{"as_of":"2026-08-09T07:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3921f84fedf96b8c9d122122830d6a84710900acfceb6a14ca2e314cb7a70520","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T05:48:34.147423Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:32:12.060869Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-05T22:32:12.963581Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"cited_work":{"arxiv_id":"2508.01272","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.01272","snapshot_observed_at":"2026-08-05T22:32:12.963581Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","venue":"cs.CV","work_id":"473078ac-9169-4ec9-8a21-53bdb4719fbd","year":2025},"citing_paper":{"arxiv_id":"2508.06841","last_updated":"2025-08-09T05:48:30Z","snapshot_observed_at":"2026-08-07T07:34:45.871968Z","submitted_at":"2025-08-09T05:48:30Z","title":"Memory Enhanced Fractional-Order Dung Beetle Optimization for Photovoltaic Parameter Identification","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T22:32:12.060869Z"},"links":{"cited_paper":"/paper/2508.01272","citing_paper":"/paper/2508.06841"},"observation_digest":"sha256:6b56a65b385b56cf7957553be30f0d711bc70db85315cbe98f32d75a359476ce","observation_id":"27ea5e29-0bad-4ee4-8757-31ec2f82e629","resolution":{"observed_at":"2026-08-05T22:32:12.968384Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.01272/citation-record","integrity":"/paper/2508.01272/integrity","json":"/paper/2508.01272/citation-record.json","paper":"/paper/2508.01272"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T05:48:29.744486Z","title":"GPT-4 Technical Report","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:29.744486Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:061dfefbd34b612104b3f98313302327fb53d6cad30009c71786d4214ad1f03b","observation_id":"bb069259-c7e2-4dbf-a077-4ea5068bd6ce","resolution":{"observed_at":"2026-08-06T05:48:29.744486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:41.226391Z","title":"Distorting embedding space for safety: A defense mechanism for adversarially robust dif- fusion models, 2025","venue":null,"work_id":"6ef3998b-622a-4398-b88d-c22e0ec6bb3a","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:29.794091Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:c7de61b25ff3e61c02b7ef5ad53fa41743df796f43dacd15fe625a1ae7cc104b","observation_id":"38486688-1ed3-41a7-90b6-eb4ce7091895","resolution":{"observed_at":"2026-08-06T05:48:41.317009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:41.069187Z","title":"Stable Diffusion V1-4","venue":null,"work_id":"166dcdf8-d198-49d1-9e7e-c952d0b3375c","year":2022},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:29.884067Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:70cbc537c5725a50b729c61b58dcab7c045631dea0c52d344038652027e88f2c","observation_id":"67da2993-3a0d-4a4c-916b-3c96b258dd91","resolution":{"observed_at":"2026-08-06T05:48:41.133781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:40.822581Z","title":"Harnessing LLM to attack LLM-guarded text-to-image models, 2024","venue":null,"work_id":"15e89233-a172-49f7-af09-173db09d1971","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.007967Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:8416a995ef97ded173bb8e9436737024f73e63e96202b307b19639b4bfab9931","observation_id":"e022a6f3-4907-4124-82bb-69c168da8add","resolution":{"observed_at":"2026-08-06T05:48:40.971321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:40.659585Z","title":"PRJ: Perception–Retrieval–Judgement for Generated Im- ages","venue":null,"work_id":"8f01f069-9a8d-4173-8070-f8553dff3880","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.096016Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:536c5af2459815f751122fd78db3169dfacae81eca247e4aab3a512f7f073e89","observation_id":"9a0cd097-f404-4df1-8045-736caa94d5b4","resolution":{"observed_at":"2026-08-06T05:48:40.734073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:40.482763Z","title":"Bermano, Gal Chechik, and Daniel Cohen-Or","venue":null,"work_id":"b6fbc807-5ac2-416d-8791-e38414a6a05e","year":2022},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.156459Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:12b27b902c2224f1b650fcd0ea70a3a25ca14ef5c7a635a263d7098892c6cec5","observation_id":"82fea954-9730-4131-83f8-71fb521009a8","resolution":{"observed_at":"2026-08-06T05:48:40.576979Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:40.332695Z","title":"Unified