{"as_of":"2026-08-07T10:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0fb6906e9b40a8c5b09a6ea768392796ff18ffd189a8e4af812ed2e0e3934c32","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:41:18.574211Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.13205/citation-record","integrity":"/paper/2506.13205/integrity","json":"/paper/2506.13205/citation-record.json","paper":"/paper/2506.13205"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:16.122277Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.122277Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:f02b754f99083396f9b51daaed98f759731987ae49835bb14fb90c8c1644d6df","observation_id":"71527a2e-caed-4e15-a9e0-98e6f1ebf195","resolution":{"observed_at":"2026-08-07T00:41:16.122277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:16.203281Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.203281Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:0c6d047309c4249e762c9201a3a24ea68d31491d664d6bfa6ca6dbb8b61ae2a7","observation_id":"0c2ba7ac-3ca8-48aa-80e9-22d2300d174a","resolution":{"observed_at":"2026-08-07T00:41:16.203281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.14198","last_updated":"2022-11-15T23:07:37Z","snapshot_observed_at":"2026-07-06T13:05:12.350238Z","submitted_at":"2022-04-29T16:29:01Z","title":"Flamingo: a Visual Language Model for Few-Shot Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.14198","snapshot_observed_at":"2026-08-07T00:41:16.316084Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.316084Z"},"links":{"cited_paper":"/paper/2204.14198","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:b5af917ebcb7bc559499b09b60f8d7efc96d1297a7aebbb9f48bc33188b2157c","observation_id":"047da159-882b-4a99-82a3-4ae4a11b850c","resolution":{"observed_at":"2026-08-07T00:41:16.316084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.239325Z","title":null,"venue":null,"work_id":"7f2fecbd-a6c2-4a3b-9cf6-40ee22a771b6","year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.426143Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:8b456d1640804ab1e65a4fecc0673055d5862b7c7d6284601afcede772a32da4","observation_id":"f559a777-556a-4a7e-a75f-46817e059f45","resolution":{"observed_at":"2026-08-07T00:41:19.244305Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.227615Z","title":null,"venue":null,"work_id":"b93d7974-cf6d-4383-9240-1a816f7d8534","year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.540308Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:26b53ba14a0bd5e27b8711915ecec4e165450108d499dfa402bfc95d3ea4f533","observation_id":"30b1a136-5a95-4b84-b526-68421a40936a","resolution":{"observed_at":"2026-08-07T00:41:19.231700Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.214525Z","title":null,"venue":null,"work_id":"c0c703a3-5461-4a9b-8ff6-4514e8a936dd","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.656154Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:4b47dcce63978e2c298b7d70968e07c36860fdf5f266cc657282fb6b35d95348","observation_id":"f48c211c-d971-4c6d-8b28-7132066f2350","resolution":{"observed_at":"2026-08-07T00:41:19.218959Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.10760","last_updated":"2020-08-02T08:38:25Z","snapshot_observed_at":"2026-07-06T09:40:34.148418Z","submitted_at":"2020-07-21T12:49:12Z","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.10760","snapshot_observed_at":"2026-08-07T00:41:16.805250Z","title":"G.; Zhang, Z.; Ma, S.; Zhang, J.; Fu, A.; Nepal, S.; and Kim, H","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.805250Z"},"links":{"cited_paper":"/paper/2007.10760","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:d2ec5d725c84773d694f38d7e164c722fac7cd58c1ff0d415fe7bf990976b944","observation_id":"fd977ed3-8e55-4362-b665-ed04b9859aa6","resolution":{"observed_at":"2026-08-07T00:41:16.805250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.201665Z","title":"H.; Huang, W","venue":null,"work_id":"76ac3401-00d9-446e-a7bc-f725b95dea45","year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.899091Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:fcc84d72896c57d06f71babc87ec51081b082519766a66c444dbfc3d7db343d0","observation_id":"fe7a3e3a-ec04-4b8f-ab34-906f12f4be50","resolution":{"observed_at":"2026-08-07T00:41:19.205878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.187497Z","title":null,"venue":null,"work_id":"e01de745-a585-4404-8e95-b52c74154bbb","year":2019},