{"as_of":"2026-08-06T01:52:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ea1715e7a7c3f5fdc3c372e20a141655d888b2aff93df660bdcf41cd72b1a70b","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-19T03:36:24.013477Z","state":"measured"},{"denominator":52,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":52,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T20:16:13.413064Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-01T14:45:49.588593Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"cited_work":{"arxiv_id":"2507.21540","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.21540","snapshot_observed_at":"2026-07-01T14:45:49.588593Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","venue":"cs.CR","work_id":"837dd9bb-3217-454f-8e4f-67539b0eac70","year":2025},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2507.21540","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:9bc24bff31ef411a5fb18de29a5d2c4bcd383751b2e701c4fe117f4b7004a0a0","observation_id":"00769ba5-9cde-4e9e-8f28-bdb73b424cbb","resolution":{"observed_at":"2026-05-18T08:16:06.505883Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"cited_work":{"arxiv_id":"2507.21540","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.21540","snapshot_observed_at":"2026-07-01T14:45:49.588593Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","venue":"cs.CR","work_id":"837dd9bb-3217-454f-8e4f-67539b0eac70","year":2025},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-07-06T23:26:23.179482Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2507.21540","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:b7ce6c9a3ff97b2298d09778ba91193f8ec9ec93aae6007ec254d38f1d674cdd","observation_id":"0cde1fa7-af47-4d70-8f5f-3e1d15130be8","resolution":{"observed_at":"2026-07-01T14:45:49.589862Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.21540/citation-record","integrity":"/paper/2507.21540/integrity","json":"/paper/2507.21540/citation-record.json","paper":"/paper/2507.21540"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:44:24.768682Z","title":"\" * write output.state after.block = add.period write newline","venue":null,"work_id":"00eebc59-e300-4d9d-86e2-f9bc6c1bf336","year":null},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:f6cdc9c6c5c5a43ae4ce4168bd60c73f00103ac9c4550756e1cedb5280e976b3","observation_id":"03051825-f43d-43d3-a0e7-16ea1da00594","resolution":{"observed_at":"2026-05-19T03:37:01.482005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:44:24.772159Z","title":"write newline","venue":null,"work_id":"3b731e2d-843c-43f2-b9b6-7ffd356be7ad","year":null},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:d1aa64eea887b6839f303b8d126096fb0eb0181d4d5031cec12afaa832d5b59c","observation_id":"c121901c-ccac-4cc8-b64f-09a3394ac549","resolution":{"observed_at":"2026-05-19T03:37:01.603192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":"2303.08774","doi":"10.1002/tea.20265","metadata_source":"pith","pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"GPT-4 Technical Report","venue":"cs.CL","work_id":"b928e041-6991-4c08-8c81-0359e4097c7b","year":2023},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:30b5ff6378d9fc5e3ac2bc819d17a1a77598af14fb4b68ea05709d75e9896180","observation_id":"881dce18-929d-4eaa-9dc3-323f777a2d0f","resolution":{"observed_at":"2026-05-19T03:37:01.082144Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"00a836e8-9796-4d63-a347-c09bb0dac1d4","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:cbf52ebdfee4ed5f7880a31124553ac6d75507d4a94126ce79d6ee830bd51acc","observation_id":"52669a87-db83-45b4-8df1-dc8cb00e66c9","resolution":{"observed_at":"2026-05-19T03:37:01.485250Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"1c3ae3a6-1009-4ff9-b1d3-b214cace629f","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:e8195a4cd4c7d5d6133200fcc70031372e00879557d7468955523a8d22e4ce49","observation_id":"b57779a0-89e7-492e-baf8-5c9cb74bed33","resolution":{"observed_at":"2026-05-19T03:37:01.610830Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5a69d019-107c-4b40-885e-39f62aa75be2","year":2018},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:9571b506cec518946914f3205d3afb01963a3e12b48cc5b7f5f015d6001b1a9e","observation_id":"50455d82-28dd-4c82-bfc1-9307eabbf07b","resolution":{"observed_at":"2026-05-19T03:37:01.624419Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b6ea41b0-4bb8-40ab-9905-261fadf28db5","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:fe9317d193ed17b155c18f316a402098474b078ffdf8089e64784c10b517f4e0","observation_id":"a3177998-ee82-4167-9d22-dcc3cfa39585","resolution":{"observed_at":"2026-05-19T03:37:01.617126Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":"2404.01318","doi":"10.48550/arxiv.2404.01318","metadata_source":"pith","pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","venue":"cs.CR","work_id":"a8e91fcd-dc7a-457f-91b8-51f660cb3053","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:5cd23f8abc3334fb26e2d6fa0cc5401ea1ddc5dfe9035a89668a1a540ed23f93","observation_id":"0c0e9a8e-ef58-4775-971c-215f29c4fbe4","resolution":{"observed_at":"2026-05-19T03:37:01.127676Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-05-22T21:23:26.922897+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-22T21:23:26.922897+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"fcdf241d-ec2c-42b6-961e-7fc7d448e658","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:dcf168a7dafb88b788ec6a26a0e826b7d185d688e921b8a68d8c7bcdab8b614a","observation_id":"63478a80-c420-47b3-b722-5260d7f0e273","resolution":{"observed_at":"2026-05-19T03:37:01.614007Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2b4eb901-a0e5-406e-893e-c69468351030","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:35113846c8dfc43f0c75d644d835d9383d911117100d6b5cb0bbc903081ffefa","observation_id":"b16d14f5-2f03-404b-8133-b62b5cc165d5","resolution":{"observed_at":"2026-05-19T03:37:01.620719Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b9eeb396-184a-42ac-9e84-d5e8f1236da0","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:57479363b5fe24d83f880f7dbe6213a2fcdbb5131e1c4239038bdc8b111a7ee9","observation_id":"53d95cbc-5a0d-4769-93ee-513c2cc9c72a","resolution":{"observed_at":"2026-05-19T03:37:01.488372Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"da183cfc-7d4c-491a-ad24-b2fa42af506f","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:ecadb05f1feeead7d1e0474f468cf32ed7801ba496b46f302adabe50bdf934e8","observation_id":"949ae581-0938-414d-91e5-bb1f28556223","resolution":{"observed_at":"2026-05-19T03:37:01.607243Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"T.; and Zhang, Y","venue":null,"work_id":"01b69e8a-6f0f-4198-aff9-ef1f1fe00a8f","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:e925130dbf987459100227d60944f94b56874ef5ca59b4bb240b3bd5c08813d5","observation_id":"6dd11c99-b0e9-4d62-a68b-54cd96f5b664","resolution":{"observed_at":"2026-05-19T03:37:01.491580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":"2410.21276","doi":"10.1177/15248380231178756","metadata_source":"pith","pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"GPT-4o System Card","venue":"cs.CL","work_id":"f37bf1c7-4964-4e56-9762-d20da8d9009f","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:92ab586d803baf64680945d2844ba46f684ae3db4b927a7bbc752ce45c8a76db","observation_id":"e66b77f3-12f4-4cbd-9ebf-9a31f9ec1a84","resolution":{"observed_at":"2026-05-19T03:37:01.054995Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"ea420c2e-6598-41c5-beff-ca931ffe6326","year":2023},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:034dbb9de0c1ee9ccbc376970b6aa2b5daa7f9d509f3e40d5f16539b5d447099","observation_id":"a2a13c08-e9df-4943-9a40-90bcb14aa892","resolution":{"observed_at":"2026-05-19T03:37:01.494641Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d4adf60c-f76f-4919-a626-fd54f40969bb","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:3577d0a0852ce782f777369d3df7110d5064e3f992e37ba16e37e6941f36525a","observation_id":"7e021340-0269-46ad-9bc0-a27699067498","resolution":{"observed_at":"2026-05-19T03:37:01.559998Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"X.; and Wen, J.