-477a-9709-267e2a35504b","resolution":{"observed_at":"2026-08-07T11:11:40.294364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07775","last_updated":"2024-07-12T14:37:08Z","snapshot_observed_at":"2026-07-06T18:44:20.262496Z","submitted_at":"2024-07-10T15:49:07Z","title":"Mobility VLA: Multimodal Instruction Navigation with Long-Context VLMs and Topological Graphs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07775","snapshot_observed_at":"2026-08-07T11:11:40.301692Z","title":"Mobility vla: Multimodal instruction navigation with long-context vlms and topological graphs.arXiv preprint arXiv:2407.07775, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.301692Z"},"links":{"cited_paper":"/paper/2407.07775","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:63942539593aad65b28a5363c46f8fa135057922317e35ad29d0b1b4b671cc35","observation_id":"5f28870d-87a9-47b5-aef3-fddf90adbc18","resolution":{"observed_at":"2026-08-07T11:11:40.301692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.304922Z","title":"Autort: Embodied foundation models for large scale orchestration of robotic agents.arXiv preprint arXiv:2401.12963, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.304922Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:54642190d5510e4cc3b9dc3784ccb5d6aa683c9aba31b027805dd5dadc36c204","observation_id":"aeef1849-75b8-4419-8cf8-576ad109c65c","resolution":{"observed_at":"2026-08-07T11:11:40.304922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06942","last_updated":"2024-07-23T06:47:13Z","snapshot_observed_at":"2026-08-06T12:56:48.193649Z","submitted_at":"2023-12-12T02:34:06Z","title":"AI Control: Improving Safety Despite Intentional Subversion","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06942","snapshot_observed_at":"2026-08-07T11:11:40.307636Z","title":"Ai control: Improving safety despite intentional subversion.arXiv preprint arXiv:2312.06942, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.307636Z"},"links":{"cited_paper":"/paper/2312.06942","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:e26b52cd26facd676cb1c093f11c2adc7439d803dc1d6b6ad355ed212818bd84","observation_id":"c75cd383-58c4-4964-8eca-3ea296dfcb39","resolution":{"observed_at":"2026-08-07T11:11:40.307636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14093","last_updated":"2024-12-20T02:22:19Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-18T17:41:24Z","title":"Alignment faking in large language models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14093","snapshot_observed_at":"2026-08-07T11:11:40.310964Z","title":"Alignment faking in large language models.arXiv preprint arXiv:2412.14093, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.310964Z"},"links":{"cited_paper":"/paper/2412.14093","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:6a7808ce29c0074ecebc9b4ffe9cb451ac799d3e353c6c5b16ef329d139a629d","observation_id":"2c9b4ea0-f4f4-4e86-938a-730a22d769cc","resolution":{"observed_at":"2026-08-07T11:11:40.310964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-08-07T11:11:40.314308Z","title":"Adversaries can misuse combinations of safe models.arXiv preprint arXiv:2406.14595, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.314308Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:5281a3d0dff3f64bfb928688f8a2c6d79b5e571e0140e6bb80a7789d8b1abeed","observation_id":"15125cb8-ae57-4f43-8ec1-8a7bf3d9eb45","resolution":{"observed_at":"2026-08-07T11:11:40.314308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.317535Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.317535Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:616c7fc3e9836ed59e70b40c2acf8088cf9d631775571daea23334f0c4722b1f","observation_id":"239da7d6-d643-4676-b3fa-84a0c4a054ff","resolution":{"observed_at":"2026-08-07T11:11:40.317535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-07T11:11:40.321516Z","title":"Prompt injection attack against llm-integrated applications.arXiv preprint arXiv:2306.05499, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.321516Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a2e78f8230e058dcebb037c05e4b9bf6381dac52919fdad521ecef4f05c83333","observation_id":"627b5ad0-cdfa-4cd6-8663-ea090ef0c1c8","resolution":{"observed_at":"2026-08-07T11:11:40.321516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-06T07:36:52.841128Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-07T11:11:40.324656Z","title":"Defeating prompt injections by design.arXiv preprint arXiv:2503.18813, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.324656Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:be2c4136443bb4d48f556de26f53ec7dcfc99485da333a0176154eba39939dac","observation_id":"5620d33d-b301-43fa-8769-f67b108b3bba","resolution":{"observed_at":"2026-08-07T11:11:40.324656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T11:11:40.327715Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.327715Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:5a18e4a630557ff845c5c7389cd2bda2f8710c02e8f9206c843d555cddd2aacc","observation_id":"7032056c-c5ad-463d-80e0-340015449779","resolution":{"observed_at":"2026-08-07T11:11:40.327715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T11:11:40.330830Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.330830Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a6cde429d4be30980fcaf5964a1182af4e982ef84499110761c4591964b43359","observation_id":"15cc6568-1e5f-4cf0-9f70-c3905eea6629","resolution":{"observed_at":"2026-08-07T11:11:40.330830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-07T11:11:40.333890Z","title":"Jailbreakbench: An open robustness benchmark for jailbreaking large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.333890Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:6cf4cfaac3629529cf63bc116209431bf7e36051a2d9d9f95c5a461bd2a2963d","observation_id":"a04a7ecb-8456-4aae-89f4-caa07a960682","resolution":{"observed_at":"2026-08-07T11:11:40.333890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.13353","last_updated":"2024-08-13T07:19:59Z","snapshot_observed_at":"2026-08-07T07:48:13.488825Z","submitted_at":"2022-06-16T17:58:47Z","title":"Is Power-Seeking AI an Existential Risk?