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.906934Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:4aefd7d5e7e161edfb8614d98a2e5f529c7c2c282c43447f7e9dc27f0680b153","observation_id":"8cd1fc27-94eb-4bac-a002-8f8e9320cc30","resolution":{"observed_at":"2026-08-07T00:41:19.192259Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.172147Z","title":null,"venue":null,"work_id":"03671e06-42fe-4a05-a7d4-2a2e070888fe","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.035686Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:6e7165862a84baf6792a17119113fde29f977c8fd1df00eda6a3cbe2c197440d","observation_id":"05567f60-673e-4560-94a0-2a28d88406b8","resolution":{"observed_at":"2026-08-07T00:41:19.176938Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.157635Z","title":"R.; Geiping, J.; Fowl, L.; Taylor, G.; and Goldstein, T","venue":null,"work_id":"f85f473e-46d5-4103-98f8-8cb692efc521","year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.176670Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:e1824f6183a0348c87703e6f6816ce1eb59eec68364955d378e21c2f06d91d62","observation_id":"b1ffaa13-825f-4d38-956a-0220a1cd981f","resolution":{"observed_at":"2026-08-07T00:41:19.162735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.143970Z","title":null,"venue":null,"work_id":"d1c1fb53-661c-4e01-ae31-753229b5594e","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.229084Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:c87ae4e304f5a576cd25b1ea26633a4aa41c8367f70a175005cfff22730c9d7d","observation_id":"12fb763a-e467-4558-a99f-4d1798bee74e","resolution":{"observed_at":"2026-08-07T00:41:19.148956Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:17.282335Z","title":"S.; Knox, W","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.282335Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:0ba880f9c1d6612c912010026050f99d408f3b96366cea1afdb66059d13d4aa5","observation_id":"852e8dac-7d3e-49cc-b8aa-4d9becc15057","resolution":{"observed_at":"2026-08-07T00:41:17.282335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16660","last_updated":"2025-07-21T02:55:09Z","snapshot_observed_at":"2026-08-04T12:26:21.610975Z","submitted_at":"2024-04-25T14:56:32Z","title":"Benchmarking Mobile Device Control Agents across Diverse Configurations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16660","snapshot_observed_at":"2026-08-07T00:41:17.321712Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.321712Z"},"links":{"cited_paper":"/paper/2404.16660","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:afbed69c041c28bd9fecca35b73cc6cb1c0f9cd4af4d6a2204550bda542defdb","observation_id":"e7c7becf-7277-4fe9-91e6-bf3a04c8bdb4","resolution":{"observed_at":"2026-08-07T00:41:17.321712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.12597","last_updated":"2023-06-15T07:57:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-01-30T00:56:51Z","title":"BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.12597","snapshot_observed_at":"2026-08-07T00:41:17.364681Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.364681Z"},"links":{"cited_paper":"/paper/2301.12597","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:50240f47295ca92f91f887e367f89beab98f64c6513c2cf1d0ac54f3852bbaa9","observation_id":"2590e9a0-22d1-41d3-9e73-0835c4902d5e","resolution":{"observed_at":"2026-08-07T00:41:17.364681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.129714Z","title":null,"venue":null,"work_id":"d35f36f6-ebaa-4c97-91f8-9f3585903654","year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.469579Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:6da8c2cbbd3a681542c0092cfc3a916195ee0d4e99a743558c0aefdb4ef583ed","observation_id":"0b43a751-bbf9-43e8-9a6f-6f57eb772b7c","resolution":{"observed_at":"2026-08-07T00:41:19.134878Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.116125Z","title":null,"venue":null,"work_id":"e5d74363-a759-4593-aedb-e71470d3dc2b","year":2017},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.591178Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:aaea292cb2a8282ffb1e6c222becd87238e20fa7693c2883753e49f075dbfee9","observation_id":"9d17126a-29cf-49fa-b05d-e2ae646f4325","resolution":{"observed_at":"2026-08-07T00:41:19.121076Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:17.650179Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.650179Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:6b47a96b10bf