-R","venue":null,"work_id":"ad68a769-ac04-466e-b2b8-e89851853e01","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:da204b1908b4dac12a4853ac59686dff4deacb4b5143cab207ccf63d6c6c59df","observation_id":"63f6e490-332e-489c-b760-1ae9eaca36e9","resolution":{"observed_at":"2026-05-19T03:37:01.556910Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03744","last_updated":"2024-05-15T19:22:44Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:59:56Z","title":"Improved Baselines with Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":"2310.03744","doi":"10.48550/arxiv.2310.03744","metadata_source":"pith","pith_arxiv_id":"2310.03744","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Improved Baselines with Visual Instruction Tuning","venue":"cs.CV","work_id":"5baeaa33-5986-44a3-85a4-fcabd6fc1e8d","year":2023},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2310.03744","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:3521fd31a950976a80e4aa81f1b243c804cc590c0f3e7b8cdad590be3a8adc14","observation_id":"3eca18dc-a79f-4520-a1ca-aa0a9ea4a03a","resolution":{"observed_at":"2026-05-19T03:37:01.067323Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6e491d6e-de3d-4f44-a3c7-6d3d0cbd1dec","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:19cf3193177e0cc37a8975b83f875ac5be94cd0d9f436af15ec6587c1d3a391c","observation_id":"a6bcfe34-ef70-4056-8a8d-dabde7aab187","resolution":{"observed_at":"2026-05-19T03:37:01.553939Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"9104f449-e276-4e7a-af8f-b0a008914090","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:c98080445561a527f5e97680ee6537ab056b9b4d9129244897b50e0965afe283","observation_id":"1d2b870f-2225-49b0-900e-a02edad73a2e","resolution":{"observed_at":"2026-05-19T03:37:01.541960Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"985aa9f9-b573-4705-9a30-7e279a6c72ca","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:91543871ea08594cae6e5696adbeec041183f1f402dea2c99f45d4a9e418a018","observation_id":"e5f2367c-8b72-4609-947a-34f8c241ffa6","resolution":{"observed_at":"2026-05-19T03:37:01.538662Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.03027","last_updated":"2024-11-24T06:22:37Z","snapshot_observed_at":"2026-07-06T17:55:21.083912Z","submitted_at":"2024-04-03T19:23:18Z","title":"JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks","version":4},"cited_work":{"arxiv_id":"2404.03027","doi":"10.48550/arxiv.2404.03027","metadata_source":"pith","pith_arxiv_id":"2404.03027","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jailbreakv-28k: A benchmark for assessing the robustness of multimodal large language models against jailbreak attacks","venue":"cs.CR","work_id":"70be9f1e-35df-4670-9f5f-fb5d97c1816f","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2404.03027","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:77697a118c12c8765fdf39e681cd2abfca0c0649590f3e7a032fc1d14592b3f0","observation_id":"6d903dcf-5ea9-4b40-af4d-e07089a40681","resolution":{"observed_at":"2026-05-19T03:37:01.094624Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"95888a17-1936-47fa-bc4e-2dbfc0a9c68f","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:51435ae8b2018fe04477868f5b4dba94c0d4d51d1b39c9c8c7570c6beb568db4","observation_id":"07d64245-b856-4008-944e-b7cecb4ab7f5","resolution":{"observed_at":"2026-05-19T03:37:01.535034Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"bcd3933c-9f7f-4863-8fab-b3ffb1607afe","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:e3acb19b4d27ff7d697567714def5960672af9fd2ac193f74f7defba88b5ccb6","observation_id":"9b485720-8924-49a8-b413-c14c615ab8ef","resolution":{"observed_at":"2026-05-19T03:37:01.531296Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"189b921c-d7e4-4144-ba78-e46ea9596117","year":2006},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:d2a7ae8641e0c9f215357a9cab21198dad9d03c2855f17c1be3e0d0857f1c18a","observation_id":"8b82ce57-c891-4826-a195-029224ae6a99","resolution":{"observed_at":"2026-05-19T03:37:01.527907Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"85355b51-73da-4eb3-91ab-fa7f213492dc","year":2023},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:ad0b691b1c225a83239c1ceea4f9f0204e07c2bae662f8125bb312409036b503","observation_id":"3e528558-12af-4397-a69c-0b1d3036ef8d","resolution":{"observed_at":"2026-05-19T03:37:01.524133Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"97d6b097-9498-439e-9ba0-dc0781c04198","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:0e52e4f12753ea3beb500d9f79b07c838261b49604b7a0eed0cf1df5d8807bb2","observation_id":"f03bb3d0-b7b9-44b1-8b9a-e36f6fd75ff2","resolution":{"observed_at":"2026-05-19T03:37:01.497969Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"18d42d31-8c71-44ca-85f4-cbb4bbf47b78","year":2023},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:1a4326ea927a3653dcc2eddb0c649162f4860b9fc02696