concept editing in dif- fusion models, 2024","venue":null,"work_id":"ef9def56-db7f-4fba-bd7f-9d5726640671","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.319517Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:07c0bf9ec96c3f3a7f113bc062f5098758b5b86027b35211ef307ae519c9d6b2","observation_id":"0dfd38ff-4fcc-4ecd-a844-fadced6e605a","resolution":{"observed_at":"2026-08-06T05:48:40.402214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:40.089241Z","title":"RT-attack: Jailbreaking text-to-image models via random token, 2024","venue":null,"work_id":"49d7c72c-19bd-40d8-b907-1385866cd07d","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.413155Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:53b6a3ed4cd68c41a950e9389ade1da816e2050f6993735d42270a07f03ff961","observation_id":"4d820964-bbf4-4a64-b55e-73ad1b85070e","resolution":{"observed_at":"2026-08-06T05:48:40.246134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:39.962893Z","title":"A comprehensive evaluation framework for deep model robustness","venue":null,"work_id":"b2a59b72-b8bf-43d0-b598-76874496fa55","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.527612Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:403d7937fbe9c97d31a5df5417b1af37e3c7c41503daa3d76043148386573fba","observation_id":"60e79cb4-b9ac-43ee-b8eb-3f1843ac3d1c","resolution":{"observed_at":"2026-08-06T05:48:40.020828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.01528","last_updated":"2025-08-21T05:56:47Z","snapshot_observed_at":"2026-07-06T20:00:14.194746Z","submitted_at":"2024-12-02T14:19:44Z","title":"CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.01528","snapshot_observed_at":"2026-08-06T05:48:30.653628Z","title":"Copyrightshield: Spatial similarity guided backdoor defense against copyright infringement in diffusion models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.653628Z"},"links":{"cited_paper":"/paper/2412.01528","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:d073a14dc1920554d28dc472cc3f6a2279315026fb196c048b76e529a946422c","observation_id":"f17f7327-3834-4370-8fc9-110f48343850","resolution":{"observed_at":"2026-08-06T05:48:30.653628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:39.804005Z","title":"Detoxify, 2020","venue":null,"work_id":"97ac7c1b-a11d-411c-91b8-cf24c7209d3c","year":2020},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.764594Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:c11f8b15aab25841a1df89abda5719e4dc781e05c8d8d9865281e852b3e1ba40","observation_id":"cff10742-0ac3-4f25-a823-d691efe49401","resolution":{"observed_at":"2026-08-06T05:48:39.894828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:39.600904Z","title":"Denoising dif- fusion probabilistic models","venue":null,"work_id":"d0528cb9-1b36-4f21-9579-48143db1b5f2","year":2020},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:30.906446Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:c603bc9e52d44c6a7e43c52b05e7368b90bfb921c3228a984e25c9b542f01ac2","observation_id":"c30dd53a-47a2-4715-94e4-b646d0c680fb","resolution":{"observed_at":"2026-08-06T05:48:39.731265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:39.441581Z","title":"SafeText: Safe text-to-image models via aligning the text en- coder, 2025","venue":null,"work_id":"f3c0ba9e-9fd0-42fd-beea-a369c3138e7f","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.027940Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:e68509f5fa93922c22403d27205a566fca4ef295435ddca8cfd4857b08ec91c1","observation_id":"43d18d3d-9c78-425d-96b5-ef413592dae9","resolution":{"observed_at":"2026-08-06T05:48:39.522459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:39.256895Z","title":"Optimal control and filtering for hierarchical decision prob- lems with h ınfty constraint based on stackelberg strategy","venue":null,"work_id":"17c8aeba-f63b-4541-a09f-60ce2c2a498f","year":null},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.152471Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:2096b5c5a6c005c2cbf06c7b44bb72e1c06dd5d4fb29df77950be471537f805f","observation_id":"3e441cc9-1545-414d-9bbb-79211bccc011","resolution":{"observed_at":"2026-08-06T05:48:39.347088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:39.027220Z","title":"CogMorph: Cog- nitive morphing attacks for text-to-image models, 2025","venue":null,"work_id":"c907aa51-19c4-46fc-8e0e-fdec877a8da4","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.254509Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:558123607a24397ceac6e8d934bb3eeaa3514122460717471922670a501a7cc5","observation_id":"a2b23db5-1b66-425a-bccb-6c5b34fe366f","resolution":{"observed_at":"2026-08-06T05:48:39.136193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:38.849787Z","title":"SafeGen: Mitigating sexually explicit content generation in text-to-image models","venue":null,"work_id":"20c83889-a6b6-41fe-8aa9-703d83e7ded7","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.340113Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:dbecd0fdee3114a5d8464b2601db696ef4691d677af016e416f0f09f6451b5ba","observation_id":"96b2db9f-18fd-4df5-be38-249fcf7a4e8f","resolution":{"observed_at":"2026-08-06T05:48:38.945347Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12075","last_updated":"2024-03-04T13:59:22Z","snapshot_observed_at":"2026-08-06T11:06:04.270520Z","submitted_at":"2023-11-20T02:21:49Z","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12075","snapshot_observed_at":"2026-08-06T05:48:31.458929Z","title":"Badclip: Dual- embedding guided backdoor attack on multimodal con- trastive learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.458929Z"},"links":{"cited_paper":"/paper/2311.12075","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:5f4031eb724f7c894fba88a0d00d477a3df5dfb5a17eabea56498d62aac6d625","observation_id":"530753f8-f3e3-4448-bb1b-c71fe8d952a0","resolution":{"observed_at":"2026-08-06T05:48:31.458929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:38.626407Z","title":"Re- visiting backdoor attacks against large vision-language mod- els from domain shift","venue":null,"work_id":"4198de4c-3a38-4526-a692-7ef656dfb5b0","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.525555Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:7cd1b0a4853b455cfd68934dbd30d7441b7f923dee55c70383006fa9b6c5a785","observation_id":"6fe94069-521a-4401-9671-b154cc9c9e28","resolution":{"observed_at":"2026-08-06T05:48:38.733040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15512","last_updated":"2025-04-26T16:17:55Z","snapshot_observed_at":"2026-08-07T16:00:24.594893Z","submitted_at":"2025-04-22T01:18:42Z","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15512","snapshot_observed_at":"2026-08-06T05:48:31.618529Z","title":"T2vshield: Model-agnostic jailbreak defense for text- to-video models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.618529Z"},"links":{"cited_paper":"/paper/2504.15512","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:d4436e655def968ebe25c0d4aa3c4c5807da09ec0ee08299bd2f5a192b7cf4b2","observation_id":"cb9f7893-f182-42ee-95f0-752afcaef785","resolution":{"observed_at":"2026-08-06T05:48:31.618529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:38.470886Z","title":"Lawrence Zitnick, and Piotr Doll ´ar","venue":null,"work_id":"efa29edd-73db-4313-9180-5f076b2c69f4","year":2015},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.703188Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:3a60b4586fd816f4f67430d225d391bb4f13714b392776922838ff24d3fac041","observation_id":"151435ef-9b65-4af7-9b32-be04a2ce2142","resolution":{"observed_at":"2026-08-06T05:48:38.573891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:38.319467Z","title":"Perceptual-sensitive gan for generating adversarial patches","venue":null,"work_id":"eec30caf-30c6-4568-b7bd-8417ba8c2886","year":2019},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.787206Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:1d61b2c5600f167fd5ec30d6ef763063d5cac6bbf0786e01d3f32c6bbd247924","observation_id":"4c431097-5725-4191-8c38-99b9389b279b","resolution":{"observed_at":"2026-08-06T05:48:38.407918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:38.111173Z","title":"Spatiotemporal attacks for embodied