{"as_of":"2026-08-08T09:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f167c2c85e9440b5653d55711298b5725de5aeafcc27a59456040f1e5449a7fd","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T12:15:04.663911Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.21985/citation-record","integrity":"/paper/2507.21985/integrity","json":"/paper/2507.21985/citation-record.json","paper":"/paper/2507.21985"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.698339Z","title":"Nudenet: Neural nets for nudity classification, detection and selective censoring","venue":null,"work_id":"875476cc-a859-445f-b6c2-a46c953f443b","year":2019},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.370564Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:b4a7598fc4ecaaa8fa8ccf2aa76fe0c761c9f6d68da0dc079d2e9c2b5d31d690","observation_id":"dcfc12df-46c0-43d8-99eb-bf2a4db607a7","resolution":{"observed_at":"2026-08-06T12:15:05.704436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.681149Z","title":"Towards making systems for- get with machine unlearning","venue":null,"work_id":"a6e80e26-bab2-4994-94fc-2baa9cc92df0","year":2015},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.376722Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:2b42abc3816d16b0c6fc647599fd079a221fee594d7ae183a5aca81e5455b0b1","observation_id":"a1cac300-db54-4038-bd57-21b66ae54597","resolution":{"observed_at":"2026-08-06T12:15:05.686657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15241","last_updated":"2024-05-21T11:07:58Z","snapshot_observed_at":"2026-08-02T04:16:08.176028Z","submitted_at":"2023-05-24T15:25:19Z","title":"Robust Classification via a Single Diffusion Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.15241","snapshot_observed_at":"2026-08-06T12:15:04.382570Z","title":"Robust clas- sification via a single diffusion model","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.382570Z"},"links":{"cited_paper":"/paper/2305.15241","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:1c14445ba4152bd8c19acafd40b9613576799b02517ba5c7412f14cb496ffcc6","observation_id":"3acac144-f0c9-42ef-bf78-426f66ebd064","resolution":{"observed_at":"2026-08-06T12:15:04.382570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.663645Z","title":"Internvl: Scaling up vision foundation mod- els and aligning for generic visual-linguistic tasks","venue":null,"work_id":"18fe3505-392a-459a-85da-6589b8be0cdf","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.388105Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:87010fea84612b4172df2e587a04bdafce9b516c90ba5baa45a3177e7502417b","observation_id":"a3d8d438-aece-44bb-9c59-1dba15145f7c","resolution":{"observed_at":"2026-08-06T12:15:05.669114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:04.393736Z","title":"Prompting4debugging: Red- teaming text-to-image diffusion models by finding problem- atic prompts","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.393736Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:7131c1f9c429086b8d8b296aae2097173c3cc9e099b3db16e72a1649d4ef9aa4","observation_id":"65aa8408-070c-4be1-96d0-b0cc1cb2fcfe","resolution":{"observed_at":"2026-08-06T12:15:04.393736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11071","last_updated":"2025-02-06T04:37:01Z","snapshot_observed_at":"2026-08-08T01:37:38.628620Z","submitted_at":"2024-08-18T03:16:59Z","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","version":2},"cited_work":{"arxiv_id":"2408.11071","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.11071","snapshot_observed_at":"2026-08-06T12:15:04.941296Z","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","venue":"cs.CR","work_id":"cc7eb21f-0a40-47bd-9792-5c3aa0e1eb06","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.399305Z"},"links":{"cited_paper":"/paper/2408.11071","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:502ca44785386b70253d8777499a163341b6478ed6b0079e9ded1116bcfbc2c3","observation_id":"90f1963a-c042-41e3-ba33-c812608fec97","resolution":{"observed_at":"2026-08-06T12:15:04.947370Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.646616Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"2ef81f6e-5a6e-426a-a3f0-6e202d10fe73","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.405985Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:6aafa6923e5fc9f7fad892062b28837133eef3dd1f0b3d8de5b37cf60b15eec5","observation_id":"bd43958b-afec-4b89-b28d-120eab871a24","resolution":{"observed_at":"2026-08-06T12:15:05.652013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.629910Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":"987ab5d9-d525-4845-a84e-acd2501df972","year":2021},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.412778Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:4cf90069bb4025550aeaee0b09ffa65314988d0c9a8d64e60146e41b75233b88","observation_id":"332bf609-323b-442a-87f9-ec921093178b","resolution":{"observed_at":"2026-08-06T12:15:05.635198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01911","last_updated":"2024-04-02T12:57:22Z","snapshot_observed_at":"2026-07-06T17:54:31.739953Z","submitted_at":"2024-04-02T12:57:22Z","title":"VLRM: Vision-Language Models act as Reward Models for Image Captioning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01911","snapshot_observed_at":"2026-08-06T12:15:04.420614Z","title":"Vlrm: Vision-language models act as reward models for image captioning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.420614Z"},"links":{"cited_paper":"/paper/2404.01911","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:2dfa23d36679a232034bc7a944eee346d9576fe9539cddff3111e220105fb43a","observation_id":"811f7398-0b2c-445b-b4d2-9ad1df5ff3ae","resolution":{"observed_at":"2026-08-06T12:15:04.420614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12508","last_updated":"2024-04-04T07:45:38Z","snapshot_observed_at":"2026-08-03T17:30:25.153454Z","submitted_at":"2023-10-19T06:17:17Z","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.12508","snapshot_observed_at":"2026-08-06T12:15:04.426810Z","title":"Salun: Empowering machine unlearn- ing via gradient-based weight saliency in both image classi- fication and generation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.426810Z"},"links":{"cited_paper":"/paper/2310.12508","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:221068dd89883d296fb88b1d9c3bb912d55e1a199396292d73bd48094bebc3c5","observation_id":"d79045c0-28b5-4157-9dfb-0bff4d346b28","resolution":{"observed_at":"2026-08-06T12:15:04.426810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.610462Z","title":"Erasing concepts from diffusion models","venue":null,"work_id":"292a56f9-1926-45d4-8189-531d4bec8769","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.434446Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:206d9d7b4ad97671059a4ce1c3f4c1613eb6e55a26488bad645d4abe13a5adb5","observation_id":"74ddda4c-4be2-4e73-87be-9b011bdd4d5e","resolution":{"observed_at":"2026-08-06T12:15:05.616168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.13896","last_updated":"2024-12-15T05:13:26Z","snapshot_observed_at":"2026-08-05T09:12:58.303003Z","submitted_at":"2024-08-25T17:33:40Z","title":"HTS-Attack: Heuristic Token Search for Jailbreaking Text-to-Image Models","version":3},"cited_work":{"arxiv_id":"2408.13896","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.13896","snapshot_observed_at":"2026-08-06T12:15:04.865704Z","title":"HTS-Attack: Heuristic Token Search for Jailbreaking Text-to-Image Models","venue":"cs.CV","work_id":"9e02c3e7-4459-4459-9a0c-ab5df7fac14f","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.441001Z"},"links":{"cited_paper":"/paper/2408.13896","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:0c85689bfbf7db147f5feb880dd1d40c2cd57534db8f40663ae5c30d74cbd20e","observation_id":"9b2b4ba2-bd34-437a-9093-980873bbbce2","resolution":{"observed_at":"2026-08-06T12:15:04.873199Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:04.448405Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.448405Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:5ca7777df626a296d079f77efb4960aef80df0955c2d9f784ba8d2720a5eb451","observation_id":"f18cb872-5426-4e36-b018-884410a9457e","resolution":{"observed_at":"2026-08-06T12:15:04.448405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.12598","last_updated":"2022-07-26T01:42:07Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-07-26T01:42:07Z","title":"Classifier-Free Diffusion Guidance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.12598","snapshot_observed_at":"2026-08-06T12:15:04.454364Z","title":"Classifier-free diffusion guidance","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.454364Z"},"links":{"cited_paper":"/paper/2207.12598","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:e316e2b49f3c8b370dfa9fab6821eb7eea19ff0ae7f4f4ae668d6c3d86dc436b","observation_id":"876f1aa0-4400-4c5a-b7f7-1a2a3e314776","resolution":{"observed_at":"2026-08-06T12:15:04.454364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.579190Z","title":"Model