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.13353","snapshot_observed_at":"2026-08-07T11:11:40.338107Z","title":"Is power-seeking ai an existential risk?arXiv preprint arXiv:2206.13353,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.338107Z"},"links":{"cited_paper":"/paper/2206.13353","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:23d02d56145dfd70a6178efbb78fd83430eb4453b00bd58b2f32d82e7db1ba4b","observation_id":"9ed4e4c6-625a-4d4c-9959-08a987e02d8b","resolution":{"observed_at":"2026-08-07T11:11:40.338107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.01820","last_updated":"2021-12-01T11:22:52Z","snapshot_observed_at":"2026-08-01T23:32:03.638122Z","submitted_at":"2019-06-05T04:43:25Z","title":"Risks from Learned Optimization in Advanced Machine Learning Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.01820","snapshot_observed_at":"2026-08-07T11:11:40.341689Z","title":"Risks from learned optimization in advanced machine learning systems.arXiv preprint arXiv:1906.01820, 2019","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.341689Z"},"links":{"cited_paper":"/paper/1906.01820","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:10b0d2ba3b3d148eda99df891ec31cc216b4b5dfe9f59371e562de4885a5fbfa","observation_id":"95933152-0f97-4195-a734-497d345c0a15","resolution":{"observed_at":"2026-08-07T11:11:40.341689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10569","last_updated":"2023-07-26T03:57:03Z","snapshot_observed_at":"2026-07-06T15:56:15.361460Z","submitted_at":"2023-07-20T04:14:09Z","title":"Deceptive Alignment Monitoring","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10569","snapshot_observed_at":"2026-08-07T11:11:40.345067Z","title":"Deceptive alignment monitoring.arXiv preprint arXiv:2307.10569, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.345067Z"},"links":{"cited_paper":"/paper/2307.10569","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:51f3894a081fb1a1a68e89c14d06cc34c800752c79b692b38e7d2bcdf5c4b3e4","observation_id":"b1007874-5152-4618-bab8-ab684268a9b2","resolution":{"observed_at":"2026-08-07T11:11:40.345067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.18565","last_updated":"2025-05-05T20:52:36Z","snapshot_observed_at":"2026-08-06T04:13:55.623494Z","submitted_at":"2025-04-21T11:39:22Z","title":"RepliBench: Evaluating the Autonomous Replication Capabilities of Language Model Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.18565","snapshot_observed_at":"2026-08-07T11:11:40.348373Z","title":"Replibench: Evaluating the autonomous replication capabilities of language model agents.arXiv preprint arXiv:2504.18565,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.348373Z"},"links":{"cited_paper":"/paper/2504.18565","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:75dacd4398266c26406a1472f7522af25af2cbd5014f07aec5a8e13eaef9596b","observation_id":"fa19d45b-42b9-4813-a6bc-984737b7cbcb","resolution":{"observed_at":"2026-08-07T11:11:40.348373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.12140","last_updated":"2024-12-09T15:01:37Z","snapshot_observed_at":"2026-08-06T10:04:05.646150Z","submitted_at":"2024-12-09T15:01:37Z","title":"Frontier AI systems have surpassed the self-replicating red line","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.12140","snapshot_observed_at":"2026-08-07T11:11:40.351607Z","title":"Frontier ai systems have surpassed the self-replicating red line.arXiv preprint arXiv:2412.12140, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.351607Z"},"links":{"cited_paper":"/paper/2412.12140","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:88e8220f64197ce6b14448430d75a11449c38b3ceae1e10710755d7fe0f5e57e","observation_id":"826b1a83-6390-40fe-a2cf-1acf2962ef68","resolution":{"observed_at":"2026-08-07T11:11:40.351607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09246","last_updated":"2024-09-05T19:46:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-13T15:46:55Z","title":"OpenVLA: An Open-Source Vision-Language-Action Model","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09246","snapshot_observed_at":"2026-08-07T11:11:40.354837Z","title":"Openvla: An open-source vision-language-action model.arXiv preprint arXiv:2406.09246,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.354837Z"},"links":{"cited_paper":"/paper/2406.09246","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:f3ae8505c483d09187cafcc72a90677de5d79a9c0495a2d82da4ad3acaead9ad","observation_id":"fbeca933-5ef0-4c09-a27d-b0aab4da468c","resolution":{"observed_at":"2026-08-07T11:11:40.354837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13691","last_updated":"2024-11-09T20:00:07Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T15:55:36Z","title":"Jailbreaking LLM-Controlled Robots","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13691","snapshot_observed_at":"2026-08-07T11:11:40.362352Z","title":"Jailbreaking llm-controlled robots.arXiv preprint arXiv:2410.13691, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.362352Z"},"links":{"cited_paper":"/paper/2410.13691","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:1b82519923883cee4cd53ad9b115ba849a92d4c668e69570ce4ef06d87b2a633","observation_id":"ff9f4791-6992-44c6-ac4d-f862331dac1a","resolution":{"observed_at":"2026-08-07T11:11:40.362352Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20242","last_updated":"2026-06-09T05:19:18Z","snapshot_observed_at":"2026-07-06T18:53:31.241776Z","submitted_at":"2024-07-16T13:13:16Z","title":"BadRobot: Jailbreaking Embodied LLM Agents in the Physical World","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20242","snapshot_observed_at":"2026-08-07T11:11:40.366090Z","title":"Badrobot: Manipulating embodied llms in the physical world.arXiv preprint arXiv:2407.20242, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.366090Z"},"links":{"cited_paper":"/paper/2407.20242","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:22f8fb010787f57537218dec4ea12159e055f20515aea07314fdefc29513b279","observation_id":"60a2b6a8-73f4-4b1e-81fe-9fa461df6dbb","resolution":{"observed_at":"2026-08-07T11:11:40.366090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.369464Z","title":"Deep reinforcement learning for robotic manipulation with asynchronous off-policy updates","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.369464Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:45f0e17dcb61e7f31be4aa97561c4272c375b69a644a66de61aaef2d32192b6d","observation_id":"dc736ca6-a9ab-48f1-b599-11ffec3ed84c","resolution":{"observed_at":"2026-08-07T11:11:40.369464Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1504.00702","last_updated":"2016-04-19T01:33:13Z","snapshot_observed_at":"2026-08-07T08:47:12.679573Z","submitted_at":"2015-04-02T22:23:51Z","title":"End-to-End Training of Deep Visuomotor Policies","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1504.00702","snapshot_observed_at":"2026-08-07T11:11:40.372910Z","title":"End-to-end training of deep visuomotor policies, 