8358158e87cc06016feda1f1891e42a8187edfadaf2d98836762","observation_id":"fe9bb3b5-cb11-49d0-8840-557356e91df3","resolution":{"observed_at":"2026-08-07T00:41:17.650179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18844","last_updated":"2024-12-16T06:59:33Z","snapshot_observed_at":"2026-07-06T18:37:43.309281Z","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18844","snapshot_observed_at":"2026-08-07T00:41:17.724760Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.724760Z"},"links":{"cited_paper":"/paper/2406.18844","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:03b5d105736922644817ed66dd28079d72d901b0683bff6e5c4a6dc6e3289ccd","observation_id":"6f46186f-673f-48bb-a3cf-67794586aeb1","resolution":{"observed_at":"2026-08-07T00:41:17.724760Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02234","last_updated":"2023-10-13T23:43:15Z","snapshot_observed_at":"2026-08-07T04:14:00.052600Z","submitted_at":"2023-10-03T17:43:24Z","title":"MIS-AVoiDD: Modality Invariant and Specific Representation for Audio-Visual Deepfake Detection","version":2},"cited_work":{"arxiv_id":"2310.02234","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.02234","snapshot_observed_at":"2026-08-07T00:41:18.727647Z","title":"MIS-AVoiDD: Modality Invariant and Specific Representation for Audio-Visual Deepfake Detection","venue":"cs.CV","work_id":"612c9498-cf26-49c2-8b67-6f1084822202","year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.844641Z"},"links":{"cited_paper":"/paper/2310.02234","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:489b1ab73c51910755486352e9136be8aa190f0db4e47b680bb31ca4d7606473","observation_id":"042b83e8-ab2a-460b-9818-f4055291f251","resolution":{"observed_at":"2026-08-07T00:41:18.735316Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08485","last_updated":"2023-12-11T17:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-17T17:59:25Z","title":"Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.08485","snapshot_observed_at":"2026-08-07T00:41:17.872548Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.872548Z"},"links":{"cited_paper":"/paper/2304.08485","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:13052cdfd99eda44c3d98137d7bde2ec6137a095a236409396f43cafff77d164","observation_id":"b935ded7-16e6-4fc5-bd1f-0ac7ac32744b","resolution":{"observed_at":"2026-08-07T00:41:17.872548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.085896Z","title":"F.; Craft, M.; Situ, J.; Yumer, E.; Mech, R.; and Kumar, R","venue":null,"work_id":"feffca7c-6ee0-410d-bfb2-29c2a801cc41","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.876422Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:15bdfbf41b4c7a98106466306bc7d4e29a8a91d8a3b23f720aca5f265164c7df","observation_id":"81dd343f-693a-49ac-b385-ec6bd5c03380","resolution":{"observed_at":"2026-08-07T00:41:19.097921Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.073140Z","title":null,"venue":null,"work_id":"a0234643-aa74-4cde-b7f5-50c4b86d5636","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.892811Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:5ecd9aa8b63e7f63f194fe055bf02e6d7ab8f15049908cb668c915a02932d9f8","observation_id":"d4ccf8c1-e379-4f98-9f10-60bca8101441","resolution":{"observed_at":"2026-08-07T00:41:19.078090Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14034","last_updated":"2024-05-20T04:01:08Z","snapshot_observed_at":"2026-08-04T12:43:29.089406Z","submitted_at":"2024-02-21T04:11:28Z","title":"AgentScope: A Flexible yet Robust Multi-Agent Platform","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14034","snapshot_observed_at":"2026-08-07T00:41:17.973029Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.973029Z"},"links":{"cited_paper":"/paper/2402.14034","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:b85fd2403ca99b51e8473440adb9406511cfc20a6e0c83daecef2b53e85b2243","observation_id":"36bb6d2c-5470-4a9d-9045-7f8d1f6517c1","resolution":{"observed_at":"2026-08-07T00:41:17.973029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-02T13:52:44.392403Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T00:41:18.032579Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.032579Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:112755c64f56546d3ded6e73ccf9e4440464b70f07212a1b4fda5a7c4f199180","observation_id":"469bd970-a01a-49fe-9887-88f135acdc93","resolution":{"observed_at":"2026-08-07T00:41:18.032579