181334a4b461d23046","observation_id":"e9a9c5ef-e3a6-4ffc-8af3-d7d8cc69fd54","resolution":{"observed_at":"2026-05-19T03:37:01.520408Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b9d25b6e-fc5d-42c3-a1c1-0de69b7a62e2","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:925bddd0697ef675824eec8c1e7746637169af07528032554ae00ece59814888","observation_id":"a2e5e7a5-cc4e-4410-8b00-cb70d4958187","resolution":{"observed_at":"2026-05-19T03:37:01.516975Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09321","last_updated":"2025-02-04T16:04:22Z","snapshot_observed_at":"2026-07-06T18:30:28.421247Z","submitted_at":"2024-06-13T16:59:43Z","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.09321","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.09321","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Jailbreakeval: An integrated toolkit for evaluating jailbreak attempts against large language models","venue":null,"work_id":"9263a0d7-d491-4e74-82a2-4232850d8c77","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2406.09321","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:b42a19ec304960cde9997d2b209f71d4ab59c5bdcb12ead1b3a4e10980e5da9d","observation_id":"7ab2e877-d047-4493-b93d-d71390ae1ee0","resolution":{"observed_at":"2026-05-19T03:37:01.071914Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8ac8a82d-2756-4626-913d-a7169989f13a","year":2007},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:f0f204a57a603f34d0b48986506f935cc17e3f3fd647e92bcb5ba29c3ac08780","observation_id":"ef331f22-0fd8-4b5e-8c0a-13ecbb33e3af","resolution":{"observed_at":"2026-05-19T03:37:01.544804Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"0c018382-97b3-4130-99ba-533adb83bc1e","year":2004},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:76522fb5b2553b189b82e4f5c07b003ef661eacb7620916e5194aac3c27d4a24","observation_id":"b774c527-ffee-414d-899e-4a8808f23f12","resolution":{"observed_at":"2026-05-19T03:37:01.514142Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"7a508454-e22f-4737-aab8-17404db1421e","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:07c5e7f2aceb223d994628d8bf9644c3c6cf0220d3ab524f5af19908a57ec511","observation_id":"292aeece-b1ca-4d4b-a341-634734dbbadc","resolution":{"observed_at":"2026-05-19T03:37:01.547699Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-03T19:18:54.854136Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":"2412.05934","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-07-01T23:26:23.265870Z","title":"arXiv preprint arXiv:2412.05934","venue":null,"work_id":"583229f8-890f-4cc0-916c-e75b4bea5c96","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:c986904bca1c13385fb762fd7ff12d7d145f190df7712c23b0d0919c1f74e888","observation_id":"f06a40f1-bc66-43f8-9c4f-23aaf2b920d8","resolution":{"observed_at":"2026-05-19T03:37:01.132128Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12191","last_updated":"2024-10-03T15:54:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-18T17:59:32Z","title":"Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolution","version":2},"cited_work":{"arxiv_id":"2409.12191","doi":"10.48550/arxiv.2409.12191","metadata_source":"pith","pith_arxiv_id":"2409.12191","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolution","venue":"cs.CV","work_id":"8abcfe4f-e0fb-44b7-9123-448fac95f90a","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2409.12191","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:cc0b586b4e88fe002c97908c8a5d071365d3e03037da448e0223792340cd4dc4","observation_id":"11fc868d-e3e3-4db6-b01a-173939e04f66","resolution":{"observed_at":"2026-05-19T03:37:01.123503Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-11T02:19:33.884263+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T02:19:33.884263+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06805","last_updated":"2024-01-18T07:31:47Z","snapshot_observed_at":"2026-07-06T17:14:57.853205Z","submitted_at":"2024-01-10T15:29:21Z","title":"Exploring the Reasoning Abilities of Multimodal Large Language Models (MLLMs): A Comprehensive Survey on Emerging Trends in Multimodal Reasoning","version":2},"cited_work":{"arxiv_id":"2401.06805","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06805","snapshot_observed_at":"2026-07-04T09:59:44.777709Z","title":"Exploring the reasoning abilities of multimodal large