2016","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.372910Z"},"links":{"cited_paper":"/paper/1504.00702","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:383d0a446cf99a9f12c7a573742d684ee2f040ba6ae864136d27387e50285f70","observation_id":"ff4cf46c-6222-420c-8f09-37e79d8e7e0a","resolution":{"observed_at":"2026-08-07T11:11:40.372910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.12601","last_updated":"2022-11-18T05:57:09Z","snapshot_observed_at":"2026-08-02T11:48:59.131827Z","submitted_at":"2022-03-23T17:55:09Z","title":"R3M: A Universal Visual Representation for Robot Manipulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.12601","snapshot_observed_at":"2026-08-07T11:11:40.376578Z","title":"R3m: A universal visual representation for robot manipulation, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.376578Z"},"links":{"cited_paper":"/paper/2203.12601","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a014deceb74b17cb9a802612f5de774364d5de68dc038984d7640b44d778aea0","observation_id":"a7fe9501-ed00-4812-91cc-c61a19391ff4","resolution":{"observed_at":"2026-08-07T11:11:40.376578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.379677Z","title":"Attention is all you need.Advances in Neural Information Processing Systems, 30, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.379677Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:81608bf02b31bb4a20866d7ac0e45aa960e12557dc915fcabed9c182a61165eb","observation_id":"64958992-f9da-4280-83fc-1fd88992192d","resolution":{"observed_at":"2026-08-07T11:11:40.379677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.17582","last_updated":"2023-07-19T19:30:28Z","snapshot_observed_at":"2026-08-06T07:22:36.341628Z","submitted_at":"2023-02-20T06:39:06Z","title":"ChatGPT for Robotics: Design Principles and Model Abilities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.17582","snapshot_observed_at":"2026-08-07T11:11:40.383134Z","title":"Chatgpt for robotics: Design principles and model abilities, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.383134Z"},"links":{"cited_paper":"/paper/2306.17582","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:ecf7b593199851e67502eb2e590ef27a92f2dcf49ed5f73bf3124d8eabbd7505","observation_id":"ed30fb58-ae09-437d-88f1-54a29a92197e","resolution":{"observed_at":"2026-08-07T11:11:40.383134Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.386287Z","title":"Code as policies: Language model programs for embodied control","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.386287Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:91e1ac253ca69ca9a83922844c152086fbd6d4127bb07484b339be35e2a89369","observation_id":"f9a246e9-9350-46d2-ab56-99c0ae7dac44","resolution":{"observed_at":"2026-08-07T11:11:40.386287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.389639Z","title":"How to prompt your robot: A promptbook for manipulation skills with code as policies","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.389639Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:f554bbd5498894f23dca9e98f442e961d53188050c8574e4e1c45bb599f2d40f","observation_id":"ed74ab90-1e54-4a0b-96a9-175150c9720d","resolution":{"observed_at":"2026-08-07T11:11:40.389639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.392918Z","title":"Chatgpt for robotics: Design principles and model abilities.IEEE Access, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.392918Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:9aeef6b271ec58fc47dd213bfcd17d64636a12eb7c788413f8a2fe20156b29c8","observation_id":"97a6686b-e2bc-4fae-a4a7-c505ef5d0344","resolution":{"observed_at":"2026-08-07T11:11:40.392918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05932","last_updated":"2024-04-10T23:29:18Z","snapshot_observed_at":"2026-07-06T17:27:37.212340Z","submitted_at":"2024-02-08T18:59:03Z","title":"Driving Everywhere with Large Language Model Policy Adaptation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05932","snapshot_observed_at":"2026-08-07T11:11:40.396219Z","title":"Driving everywhere with large language model policy adaptation, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.396219Z"},"links":{"cited_paper":"/paper/2402.05932","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:88ebe5f1de1340bfb2de39dd42719e472b047e810f1eb66ce245f70db633ee15","observation_id":"ae916383-166f-43d2-b1cc-f7be2bc7b023","resolution":{"observed_at":"2026-08-07T11:11:40.396219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12320","last_updated":"2023-11-21T03:32:01Z","snapshot_observed_at":"2026-08-06T10:43:26.992373Z","submitted_at":"2023-11-21T03:32:01Z","title":"A Survey on Multimodal Large Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12320","snapshot_observed_at":"2026-08-07T11:11:40.399503Z","title":"A survey on multimodal large language models for autonomous driving, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.399503Z"},"links":{"cited_paper":"/paper/2311.12320","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:1e4868944c10c14ba668defa06c8800c8dbcfa4752e49aa889a37d3802939c14","observation_id":"fe66ef49-e91d-4a3b-9f6f-139d43a6edce","resolution":{"observed_at":"2026-08-07T11:11:40.399503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2024.33600","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:41.126692Z","title":"Deploying and evaluating llms to program service mobile robots.IEEE Robotics and Automation Letters, 9(3):2853–2860, March 2024","venue":null,"work_id":"495ba5c6-d2e5-45f7-b2ab-8514be6c8b0f","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.403344Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:68c20e96ab872b00b97296eb1d20f1a8fed55e1ce39d0e1c23b2c8ec7bb8d992","observation_id":"5ea615c3-fa3b-4d4e-a69f-a9ace6959a2a","resolution":{"observed_at":"2026-08-07T11:11:41.134751Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.406294Z","title":"SayPlan: Grounding Large Language Models using 3D Scene Graphs for Scalable Task Planning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.406294Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:6be6cc4ae712f6df18fbe46e8fba77eebf40a5392490a13fe121ae3ef025b84e","observation_id":"111d9616-9573-4ba0-8012-40f4128e90dc","resolution":{"observed_at":"2026-08-07T11:11:40.406294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.409342Z","title":"Palm: Scaling language modeling with pathways.Journal of Machine Learning Research, 24(240): 1–113, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.409342Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:1d8e65f549a02260b78cc2d1531eca3bcf1c615990d5994733d41bb02217157c","observation_id":"bbcfb905-0bb3-41db-b88e-b94ea0a40760","resolution":{"observed_at":"2026-08-07T11:11:40.409342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.05442","last_updated":"2023-02-10T18:58:21Z","snapshot_observed_at":"2026-08-04T12:07:24.626442Z","submitted_at":"2023-02-10T18:58:21Z","title":"Scaling