sparsity can simplify machine unlearning","venue":null,"work_id":"b0f202a8-c38d-4cad-8e00-4a5e7b045581","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.460351Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:c7c263c7e5b631c27e84305e1cfe38bcec639ce367bc5e00e675f896934266d7","observation_id":"c97f7b8c-91dd-49dd-a290-39af2b2f86e0","resolution":{"observed_at":"2026-08-06T12:15:05.585092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.561674Z","title":"Race: Ro- bust adversarial concept erasure for secure text-to-image dif- fusion model","venue":null,"work_id":"6ab148fd-b498-4d36-a6bf-88322fcd40a1","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.465722Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:8141881068d09d42f12f3dc5af270c94ba315b9a8cd9d93277e201d943a8de32","observation_id":"b7aec8a2-4fe9-4985-961f-2f7f866da914","resolution":{"observed_at":"2026-08-06T12:15:05.566872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.545024Z","title":"Ablating con- cepts in text-to-image diffusion models","venue":null,"work_id":"e2c8494c-7a32-4e71-8f95-3a2995c0bd6e","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.472326Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:fd4380ac04a5f3e055ed84b69606e6141770249b1d2fdf5f96273a183660dcc3","observation_id":"94165b14-df68-4d50-bc1d-6641639ca2a3","resolution":{"observed_at":"2026-08-06T12:15:05.550130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.528881Z","title":"Your diffusion model is secretly a zero-shot classifier","venue":null,"work_id":"4832a8bd-ead3-4640-8a6c-85a10df20b87","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.477940Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:bfb8e3bf15ca0c733fe1a873bf09dfbcc28a7acef520f6ccd38f87789972e3b9","observation_id":"bcba9a55-26e3-435c-a382-232ad97a01cb","resolution":{"observed_at":"2026-08-06T12:15:05.534277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.512521Z","title":"Blip-diffusion: Pre- trained subject representation for controllable text-to-image generation and editing","venue":null,"work_id":"dd3ff6a9-01d9-40bb-baf0-bbac032cb045","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.484207Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:8d0475609839c53a564dbacbe88eb8971e78b4edc7f4eb464110656bcd4e711b","observation_id":"7ccb6cc9-5b8d-402b-a5d5-1f64c3d4ebe3","resolution":{"observed_at":"2026-08-06T12:15:05.517897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00351","last_updated":"2024-02-02T03:27:08Z","snapshot_observed_at":"2026-08-06T09:21:56.303773Z","submitted_at":"2024-02-01T05:35:25Z","title":"Machine Unlearning for Image-to-Image Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00351","snapshot_observed_at":"2026-08-06T12:15:04.493732Z","title":"Machine unlearning for image-to-image generative models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.493732Z"},"links":{"cited_paper":"/paper/2402.00351","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:55f0713dfade584c898084317876d38041110fe4a1170670409d751b817b3c8a","observation_id":"bedf2af3-b15d-4053-8865-c2dada74b101","resolution":{"observed_at":"2026-08-06T12:15:04.493732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.495754Z","title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","venue":null,"work_id":"ccc399a0-05a8-44f4-9e48-1b721f40be10","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.500315Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:8c4b6ea78a6ab40f64f7f9fc407efe1fe9c6b767ab234775952f20b4d14e6401","observation_id":"165a9624-9576-443b-8820-f6e60e00120b","resolution":{"observed_at":"2026-08-06T12:15:05.501678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.478834Z","title":"Machine unlearning: Taxon- omy, metrics, applications, challenges, and prospects","venue":null,"work_id":"ab8a6da5-3182-40f9-bfec-60e0f333efd1","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.507322Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:732a7b5bd94548154949c471f1900acf5757f8b45ad8e9e3d8e4649319091b99","observation_id":"840d5885-e51e-4484-887e-ada5e64a9757","resolution":{"observed_at":"2026-08-06T12:15:05.484256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.462197Z","title":"Riatig: Reliable and imperceptible adversarial text- to-image generation with natural