agents","venue":null,"work_id":"42eceab7-e021-4e61-b954-54805d22cd33","year":2020},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.884247Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:0bc253b6144bf4106b35165be840d59d14f10f8928252557e0a978c606f0bc45","observation_id":"9b68c8f7-ff0a-40ab-8322-2089cf3f455b","resolution":{"observed_at":"2026-08-06T05:48:38.218530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:37.917854Z","title":"Bias-based universal adver- sarial patch attack for automatic check-out","venue":null,"work_id":"2b531a41-1091-45e7-b7fb-0b108cae1640","year":2020},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:31.968049Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:b1b558ba17296f123430725baee61197ed7af22055806f4751515d6e6f7f499e","observation_id":"db60c617-1e9f-4ba9-8ff1-369539526bd4","resolution":{"observed_at":"2026-08-06T05:48:38.000619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:37.767568Z","title":"Training robust deep neural networks via adversarial noise propagation","venue":null,"work_id":"3526ccb1-e276-4d05-8326-b4e88310196c","year":2021},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.070140Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:fcc050e9850bac94a51495fe2260210491b06f56325942b2e44ed567050fde9e","observation_id":"37afec21-fd77-433b-805b-a255d99f773f","resolution":{"observed_at":"2026-08-06T05:48:37.829662Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:32.171011Z","title":"X-adv: Physical adversarial object attacks against x-ray prohibited item detection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.171011Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:fbf3c83fbbf05fdf24248044804b104cd7a94afb61c2202577cd021d089e20e0","observation_id":"1982fda3-23ac-437a-9089-7fd7ea48d7e7","resolution":{"observed_at":"2026-08-06T05:48:32.171011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:37.491703Z","title":"Towards defend- ing multiple lp-norm bounded adversarial perturbations via gated batch normalization","venue":null,"work_id":"f7d18db1-50bc-4c54-a18b-a52fba0b9cc3","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.261376Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:6c761b22e86e548a49488bfdb52107e2ee2891a4dfeb1e2fd9b6abe9ad1ddd6f","observation_id":"732ee33d-5524-43c8-8366-9ba96a376f27","resolution":{"observed_at":"2026-08-06T05:48:37.612669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:37.361554Z","title":"Exploring the rela- tionship between architecture and adversarially robust gen- eralization","venue":null,"work_id":"4330374c-27d9-4f86-a1de-e74787582c84","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.355687Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:d15fb3d3f706ab055935886b92314faec191e64983b9d179b6dcdc4af7de57a2","observation_id":"3f3a55c7-3121-4ec5-a812-15a548e7313a","resolution":{"observed_at":"2026-08-06T05:48:37.437037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:37.215575Z","title":"Towards Defending Multiple $$\\ell p$$-Norm Bounded Adversarial Perturba- tions via Gated Batch Normalization","venue":null,"work_id":"0ffb18dd-f0ad-4b12-9dbd-89fdf6834415","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.426742Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:2c4e718f8a8fd8e9d03612ed8e3a16bcfb57e48da1c65aa406b2bff5561db615","observation_id":"d4d8fe23-6cdb-47b3-b9e4-c733246331ea","resolution":{"observed_at":"2026-08-06T05:48:37.309988Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06679","last_updated":"2025-06-17T07:44:28Z","snapshot_observed_at":"2026-08-08T06:57:13.896585Z","submitted_at":"2025-05-10T16:04:52Z","title":"T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.06679","snapshot_observed_at":"2026-08-06T05:48:32.524690Z","title":"Jailbreaking the text-to-video generative models.arXiv preprint arXiv:2505.06679, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.524690Z"},"links":{"cited_paper":"/paper/2505.06679","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:fe5ec07594be7696e7fe2e78bedef7cb4d3d1130525e910fc63b9f126562ab4e","observation_id":"ead45ba1-ca4c-4ead-ac0d-aa866f568297","resolution":{"observed_at":"2026-08-06T05:48:32.524690Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:32.634872Z","title":"Harnessing percep- tual adversarial patches for crowd