Vision Transformers to 22 Billion Parameters","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.05442","snapshot_observed_at":"2026-08-07T11:11:40.412772Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.412772Z"},"links":{"cited_paper":"/paper/2302.05442","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:25e4471dfc60c36318bbdd489c19c39a9e10d91e32eb72153f548ab12b93cbf5","observation_id":"7d02eae8-43dc-4400-8256-542870d7463b","resolution":{"observed_at":"2026-08-07T11:11:40.412772Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.03378","last_updated":"2023-03-06T18:58:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-06T18:58:06Z","title":"PaLM-E: An Embodied Multimodal Language Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.03378","snapshot_observed_at":"2026-08-07T11:11:40.415933Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.415933Z"},"links":{"cited_paper":"/paper/2303.03378","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:044253f7ec3fe47248181c45fce31cf4368842907b23fb7897494b42c1764add","observation_id":"c02606e4-4990-47a7-941b-403485f46814","resolution":{"observed_at":"2026-08-07T11:11:40.415933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06135","last_updated":"2023-09-27T23:17:28Z","snapshot_observed_at":"2026-07-06T15:53:11.310262Z","submitted_at":"2023-07-12T12:37:55Z","title":"SayPlan: Grounding Large Language Models using 3D Scene Graphs for Scalable Robot Task Planning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06135","snapshot_observed_at":"2026-08-07T11:11:40.419092Z","title":"Sayplan: Grounding large language models using 3d scene graphs for scalable robot task planning, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.419092Z"},"links":{"cited_paper":"/paper/2307.06135","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:91380a7e4132f4d4b6e0399537f01db60e99e097b6c27c6b9209b83b8ec13a25","observation_id":"de04ff54-09b2-4422-a018-6f585975f8e8","resolution":{"observed_at":"2026-08-07T11:11:40.419092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.422422Z","title":"Tenenbaum, Antonio Torralba, Florian Shkurti, and Liam Paull","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.422422Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:2af6a171ce05a99f83821524e411824a0ab7eb95cda2f36710caa38a393eea3a","observation_id":"5d9b344b-c9f6-4d16-81e2-297627a67e6d","resolution":{"observed_at":"2026-08-07T11:11:40.422422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.425459Z","title":"An embodied generalist agent in 3d world,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.425459Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:ca0ab272ada247fdcb1240bffa6bd0ad36031d5e52053f17249394e6f0d7c0f7","observation_id":"454e0696-c079-4d0e-909f-a5b833d1a46b","resolution":{"observed_at":"2026-08-07T11:11:40.425459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.01691","last_updated":"2022-08-16T16:06:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-04T17:57:11Z","title":"Do As I Can, Not As I Say: Grounding Language in Robotic Affordances","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.01691","snapshot_observed_at":"2026-08-07T11:11:40.431994Z","title":"Do as i can and not as i say: Grounding language in robotic affordances","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.431994Z"},"links":{"cited_paper":"/paper/2204.01691","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:26e167496b2b3526e6e832aca3ffd33a2260cc0c57d2c9ddb6241134a033651d","observation_id":"e366fbbc-a98d-45d6-a9fd-282cfbe72334","resolution":{"observed_at":"2026-08-07T11:11:40.431994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:43.050983Z","title":"Octo: An open-source generalist robot policy","venue":null,"work_id":"060854b0-c5a4-4205-bd5c-6360b9490068","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.435203Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:7c31e3c933d992776f1315dfec6f794a44ef281f331cb08ab2b402ecc6cb5848","observation_id":"69f8b978-f345-4e2d-8ad3-13de2d76af9b","resolution":{"observed_at":"2026-08-07T11:11:43.107063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15818","last_updated":"2023-07-28T21:18:02Z","snapshot_observed_at":"2026-08-02T16:17:50.621617Z","submitted_at":"2023-07-28T21:18:02Z","title":"RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15818","snapshot_observed_at":"2026-08-07T11:11:40.438695Z","title":"Rt-2: Vision-language-action models transfer web knowledge to robotic control, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.438695Z"},"links":{"cited_paper":"/paper/2307.15818","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:496b7a375cb7d85e78079a925b93bd253a89fd781beaaf530dff41d13347bac7","observation_id":"8f7cc1a5-e099-48d0-a700-894ab31e8269","resolution":{"observed_at":"2026-08-07T11:11:40.438695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08864","last_updated":"2025-05-14T15:22:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-13T05:20:40Z","title":"Open X-Embodiment: Robotic Learning Datasets and RT-X Models","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08864","snapshot_observed_at":"2026-08-07T11:11:40.441575Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.441575Z"},"links":{"cited_paper":"/paper/2310.08864","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:dd4d998ab8a5a32d2feae4beffc77ce8df6f1a6bd6ce04dfbb0b554ee5d6b4ae","observation_id":"e8fbd981-45eb-48d6-9617-ce72bf99ee65","resolution":{"observed_at":"2026-08-07T11:11:40.441575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1701.06538","last_updated":"2017-01-23T18:10:00Z","snapshot_observed_at":"2026-07-06T05:27:13.416519Z","submitted_at":"2017-01-23T18:10:00Z","title":"Outrageously Large Neural Networks: The Sparsely-Gated Mixture-of-Experts Layer","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1701.06538","snapshot_observed_at":"2026-08-07T11:11:40.445540Z","title":"Outrageously large neural networks: The sparsely-gated mixture-of-experts layer.arXiv preprint arXiv:1701.06538, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.445540Z"},"links":{"cited_paper":"/paper/1701.06538","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:22cb99b414d29cd3d2634d05a41937dab82110c43a88af99746fd6e61a7757db","observation_id":"85fc64ee-2038-44b9-b857-3bf9cc06b2e3","resolution":{"observed_at":"2026-08-07T11:11:40.445540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.19650","last_updated":"2024-11-29T12:06:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-11-29T12:06:03Z","title":"CogACT: A Foundational Vision-Language-Action Model for Synergizing Cognition and Action in Robotic Manipulation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.19650","snapshot_observed_at":"2026-08-07T11:11:40.448850Z","title":"Cogact: A foundational vision-language- action model for synergizing cognition and action in robotic manipulation, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.448850Z"},"links":{"cited_paper":"/paper/2411.19650","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:ab4074dfb4c0004c28ce69e8edc1a8f09c6fb4889fad02a9b92166d96993e8b8","observation_id":"8aace697-34ed-43c3-914a-50c88905b990","resolution":{"observed_at":"2026-08-07T11:11:40.448850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.00861","last_updated":"2021-12-09T21:40:22Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-01T22:24:34Z","title":"A General Language Assistant as a Laboratory for Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.00861","snapshot_observed_at":"2026-08-07T11:11:40.452007Z","title":"A general language assistant as a laboratory for alignment.arXiv preprint arXiv:2112.00861, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.452007Z"},"links":{"cited_paper":"/paper/2112.00861","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:62f11aec267208b7b4b10c1984b85e329b3b858327de713b7898571a4ce0bb57","observation_id":"1dd9723d-b75f-4f4b-8e87-6aa97ceca224","resolution":{"observed_at":"2026-08-07T11:11:40.452007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:42.900514Z","title":"Regulating chatgpt and other large generative ai models","venue":null,"work_id":"66fcbf02-eefc-41ae-8b9a-acd63b363303","year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.455122Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:7b16c6fa516c526df72766406098d70c213bcb622bd64fa6c483995d155c2b9f","observation_id":"3b1a64ec-e3a2-4458-b5c2-5f6b6dabd9e5","resolution":{"observed_at":"2026-08-07T11:11:42.948942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:42.743450Z","title":"Training language models to follow instructions with human feedback.Advances in neural information processing systems, 35:27730–27744, 2022","venue":null,"work_id":"410f5966-858e-4aab-a8d0-c1cbfe9f9bb3","year":2022},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.458043Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:12c5e71c1813df3ffc17d7da3b6980054a6b803e7d80a5f8dfea5672ef7e949a","observation_id":"1f2ed3ec-f3c5-4faa-9f7c-bb8f1d2a5a3d","resolution":{"observed_at":"2026-08-07T11:11:42.782514Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:42.593688Z","title":"Jailbroken: How does llm safety training fail?Advances in Neural Information Processing Systems, 36, 2024","venue":null,"work_id":"2bb716a9-0b84-404b-8aaa-b9b65a02c41f","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.461177Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:38d4cfd5de3580a2f727c75a94310dbcb9a2c32513aa6afe6dd8198eb26b3228","observation_id":"a4bffa5c-d692-42cd-992c-46a087197421","resolution":{"observed_at":"2026-08-07T11:11:42.655018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:42.484494Z","title":"Are aligned neural networks adversarially aligned?Advances in Neural Information Processing Systems, 36, 2024","venue":null,"work_id":"cb38e569-7981-4111-9edf-dc93cfa59bf2","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.464457Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:0e1c9f8e0ffcdc8da900914e44aeb57126d26e28ea1ec92a7c5e59c318cdeda9","observation_id":"fdc1b322-6605-44f4-92bc-3a0dbb4173f5","resolution":{"observed_at":"2026-08-07T11:11:42.548810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-07T11:11:40.467496Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.467496Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:0ff00ff5e6acaef9b4f7c73d50816d1f3df61d9688ea24acb2145802c17561f4","observation_id":"878ebc4a-d52b-422e-8869-dff158b29204","resolution":{"observed_at":"2026-08-07T11:11:40.467496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04984","last_updated":"2025-01-14T20:16:01Z","snapshot_observed_at":"2026-07-29T23:20:20.918596Z","submitted_at":"2024-12-06T12:09:50Z","title":"Frontier Models are Capable of In-context Scheming","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04984","snapshot_observed_at":"2026-08-07T11:11:40.470984Z","title":"Frontier models are capable of in-context scheming.arXiv preprint arXiv:2412.04984, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.470984Z"},"links":{"cited_paper":"/paper/2412.04984","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:07439f7d421b61b7d7d6e6bd1c6d5836bfc677ed9f50254c70e9bddaa1ef36f1","observation_id":"7a5db577-51ce-41a8-a94c-fd43ca12a759","resolution":{"observed_at":"2026-08-07T11:11:40.470984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-08-07T11:11:40.474093Z","title":"Stress-testing capability elicitation with password-locked models.arXiv preprint arXiv:2405.19550, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.474093Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:07804525a473e32135880ff3479302d655eb83b9c1288462d3b1d7820c90e8b9","observation_id":"81792aed-f23f-4c4b-b15f-3b7ae48bef03","resolution":{"observed_at":"2026-08-07T11:11:40.474093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04893","last_updated":"2024-03-07T20:55:08Z","snapshot_observed_at":"2026-08-05T04:16:50.799588Z","submitted_at":"2024-03-07T20:55:08Z","title":"A Safe Harbor for AI Evaluation and Red Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04893","snapshot_observed_at":"2026-08-07T11:11:40.477043Z","title":"A safe harbor for ai evaluation and red teaming.arXiv preprint arXiv:2403.04893, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.477043Z"},"links":{"cited_paper":"/paper/2403.04893","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:6ea466704654269eab3268fd296c71a01708c186f18f9e28208250ab0f91378c","observation_id":"e41ed12b-0b24-4dd6-9bb1-47952bab1fa8","resolution":{"observed_at":"2026-08-07T11:11:40.477043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.14981","last_updated":"2025-04-16T09:38:09Z","snapshot_observed_at":"2026-07-06T18:49:33.987133Z","submitted_at":"2024-07-20T21:13:56Z","title":"Open Problems in Technical AI Governance","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.14981","snapshot_observed_at":"2026-08-07T11:11:40.480206Z","title":"Open problems in technical ai governance.arXiv preprint