language models (mllms): A comprehensive survey on emerging trends in multimodal reasoning","venue":null,"work_id":"f8488283-5738-4b2a-9d3e-86913e913cdb","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2401.06805","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:c5e13b5d885ec96a194e51d5866bb4a715faf5c42ccf4971ad2e16f2b04509bb","observation_id":"b13c8292-0d2e-4eed-9c48-d58e99344d59","resolution":{"observed_at":"2026-05-19T03:37:01.119697Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"48f17e1d-512a-49b8-a1ca-d2e89da4f8b8","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:bb4db8d20b881559129997ebdad690524ebf33738de370087b90a211f3d25229","observation_id":"7fd598b2-c341-4548-a153-c98a125d8a89","resolution":{"observed_at":"2026-05-19T03:37:01.511090Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"69510d7e-62bf-408d-b2c6-93afcda8bbca","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:53d1c342cd0c51f2583df46f5b2cf88e537045362a6021cdf83f1966acf7d759","observation_id":"e4546891-399d-488f-a46f-3269b4e6064e","resolution":{"observed_at":"2026-05-19T03:37:01.508114Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21659","last_updated":"2024-10-17T03:49:20Z","snapshot_observed_at":"2026-07-06T18:55:07.177656Z","submitted_at":"2024-07-31T15:02:46Z","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","version":4},"cited_work":{"arxiv_id":"2407.21659","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.21659","snapshot_observed_at":"2026-07-02T17:37:14.851300Z","title":"arXiv preprint arXiv:2407.21659 , year=","venue":null,"work_id":"9761ef96-41c3-4de8-a7ad-58be4e11ed98","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2407.21659","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:9d0cac8779879512dbd56d911c60aa1d1f84a940fa66b55d5978b91a97fae200","observation_id":"cc187bec-d9e7-4880-906f-84979985add6","resolution":{"observed_at":"2026-05-19T03:37:01.115770Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18927","last_updated":"2024-10-24T17:14:40Z","snapshot_observed_at":"2026-07-06T19:39:15.025945Z","submitted_at":"2024-10-24T17:14:40Z","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.18927","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.18927","snapshot_observed_at":"2026-07-04T00:39:16.622704Z","title":"Safebench: A safety evaluation framework for multimodal large language models","venue":null,"work_id":"5e63cd99-dfaf-4489-9790-1200fa28aad1","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2410.18927","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:e52482f44ca5169ef469c7f9be9d2d71485004585af51d8bece0984afeec407b","observation_id":"179bf2b5-07c3-4775-a195-332fcea8df02","resolution":{"observed_at":"2026-05-19T03:37:01.050974Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06302","last_updated":"2024-07-03T00:51:21Z","snapshot_observed_at":"2026-08-04T06:08:32.233717Z","submitted_at":"2024-06-10T14:18:56Z","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":"2406.06302","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.06302","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Unveiling the Safety of GPT- 4o: an Empirical Study Using Jailbreak Attacks","venue":null,"work_id":"5434a6fc-8663-49b6-bb28-c359f325ee0b","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2406.06302","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:673ac8adef28c3f994ee3770d131b2a9f4fc15bc2b15f2a93f475bdf297a2391","observation_id":"96f0a959-e872-4e58-91c3-e7e7e54ea727","resolution":{"observed_at":"2026-05-19T03:37:01.106373Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04031","last_updated":"2024-07-01T14:25:23Z","snapshot_observed_at":"2026-08-05T18:40:45.767406Z","submitted_at":"2024-06-06T13:00:42Z","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","version":2},"cited_work":{"arxiv_id":"2406.04031","doi":"10.48550/arxiv.2406.04031","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.04031","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jailbreak vision language models via bi-modal adversarial prompt","venue":"arXiv (Cornell