prompts","venue":null,"work_id":"605f8e9b-41c1-4b8d-9b0d-ff85cd91a81d","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.514598Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:0a67dc993fb7c4fbf49818f664dc42ae32a4088427251986b4849f2280b416ca","observation_id":"14652e60-42aa-43b4-8c58-a608292f673d","resolution":{"observed_at":"2026-08-06T12:15:05.468018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.445870Z","title":"Threats, attacks, and defenses in machine unlearning: A survey","venue":null,"work_id":"365a5759-2b45-41f1-9576-c9b5350f8c20","year":2025},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.520137Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:802aee9bd80dc1eccf611c93494b8de21cbac8a570101de77daf912d1af11a8c","observation_id":"7e00e52f-8126-4f3e-90cb-f0fbe307b840","resolution":{"observed_at":"2026-08-06T12:15:05.451487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.428156Z","title":"Mace: Mass concept erasure in diffu- sion models","venue":null,"work_id":"ef8b56bf-00d0-48ad-8f2e-97565146f5b3","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.526645Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:c7a464d70112edce73ded5a0edc07180659007d017d74cc31907987a91b8256a","observation_id":"c62cb3c2-486c-4bfa-87bb-b74cec515bfb","resolution":{"observed_at":"2026-08-06T12:15:05.434130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02928","last_updated":"2025-05-26T11:46:09Z","snapshot_observed_at":"2026-07-06T17:55:16.774337Z","submitted_at":"2024-04-02T09:49:35Z","title":"Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02928","snapshot_observed_at":"2026-08-06T12:15:04.533133Z","title":"Jailbreaking prompt attack: A controllable adversarial attack against diffusion models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.533133Z"},"links":{"cited_paper":"/paper/2404.02928","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:7cc61c71f0a4c3ae47eb6225e4313fabdfb965beab752639ed22c0c192db3b91","observation_id":"ab2e1941-04ca-4080-a2c7-6c7d9e5914bd","resolution":{"observed_at":"2026-08-06T12:15:04.533133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.409646Z","title":"Coljailbreak: Collaborative generation and editing for jailbreaking text-to-image deep generation","venue":null,"work_id":"145222bd-f56e-4271-8291-4c789f195456","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.539345Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:74e1040ddb579d768387ac7c399be35f0c3464e827fdbdbb478c43554f12301c","observation_id":"36a399db-1dcc-4575-a183-72590559a394","resolution":{"observed_at":"2026-08-06T12:15:05.415115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.390954Z","title":"Hard to forget: Poisoning attacks on certified machine un- learning","venue":null,"work_id":"7a9b56d3-bf88-4123-8427-f1bb1525c414","year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.547619Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:7b9a8cc5fd587547de5d3e36ab265aa80e289fadfb29ee26ef12fcf48f9df60b","observation_id":"d53e8e29-7bd4-4e27-96f7-0f2c49490d28","resolution":{"observed_at":"2026-08-06T12:15:05.397491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21035","last_updated":"2025-01-16T08:08:57Z","snapshot_observed_at":"2026-07-06T18:54:37.159782Z","submitted_at":"2024-07-17T08:19:11Z","title":"Direct Unlearning Optimization for Robust and Safe Text-to-Image Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21035","snapshot_observed_at":"2026-08-06T12:15:04.554411Z","title":"Direct unlearning optimization for robust and safe text- to-image models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.554411Z"},"links":{"cited_paper":"/paper/2407.21035","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:60334297583cd0e7467cfb5d2da36b61cf0310f87659e469a15442c653903be7","observation_id":"df1ae67e-d57d-4e06-8d9c-36b317e4a272","resolution":{"observed_at":"2026-08-06T12:15:04.554411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.373174Z","title":"Unified prompt attack against text-to-image generation models","venue":null,"work_id":"14376617-36bc-424a-9cb2-c14372dc89ef","year":2025},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.560716Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:a2518df7b535dbb4b243b0f562f83286563737bd33038fdf3a55ead49eba3efc","observation_id":"be248eef-d202-4600-90c1-c8a59e0d3315","resolution":{"observed_at":"2026-08-06T12:15:05.378880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.358716Z","title":"Marshall, Niv Cohen, Govind Mittal, and Chinmay