arXiv:2407.14981, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.480206Z"},"links":{"cited_paper":"/paper/2407.14981","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a663245b7210b39047c29fe1d2bee984e8ff2ace08a998c008138d23fee85381","observation_id":"a50f1dbe-d4a2-4ed6-bbeb-2ce01e49fb71","resolution":{"observed_at":"2026-08-07T11:11:40.480206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-07T11:11:40.483280Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models.arXiv preprint arXiv:2310.04451, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.483280Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:0d847d5a3057c5bb8a4dc9ea6961b583e4ec834dd921a770fde214b8e6baf09a","observation_id":"3e69ab2f-f2d8-4b74-a925-d5125038e49d","resolution":{"observed_at":"2026-08-07T11:11:40.483280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:42.364488Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":null,"work_id":"37445cda-fb39-44a7-a785-0fd42a16745b","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.486909Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:ec2613628f224b2a5da13b78039ec678f8612f0b2a2740b4c08717832fb545ca","observation_id":"b370fc59-43ab-4246-9e74-508814b52dfa","resolution":{"observed_at":"2026-08-07T11:11:42.405908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15221","last_updated":"2024-09-04T00:58:59Z","snapshot_observed_at":"2026-07-06T19:06:41.697671Z","submitted_at":"2024-08-27T17:33:30Z","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.15221","snapshot_observed_at":"2026-08-07T11:11:40.490378Z","title":"Llm defenses are not robust to multi-turn human jailbreaks yet.arXiv preprint arXiv:2408.15221, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.490378Z"},"links":{"cited_paper":"/paper/2408.15221","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:894fcbe1abe26ba67e438e1569acbb5b48475ae2493242e5f6a97dc37de511c0","observation_id":"ea5b7d3f-4fcd-41a9-bb98-f17d2047398d","resolution":{"observed_at":"2026-08-07T11:11:40.490378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-03T07:26:39.431128Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-07T11:11:40.493528Z","title":"Great, now write an article about that: The crescendo multi-turn llm jailbreak attack.arXiv preprint arXiv:2404.01833, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.493528Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:38e46c43b4987e53248100750ff12c8eb7a6021a0b71be4082cc1f93eff59a6e","observation_id":"aed2d884-f9d4-4301-9d15-bace8a2c0e14","resolution":{"observed_at":"2026-08-07T11:11:40.493528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:42.227300Z","title":"Improving alignment and robustness with circuit breakers","venue":null,"work_id":"2c027fea-fa40-4db2-9b34-93bd1dc0b29e","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.497097Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:5aff1b1ba7aa2f2da130298c1579f922bd6b09e5b7429e5539d79a97fb80ffbf","observation_id":"7ecf9ed4-023e-45d3-aeec-6358a25a357e","resolution":{"observed_at":"2026-08-07T11:11:42.312697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-07T11:11:40.500019Z","title":"Smoothllm: Defending large language models against jailbreaking attacks.arXiv preprint arXiv:2310.03684, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.500019Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:d71af57ddb9b0e59f2a63b854f174db55b52ee302fda2aaf7314ee7c96e7b2c5","observation_id":"f9bc86cb-b49f-4797-a4a8-b8e8efc55350","resolution":{"observed_at":"2026-08-07T11:11:40.500019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-07T11:11:40.503166Z","title":"Openai o1 system card.arXiv preprint arXiv:2412.16720, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.503166Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:5500a50bd0cdfdb60cd95aca1c2d15eca0b0d6eef504ac807310d03070b0f848","observation_id":"c8c0b561-2586-42fe-ba9a-8ef06af55522","resolution":{"observed_at":"2026-08-07T11:11:40.503166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T11:11:40.506433Z","title":"The llama 3 herd of models.arXiv preprint arXiv:2407.21783, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.506433Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:192910464e1d5983ab3224794dd34d29d0aa6ce041310f1d46626ba16386c9e0","observation_id":"dfc03a1d-a0fc-48df-9b31-4379c8b5300e","resolution":{"observed_at":"2026-08-07T11:11:40.506433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-07-06T18:33:07.118735Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-07T11:11:40.509846Z","title":"Adversarial attacks on multimodal agents.arXiv preprint arXiv:2406.12814, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.509846Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:eacd3e238063b331fbc673e0123fcdd789aeebacd4809c7cfa710893a4db4cf4","observation_id":"98b16650-4cd2-4544-817b-1fc5a857bd5b","resolution":{"observed_at":"2026-08-07T11:11:40.509846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T11:11:40.513409Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents.arXiv preprint arXiv:2406.03007, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.513409Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:fec8d90a5261ec9876df4a149ca322b23d0197e47a6935d51f2d28c462b419d8","observation_id":"f3f856b1-b0bf-43af-a1cc-44626b5a8be5","resolution":{"observed_at":"2026-08-07T11:11:40.513409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18382","last_updated":"2024-07-02T08:56:48Z","snapshot_observed_at":"2026-07-06T18:37:21.973331Z","submitted_at":"2024-06-26T14:24:51Z","title":"Adversarial Search Engine Optimization for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18382","snapshot_observed_at":"2026-08-07T11:11:40.516945Z","title":"Adversarial search engine optimiza- tion for large language models.arXiv preprint arXiv:2406.18382, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.516945Z"},"links":{"cited_paper":"/paper/2406.18382","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a8e4d85b93fa9967b9ec3a00512406a14de5ea6929ed5210294d218e55960c65","observation_id":"5365cf22-08b9-4730-9778-c3bf52a2e170","resolution":{"observed_at":"2026-08-07T11:11:40.516945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18676","last_updated":"2025-02-10T16:32:27Z","snapshot_observed_at":"2026-07-06T19:58:13.816588Z","submitted_at":"2024-11-27T18:57:26Z","title":"Embodied Red Teaming for Auditing Robotic Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18676","snapshot_observed_at":"2026-08-07T11:11:40.520328Z","title":"Embodied red teaming for auditing robotic foundation models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.520328Z"},"links":{"cited_paper":"/paper/2411.18676","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:ca23609e6543e1dfe8a8a85f91a96f0a462380e5ee26b68e3b8ba720f8fc24e4","observation_id":"a04af57b-0804-441e-9000-44ea52aa744a","resolution":{"observed_at":"2026-08-07T11:11:40.520328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-07T11:11:40.523904Z","title":"Intriguing