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.059715Z","title":null,"venue":null,"work_id":"ff89cedf-c0cf-4cad-b15f-0e9fc4979e9c","year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.092200Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:485a943a8cbbf3802813ee7f81cd1ed6531550cfbd84d74952f1e5d7fbb5a6b8","observation_id":"7bddd1bb-5689-49e0-a790-a70ba2823422","resolution":{"observed_at":"2026-08-07T00:41:19.064656Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.046959Z","title":null,"venue":null,"work_id":"eea0569c-237b-4217-a094-b4f9fc453a02","year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.227823Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:b4b76358e9d7054ff1ed5ad0caff112646e7abddf698e8a9787acccac717618d","observation_id":"09f46101-0cee-4bc7-89a3-2301a620a09e","resolution":{"observed_at":"2026-08-07T00:41:19.050888Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.030399Z","title":null,"venue":null,"work_id":"6cd0e9d3-80f7-4377-b894-d5b5b89a99c4","year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.335842Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:5aec228280bd467d0ce893c14c19edb33de41470a8c7594db95c13fe78d43d2b","observation_id":"0869596f-3c64-45a0-9296-a1a22c1c7722","resolution":{"observed_at":"2026-08-07T00:41:19.034562Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.017154Z","title":null,"venue":null,"work_id":"f4e36b03-1e6e-4b55-a97f-1385b27b3ea2","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.410414Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:e017dbd0a8bf66d5fdf81ba94c6b4de952738a2dddba7e21c0ac856836652278","observation_id":"db6a696d-8445-4965-961c-2ab73dd4cbbe","resolution":{"observed_at":"2026-08-07T00:41:19.021031Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.003644Z","title":null,"venue":null,"work_id":"e43b78e7-9743-4d84-bf7c-7c8762bcc67c","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.472374Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:c15c018539f65b7e1e63bd37fc037ded2abee9ee01a78e2e4603760f16e229af","observation_id":"cd9ffedf-7d3a-453d-b0d0-80e93b14bec2","resolution":{"observed_at":"2026-08-07T00:41:19.008842Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.16158","last_updated":"2024-04-18T06:53:38Z","snapshot_observed_at":"2026-08-05T03:22:24.562938Z","submitted_at":"2024-01-29T13:46:37Z","title":"Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.16158","snapshot_observed_at":"2026-08-07T00:41:18.507084Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.507084Z"},"links":{"cited_paper":"/paper/2401.16158","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:af47ac91f157e9f9c6cea54c3475aa3ac236853dbc6020c1fbf0a14f6d23080b","observation_id":"2d2c4f0d-959e-4331-a295-bbc88e9a4af5","resolution":{"observed_at":"2026-08-07T00:41:18.507084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.989908Z","title":null,"venue":null,"work_id":"fb09f0c3-5f67-47c3-a68a-98e6c24dd2ed","year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.512552Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:baf4e99096e6a116245168f8683f78337506c5294ca26f6a7e71cddfffabe4bc","observation_id":"e3826458-78bc-4a43-8699-a7a884c0282d","resolution":{"observed_at":"2026-08-07T00:41:18.995486Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.11733","last_updated":"2025-01-28T16:58:02Z","snapshot_observed_at":"2026-07-06T20:23:36.052687Z","submitted_at":"2025-01-20T20:35:46Z","title":"Mobile-Agent-E: Self-Evolving Mobile Assistant for Complex Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.11733","snapshot_observed_at":"2026-08-07T00:41:18.527132Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.527132Z"},"links":{"cited_paper":"/paper/2501.11733","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:5d7615a54d007cc35f6474054e9bbf9fd1adf0a477d18c0002cf23fcf9b14598","observation_id":"9d88c985-f126-4681-98e2-28a5645b11ca","resolution":{"observed_at":"2026-08-07T00:41:18.527132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-07T00:41:18.531498Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.531498Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:1ea9c75fd5c06746eac14e141f3ff7a8135a96a8ce164e49cc4fc5a3e3e0d17b","observation_id":"99bd5595-e0aa-4e31-b3a2-56a93b045cc4","resolution":{"observed_at":"2026-08-07T00:41:18.531498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-08-07T00:41:18.539302Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