University)","work_id":"ffab1d67-665f-4bc2-bb81-d8f8964115f5","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2406.04031","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:823259ec7015ec17da46d80dc2f050b6fb450280e61fa4855b3f4e2de6fa4c64","observation_id":"630d645b-ce3a-474b-bc30-f6c34f4e2371","resolution":{"observed_at":"2026-05-19T03:37:01.063367Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:9e7b12a3e5bb9d674c787f341388faaf98b63c8c6e3e6713a777f53d90dde7ca","observation_id":"f0597f8d-a61b-4cd1-9ea5-8607c0390048","resolution":{"observed_at":"2026-05-19T03:37:01.077330Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15092","last_updated":"2025-03-19T10:44:37Z","snapshot_observed_at":"2026-08-03T20:15:51.813763Z","submitted_at":"2025-03-19T10:44:37Z","title":"Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings","version":1},"cited_work":{"arxiv_id":"2503.15092","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.15092","snapshot_observed_at":"2026-06-30T13:54:44.180777Z","title":"arXiv preprint arXiv:2503.15092 (2025)","venue":null,"work_id":"47af23b4-4e58-481b-9362-2e859d026df0","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2503.15092","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:92ca10a901c7354a0003344f062cf8be518da6d7b830709cc057849fe1289df6","observation_id":"7bdd6410-b300-4cc1-8072-6c0c2ff74aa9","resolution":{"observed_at":"2026-05-19T03:37:01.059438Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"aae0aae6-4d2b-4000-b3f3-a6964087eddf","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:7777707bdca50f87b419eb52bf747ebffee907bdcfabbbe10496a26bc7211110","observation_id":"1830197d-6cff-4cc0-a82b-fc2a94d1dedf","resolution":{"observed_at":"2026-05-19T03:37:01.504745Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4aaca4b5-9c3e-47b9-9288-c826a23a7806","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:8bb3158bfd065a58da731e63f1f2baff2bfe3a8cf1011c45a5f672947593a52e","observation_id":"7b3900a0-0f9e-4cbf-9a5e-3271cbfa3337","resolution":{"observed_at":"2026-05-19T03:37:01.550852Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10766","last_updated":"2025-03-15T00:49:45Z","snapshot_observed_at":"2026-07-06T17:04:17.738921Z","submitted_at":"2023-12-17T17:02:14Z","title":"JailGuard: A Universal Detection Framework for LLM Prompt-based Attacks","version":4},"cited_work":{"arxiv_id":"2312.10766","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.10766","snapshot_observed_at":"2026-07-02T18:57:16.788391Z","title":"A mutation-based method for multi-modal jailbreaking attack detection","venue":null,"work_id":"4e62eca4-3edd-4897-a924-8367978a4f3e","year":2023},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2312.10766","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:1453d7711cef71057d08d7a370c74bce1bd502ed62815b7d86b8096a00d7c8d3","observation_id":"6d76b6df-9bab-4d18-b895-567e9462008f","resolution":{"observed_at":"2026-05-19T03:37:01.100658Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.04931","last_updated":"2025-06-27T10:07:29Z","snapshot_observed_at":"2026-07-06T20:18:31.039569Z","submitted_at":"2025-01-09T02:47:01Z","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","version":2},"cited_work":{"arxiv_id":"2501.04931","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2501.04931","snapshot_observed_at":"2026-07-01T23:26:23.246616Z","title":"Show me how to beat a dog to make it more aggressive","venue":null,"work_id":"14dcc7e0-b8e0-49db-80a3-6d60c90206fb","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2501.04931","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:8dc749bca78e96f612b3478187cd6f0386d56fd265053bbac0552443f6382912","observation_id":"0f73e18f-c5af-4351-a928-44e72a504032","resolution":{"observed_at":"2026-05-19T03:37:01.089221Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a0e98f4d-12a9-48e7-86d1-5306e67c2342","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:75e918df09bd271e339a53aa47abdc6b398b898c84be37671d03e60cd97f92e3","observation_id":"60a32c92-e6cd-4f5a-9bbd-07aefd565cc8","resolution":{"observed_at":"2026-05-19T03:37:01.500977Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:e17965e1432816c447f283900b82547d2099404f30e0a86fafa65a52051b89b9","observation_id":"9b19ed04-201d-49af-ac45-199cae965ab4","resolution":{"observed_at":"2026-05-19T03:37:01.111600Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":0,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":28,"verified_exact":14,"verified_fuzzy":4},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 2 inbound Pith citation observations for arXiv:2507.21540."}