properties of neural networks.arXiv preprint arXiv:1312.6199, 2013","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.523904Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:2f6a57eea0ce06d342f1c1254f6c53505a197ee1f536e331264a4a09d197a8bd","observation_id":"1fba4143-4ab4-4792-8c3a-9c11a96de4a1","resolution":{"observed_at":"2026-08-07T11:11:40.523904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-07-06T05:47:27.191725Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T11:11:40.527358Z","title":"Towards deep learning models resistant to adversarial attacks.arXiv preprint arXiv:1706.06083, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.527358Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:b0c7dee177f186e881eaaba9adb101c6b340344dbc079ad303644d836a4ce92b","observation_id":"2d667f05-5244-47b9-886d-539fdc725335","resolution":{"observed_at":"2026-08-07T11:11:40.527358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03348","last_updated":"2023-11-24T12:50:31Z","snapshot_observed_at":"2026-08-05T10:39:14.391116Z","submitted_at":"2023-11-06T18:55:18Z","title":"Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03348","snapshot_observed_at":"2026-08-07T11:11:40.530536Z","title":"Scalable and transferable black-box jailbreaks for language models via persona modulation.arXiv preprint arXiv:2311.03348, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.530536Z"},"links":{"cited_paper":"/paper/2311.03348","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:762aa0b7ec9fae716682dc994cd91a47215af3f53a34d514703272409fcf47d4","observation_id":"3c0bbdf6-817c-4bd0-a666-601b851f6a74","resolution":{"observed_at":"2026-08-07T11:11:40.530536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.17237","last_updated":"2023-11-03T19:15:51Z","snapshot_observed_at":"2026-07-06T15:48:32.547396Z","submitted_at":"2023-06-29T18:06:15Z","title":"HYDRA: Hybrid Robot Actions for Imitation Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.17237","snapshot_observed_at":"2026-08-07T11:11:40.534332Z","title":"Hydra: Hybrid robot actions for imitation learning, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.534332Z"},"links":{"cited_paper":"/paper/2306.17237","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:f4c0de589cd6aaca8b74470e30ba5a798898785e9fa1e13826e025182d74efe2","observation_id":"a40bcbbd-e932-475c-a08d-3e8861d51d2d","resolution":{"observed_at":"2026-08-07T11:11:40.534332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05941","last_updated":"2024-05-09T17:30:16Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-05-09T17:30:16Z","title":"Evaluating Real-World Robot Manipulation Policies in Simulation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05941","snapshot_observed_at":"2026-08-07T11:11:40.538116Z","title":"Evaluating real-world robot manipulation policies in simulation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.538116Z"},"links":{"cited_paper":"/paper/2405.05941","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:bc979393142cee527a45b239617953c6805dbac382ce0149d716039161481c10","observation_id":"bc765adb-df3b-4956-a7c0-7499f5f3f0f0","resolution":{"observed_at":"2026-08-07T11:11:40.538116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10345","last_updated":"2025-06-05T21:26:08Z","snapshot_observed_at":"2026-08-02T17:44:41.340688Z","submitted_at":"2024-12-13T18:40:51Z","title":"TraceVLA: Visual Trace Prompting Enhances Spatial-Temporal Awareness for Generalist Robotic Policies","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10345","snapshot_observed_at":"2026-08-07T11:11:40.541709Z","title":"Tracevla: Visual trace prompting enhances spatial-temporal awareness for generalist robotic policies, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.541709Z"},"links":{"cited_paper":"/paper/2412.10345","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:731c06fa0572305feb7e7ae8c352b88e50ab0c6c4b0eeeb5801be3b395eb548d","observation_id":"149d46b6-f86a-47fa-82d7-2d7afc0d3ee0","resolution":{"observed_at":"2026-08-07T11:11:40.541709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:42.030787Z","title":"GitHub - allenzren/open-pi-zero: Re-implementation of pi0 vision-language-action (VLA) model from Physical Intelligence — github.com","venue":null,"work_id":"1f86da15-75b0-4bce-860c-c94961fce619","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.544923Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:1eac2586398e8c4bd09709ede265e98c2a46e7b45b9cef91b81c33ed17e7154c","observation_id":"fd157157-cf82-437d-b9f5-72fad7cbaeb3","resolution":{"observed_at":"2026-08-07T11:11:42.134928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:41.903577Z","title":"Failures to find transferable image jailbreaks between vision-language models","venue":null,"work_id":"2625b250-30e7-41eb-8c6e-920c65310267","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.547821Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:ac7bb2b425240df430b11131e6246a1089005b5e3b23035d14749783fd827ea3","observation_id":"0634483d-8172-449a-bfcc-5c817b073cd5","resolution":{"observed_at":"2026-08-07T11:11:41.952328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-06T13:25:52.403871Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-07T11:11:40.551096Z","title":"Jailbreak and guard aligned language models with only few in-context demonstrations.arXiv preprint arXiv:2310.06387,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.551096Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a92d6f05f612ffbb0898cfff508c7dbd8ba98d70a82f2586b0168ca559d9f464","observation_id":"60f67dd0-5532-4871-9215-078dcc65b23a","resolution":{"observed_at":"2026-08-07T11:11:40.551096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T11:11:40.554404Z","title":"Baseline de- fenses for adversarial attacks against aligned language models.arXiv preprint arXiv:2309.00614,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.554404Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:1e85683110efa35bad6872c043cab45bd80e4ea863bb6c0df07952ca46ae8cab","observation_id":"d1f6c3b4-8554-4a04-9e30-2071d3ed7753","resolution":{"observed_at":"2026-08-07T11:11:40.554404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-07T11:11:40.557735Z","title":"Training a helpful and harmless assistant with reinforcement learning from human