Hegde","venue":null,"work_id":"3a515889-30bc-4164-b3c2-80b36cabd499","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.567223Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:3bae1e00f9fb62d72b1131be7927bbb8a8ffea59669af67918dfc06d36f089d2","observation_id":"6305d0dc-4f4d-42e0-bdae-3970c9b0024a","resolution":{"observed_at":"2026-08-06T12:15:05.363331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.343955Z","title":"Learn- ing transferable visual models from natural language super- vision","venue":null,"work_id":"adac2622-1173-4e83-8d6c-ae6c0fbda725","year":2021},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.572636Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:731661072cfcedc10b6f842d1059abecbed4f040630a2c6b8e9ea0af45b433ff","observation_id":"bdd5f607-5c4b-4dc9-be09-511de9e0bfdd","resolution":{"observed_at":"2026-08-06T12:15:05.348725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.327870Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":"a9e4bfc1-0e76-4846-8a7d-7b87c5b09d64","year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.577679Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:ff81f938ac94cc653d0b32544c6c0240f505f51fe661bb18e6c8fe746c468abb","observation_id":"85c4c143-ace1-4198-902b-26c3bbfff2b3","resolution":{"observed_at":"2026-08-06T12:15:05.333501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1505.00855","last_updated":"2015-05-05T01:25:26Z","snapshot_observed_at":"2026-07-06T04:16:54.272660Z","submitted_at":"2015-05-05T01:25:26Z","title":"Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Feature","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1505.00855","snapshot_observed_at":"2026-08-06T12:15:04.583168Z","title":"Large-scale classifica- tion of fine-art paintings: Learning the right metric on the right feature","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.583168Z"},"links":{"cited_paper":"/paper/1505.00855","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:a15f73ff4cb299d197618bcd5f44ddae6013cc8a1dff194815ea4c68d9c1a0e4","observation_id":"c4b06e6d-cdc5-4a1d-956c-529194770dee","resolution":{"observed_at":"2026-08-06T12:15:04.583168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.309427Z","title":null,"venue":null,"work_id":"a8b0d5dc-0fde-4a61-9414-eabb5de3c266","year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.588142Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:5bc019ba6dadfec00860d5832d32a402f097b75d619a21e1b43c62d12009efdb","observation_id":"8c0f2f63-ef7f-4551-b295-ba153e558c5f","resolution":{"observed_at":"2026-08-06T12:15:05.316383Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.287026Z","title":"Safe latent diffusion: Mitigating inappro- priate degeneration in diffusion models","venue":null,"work_id":"d056e92e-dc0d-4d99-98c8-766b728daefb","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.595102Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:b353be5b9554320b8067301e50105a88a2f43545cf18c12617aaaac1dcbb78d7","observation_id":"e37833cc-d08c-4987-b7f2-45dc621769c3","resolution":{"observed_at":"2026-08-06T12:15:05.292578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06360","last_updated":"2024-02-01T01:07:22Z","snapshot_observed_at":"2026-07-06T15:25:43.815339Z","submitted_at":"2023-05-10T12:02:18Z","title":"Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06360","snapshot_observed_at":"2026-08-06T12:15:04.600890Z","title":"Exploring the landscape of machine unlearning: A comprehensive survey and taxonomy.(2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.600890Z"},"links":{"cited_paper":"/paper/2305.06360","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:4b7d6d66545c76e81da040650ff2030d4698426c64a9f264e72bbd118551c81e","observation_id":"da10a04e-33df-405e-843e-f407fc9a8cfa","resolution":{"observed_at":"2026-08-06T12:15:04.600890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.258276Z","title":"Attacks and defenses for generative diffusion models: A comprehen- sive survey","venue":null,"work_id":"2e2161fd-bed4-4200-a167-fd31761e81bb","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.606837Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:10b5953b71e2870bb513e85b5f49da8225a225bb9f9489c34f7c45e8dd9ab130","observation_id":"1a43bb60-706b-4841-b493-91e8653defd5","resolution":{"observed_at":"2026-08-06T12:15:05.265718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10012","last_updated":"2024-06-07T02:48:59Z","snapshot_observed_at":"2026-07-06T16:33:26.145691Z","submitted_at":"2023-10-16T02:11:20Z","title":"Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10012","snapshot_observed_at":"2026-08-06T12:15:04.611643Z","title":"Ring-a-bell! how reliable are concept removal meth- ods for