.539302Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:f070dfa0f7b0c2bf8e9372d51137e1f80d610cbcd54c7847aa131320046603b4","observation_id":"99386c66-31b8-4dae-9717-110984556b4d","resolution":{"observed_at":"2026-08-07T00:41:18.539302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.975374Z","title":null,"venue":null,"work_id":"c2ef0edb-0b2b-4757-a514-123b1790d67d","year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.543490Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:f43acfcb818ecad12e1307a90ee3b2c30a8ca68e76809560276c21ab471db73a","observation_id":"16fb44d1-9eaf-465d-89a0-46f9917664db","resolution":{"observed_at":"2026-08-07T00:41:18.979986Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.09295","last_updated":"2025-03-16T07:13:53Z","snapshot_observed_at":"2026-08-06T22:34:48.802494Z","submitted_at":"2024-07-12T14:30:05Z","title":"Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.09295","snapshot_observed_at":"2026-08-07T00:41:18.547648Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.547648Z"},"links":{"cited_paper":"/paper/2407.09295","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:53ab48de9a65cd9c823478b55fb1acdec401303d6f908a00283cfc6c9857ea11","observation_id":"23a05e30-c1cc-4189-9e85-486f791a6025","resolution":{"observed_at":"2026-08-07T00:41:18.547648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.962538Z","title":null,"venue":null,"work_id":"0c23f9b2-1b8c-4f2b-ab81-4a6b304facd2","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.551875Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:22d0e80a7a17f058ec3f9ad3bdf48016678dca8f4d19db97d7d76ee6ab7ec375","observation_id":"dbbba48e-6d31-4a6e-aca3-8652e5927198","resolution":{"observed_at":"2026-08-07T00:41:18.966781Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.949269Z","title":"M.; and Jia, R","venue":null,"work_id":"3c2d2065-eb33-42e7-a288-67f2d6da423c","year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.556129Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:fbbe6872513d4c451c8e22019cb4256b46ff3d5307039462711393f4e16bee7c","observation_id":"666ae75f-0ce3-427d-8ee3-2ee2b394d6a8","resolution":{"observed_at":"2026-08-07T00:41:18.953891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.936846Z","title":null,"venue":null,"work_id":"043fb889-f41e-4b00-83dd-d242ac26e340","year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.560872Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:f6ad33473f33313ac478196f431290b3e64393b133c6d1b2c323a0a7fc45932e","observation_id":"0f79d009-b553-4cc4-a968-4649b3e79710","resolution":{"observed_at":"2026-08-07T00:41:18.941166Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.923956Z","title":null,"venue":null,"work_id":"6e5b621f-68a8-4e08-9917-a09bdf24462f","year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.565839Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:aeea01959bdee04f3393e2fd6fa6948ba26a851daab03bfb445ad0967d249e89","observation_id":"6190e828-d1b0-430d-8cd1-810923b20c19","resolution":{"observed_at":"2026-08-07T00:41:18.928123Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07972","last_updated":"2024-05-30T08:55:12Z","snapshot_observed_at":"2026-08-07T10:10:50.201348Z","submitted_at":"2024-04-11T17:56:05Z","title":"OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07972","snapshot_observed_at":"2026-08-07T00:41:18.569925Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.569925Z"},"links":{"cited_paper":"/paper/2404.07972","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:d2a618f770438ee24f834d40698b9aac6519d6282898142d342b9f6a1d46b283","observation_id":"bc31b950-ecb2-4d67-aa18-e3b9c59d6dfd","resolution":{"observed_at":"2026-08-07T00:41:18.569925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-07T00:41:18.574211Z","title":"C.; Liu, Y.; Liu, S.; Wang, Y.; Xu, C.; et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.574211Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:bd167464a9b67126263ce8be077f81055094bb2e086e34cc6df825eb8c31f227","observation_id":"d9c4fd39-0ecc-4900-9bd5-4723a34e3b89","resolution":{"observed_at":"2026-08-07T00:41:18.574211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","latest_version":6,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T00:34:38.756010Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":1,"verified_fuzzy":4},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2506.13205."}