feedback, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.557735Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:8b6899670ea53ffc8379d711e728b5c3a3a7ef4c40fba2cdb558f50c8c167cb9","observation_id":"e2885798-5bb7-4b89-90b1-3f90f216a57e","resolution":{"observed_at":"2026-08-07T11:11:40.557735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.03741","last_updated":"2023-02-17T17:00:34Z","snapshot_observed_at":"2026-08-03T14:31:51.401500Z","submitted_at":"2017-06-12T17:23:59Z","title":"Deep reinforcement learning from human preferences","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.03741","snapshot_observed_at":"2026-08-07T11:11:40.561507Z","title":"Brown, Miljan Martic, Shane Legg, and Dario Amodei","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.561507Z"},"links":{"cited_paper":"/paper/1706.03741","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:005f96e68614d08d7fb47666b927ff2037295d23287f40b54a661983600eb450","observation_id":"90d52dea-0a17-49c8-9875-b97aa91dd09c","resolution":{"observed_at":"2026-08-07T11:11:40.561507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.07871","last_updated":"2018-11-19T18:48:04Z","snapshot_observed_at":"2026-07-06T07:15:51.575438Z","submitted_at":"2018-11-19T18:48:04Z","title":"Scalable agent alignment via reward modeling: a research direction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.07871","snapshot_observed_at":"2026-08-07T11:11:40.565294Z","title":"Scalable agent alignment via reward modeling: a research direction, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.565294Z"},"links":{"cited_paper":"/paper/1811.07871","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:b84c5171641c86b4c49e06f044e209df21e56fe931516fa8da48b429a994ce99","observation_id":"45a0b585-35d0-4e79-b213-a2c76e17bc74","resolution":{"observed_at":"2026-08-07T11:11:40.565294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-07T11:11:40.568661Z","title":"Harmbench: A standardized evaluation framework for automated red teaming and robust refusal, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.568661Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:a0be953425502cea1b35b4ac5498d3896799f859653ce99e4002790af36f3590","observation_id":"b5a7b127-a24d-4762-b079-14c90623e9ff","resolution":{"observed_at":"2026-08-07T11:11:40.568661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.19309","last_updated":"2025-02-04T08:49:11Z","snapshot_observed_at":"2026-07-31T23:24:14.896271Z","submitted_at":"2024-11-28T18:30:10Z","title":"GRAPE: Generalizing Robot Policy via Preference Alignment","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.19309","snapshot_observed_at":"2026-08-07T11:11:40.572064Z","title":"Grape: Generalizing robot policy via preference alignment.arXiv preprint arXiv:2411.19309, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.572064Z"},"links":{"cited_paper":"/paper/2411.19309","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:b6f448b4a692e8d30a6f4eb74a6524af6b5787ecb09190ee51df4c3562b0571b","observation_id":"4bface85-924a-42ee-a04b-36476e85f515","resolution":{"observed_at":"2026-08-07T11:11:40.572064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:41.720648Z","title":"Abbas, Shakra Mehak, Georgios C","venue":null,"work_id":"21168e75-0ea1-4023-82e5-61bdb9785921","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.575417Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:b179a5eb27aff20b7c924996c41c2e9245d572c838b35d71c00cc060ae73a949","observation_id":"44e5a0f2-5daa-40d8-9f27-de07fa26d6d0","resolution":{"observed_at":"2026-08-07T11:11:41.806984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.03480","last_updated":"2026-04-19T06:23:17Z","snapshot_observed_at":"2026-07-30T14:07:10.544745Z","submitted_at":"2025-03-05T13:16:55Z","title":"SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.03480","snapshot_observed_at":"2026-08-07T11:11:40.578496Z","title":"Safevla: Towards safety alignment of vision-language-action model via safe reinforcement learning.arXiv preprint arXiv:2503.03480, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.578496Z"},"links":{"cited_paper":"/paper/2503.03480","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:71410a7ca1a4b31d450d623268dd2f371ee962d379c1947cdc8d1743844d5366","observation_id":"c8df0c7d-307e-485e-ae5e-048422841b12","resolution":{"observed_at":"2026-08-07T11:11:40.578496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.582432Z","title":"Safety guardrails for llm-enabled robots.arXiv preprint arXiv:2503.07885, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.582432Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:e11fdce84de01c99bd410f5af4b0f53dedda5d8974fcc965bf0dc0102124b459","observation_id":"67b24b70-5179-4f26-b95c-7f1ef6f9c7f9","resolution":{"observed_at":"2026-08-07T11:11:40.582432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:41.583195Z","title":"pick coke can","venue":null,"work_id":"ec38fdd2-c15a-4bfc-8d81-3eb4a6d95e97","year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.585654Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:2adb0c94b52c519c1a2f60bdd17aa0c83dd5d37e4b18c1725e2088adeace340f","observation_id":"bd3044df-29b1-4895-ab51-4291ae069659","resolution":{"observed_at":"2026-08-07T11:11:41.661182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:11:40.291167Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.291167Z"},"links":{"citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:13638e0ca41a4816ad193cd33115190ab636f413c228b621375fe5436daf8466","observation_id":"8a317e3e-f960-47ea-89e2-8c58204d714b","resolution":{"observed_at":"2026-08-07T11:11:40.291167Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12871","last_updated":"2024-05-09T17:35:44Z","snapshot_observed_at":"2026-08-05T10:01:43.401012Z","submitted_at":"2023-11-18T01:21:38Z","title":"An Embodied Generalist Agent in 3D World","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12871","snapshot_observed_at":"2026-08-07T11:11:40.428658Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.428658Z"},"links":{"cited_paper":"/paper/2311.12871","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:13de2aae5d13a475be048e460157f2eab1a12d7f4512844b0bb7a7bff3789eb9","observation_id":"0ac6cac2-4c25-4831-94ea-903e4988266f","resolution":{"observed_at":"2026-08-07T11:11:40.428658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","latest_version":1,"primary_category":"cs.RO","snapshot_observed_at":"2026-08-07T11:03:02.050335Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models"},"reference_resolution":{"displayed":95,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":1,"unresolved":80,"verified_exact":1,"verified_fuzzy":11},"total_outbound_references":95},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 95 of 95 outbound references and 17 inbound Pith citation observations for arXiv:2506.03350."}