diffusion models? arXiv preprint arXiv:2310.10012,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.611643Z"},"links":{"cited_paper":"/paper/2310.10012","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:f05c5ceefb17bab851ea912d32cb78a63d20fcddccdf9fa54005c02d4311499f","observation_id":"09975981-bd5a-40f9-8a58-594145693e2b","resolution":{"observed_at":"2026-08-06T12:15:04.611643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.236921Z","title":"Review of large vision models and visual prompt engineering","venue":null,"work_id":"0e11fdf7-4c84-4e25-83e4-6c0e892a9bb0","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.617199Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:222fad1d9c2d854df219c6c9d558dc8c67e5725e362dab2d8240d82d03f32e84","observation_id":"f75bcf99-f1a1-413b-a044-ea0efe7ffe9a","resolution":{"observed_at":"2026-08-06T12:15:05.243927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.211969Z","title":"Machine unlearning: Solutions and challenges","venue":null,"work_id":"a59fb805-a157-45ed-82d5-85c8d8e5dfff","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.624324Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:9b88e51216ffa7b3decaa8afdf1bce2c0c448058937449898a6ffb5fd78db26d","observation_id":"de1e0b1e-4d4c-4f8b-8438-adf87ac983bf","resolution":{"observed_at":"2026-08-06T12:15:05.222072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.193192Z","title":"Prompt- driven contrastive learning for transferable adversarial at- tacks","venue":null,"work_id":"96200dd5-29a3-49ab-993c-ac10f07fa840","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.635587Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:2e0328cb90fe440007f097bf9011b699023a7e2083c56125ee21fd850f42e5dd","observation_id":"f2d82b77-866c-4e2d-81d6-df022262b0a2","resolution":{"observed_at":"2026-08-06T12:15:05.199217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.172412Z","title":"Mma-diffusion: Multimodal attack on diffusion models","venue":null,"work_id":"869a0f7a-fea5-4b9a-8b95-51dd6b2cb6fb","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.641457Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:d0690ff5ada433a31a492ed5cc2de09b90a73760a6318964f7c0aacea78f7cc1","observation_id":"1626b2b1-9027-4aa9-b8ad-cb312ee7ad55","resolution":{"observed_at":"2026-08-06T12:15:05.178061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.148433Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"b38e8f71-4295-483e-a4b5-6cfa6afa39b2","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.648078Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:1412956aa26b0d494b61c41640e4af2fcd525aa51560c398077d37de1e76ebad","observation_id":"b6a34e31-5b15-4a94-9e97-50164c1a1eed","resolution":{"observed_at":"2026-08-06T12:15:05.155709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.129087Z","title":"Forget-me-not: Learning to forget in text-to-image diffusion models","venue":null,"work_id":"45f43cb5-18ee-4432-a8a0-7537d2792239","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.653282Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:335c2848649704686746d4e92337dc51172ee5eabc59c072a75d9b3283c883ff","observation_id":"12378b51-dc71-4fc0-b9bf-dcca4dd7797c","resolution":{"observed_at":"2026-08-06T12:15:05.135344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.111452Z","title":"Defensive unlearning with adversarial training for robust concept erasure in diffusion models.Advances in neu- ral information processing systems, 37:36748–36776, 2024","venue":null,"work_id":"80cbea0f-abd1-433b-9dfb-622a357fc972","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.659168Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:00fcfc9ff980159e596f3b539a6cd6721cbfc524340d78da545185342805ee35","observation_id":"e4dc5a63-1986-4ec9-9bc6-105415da8c28","resolution":{"observed_at":"2026-08-06T12:15:05.117293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.082584Z","title":"Holding a sword,","venue":null,"work_id":"b27ce3ca-becf-4830-b954-e86fa587e704","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.663911Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:be48cec6a61125382ea62b3c4a9106f5c17d083c4f5789a659ffc47baf2b2a82","observation_id":"06ba92fe-a740-43fc-b4a9-a9beb506c535","resolution":{"observed_at":"2026-08-06T12:15:05.099083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T03:27:34.849897Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":2,"verified_fuzzy":32},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2507.21985."}