counting","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.634872Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:75788d409b7f1f1569b3ee6512833915c810b8e613bf8a4dc6cd7ba2bb563fbb","observation_id":"9f14cd5d-6bb2-45d5-817b-0ed73aad7664","resolution":{"observed_at":"2026-08-06T05:48:32.634872Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T05:48:32.726790Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.726790Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:18b28004b7984eb4a48c0151d06e871fe314d9c569c2cb3de000d94d48b3f1f7","observation_id":"f055d482-609d-4964-b76f-6388fbeb6401","resolution":{"observed_at":"2026-08-06T05:48:32.726790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:37.056308Z","title":"OpenAI Moderation","venue":null,"work_id":"a44dd09e-58bb-4f3a-a491-55a83eff8305","year":null},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.799223Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:5f73739e66d6446cba5d04e104a8824d961dbaa899e1236218383bd1e4da1ea4","observation_id":"518bf7e3-e5f0-47f6-b988-947ef77a2406","resolution":{"observed_at":"2026-08-06T05:48:37.132516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:36.863559Z","title":"SDXL: Improving latent diffusion models for high-resolution image synthesis, 2023","venue":null,"work_id":"771f8446-5902-4ac3-bbe0-196fdc37dccc","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.891796Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:715065f1e5ad4c5ca8e9f1d88c7462334180e97878167785c1ebb7c14ba0c2ae","observation_id":"3e8093e0-994f-498e-9c83-644d43cc520b","resolution":{"observed_at":"2026-08-06T05:48:36.968103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:36.659503Z","title":"Safe-CLIP: Removing NSFW concepts from vision-and-language mod- els, 2024","venue":null,"work_id":"bc055643-f59d-42f2-a18b-cb17229ca873","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:32.984230Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:bd4ac7cc6aeec656551766b952dbba698aa20b4ea1d9e6f808d897b3e518ddeb","observation_id":"7293ee84-4f26-4dca-9c2c-4174da49f400","resolution":{"observed_at":"2026-08-06T05:48:36.758729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:36.496381Z","title":"SafeGuider: Robust and practical content safety control for text-to-image models","venue":null,"work_id":"41c3abec-ed12-487c-ae80-3499e7887a94","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.075634Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:03917ab0e25364e7290f9e983c3dbb97b957b37bc74da0cb59639a4bd2bb60cb","observation_id":"38135e8b-c1c3-4e2d-a8db-7346bdbc1c96","resolution":{"observed_at":"2026-08-06T05:48:36.585402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13873","last_updated":"2023-08-16T11:16:15Z","snapshot_observed_at":"2026-08-06T17:36:53.493231Z","submitted_at":"2023-05-23T09:48:16Z","title":"Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models","version":2},"cited_work":{"arxiv_id":"2305.13873","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.13873","snapshot_observed_at":"2026-08-06T05:48:34.493260Z","title":"Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models","venue":"cs.CV","work_id":"7be75f5e-71ca-4cc7-9a73-7d5d454f514f","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.181758Z"},"links":{"cited_paper":"/paper/2305.13873","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:46e03ded1bbbf791eae6ddc1ad71fa85395fbdf7d393ffb7f6342722146053c0","observation_id":"17b10969-4787-478d-98a2-c7ab08bf6577","resolution":{"observed_at":"2026-08-06T05:48:34.536442Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:33.272426Z","title":"Learning transferable visual models from natural language supervision, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.272426Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:fbf5605b3889896fd162380d62a710092465187fc5963cf07017bc3891724eb0","observation_id":"1139b3d6-c60b-42f8-ba16-15b5ace185cb","resolution":{"observed_at":"2026-08-06T05:48:33.272426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:36.253551Z","title":"Can machines help us answering ques- tion 16 in datasheets, and In turn reflecting on inappropriate content?, 2022","venue":null,"work_id":"7c55b2ba-a895-4f59-ba1e-525de3fbbe44","year":2022},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.321928Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:6c80504575b8fc3f590ac87f48c37e3c3ad8a76bf529d0bee83be0ba65e97a25","observation_id":"e4a51ddf-f048-4819-946c-02c8e0ae833e","resolution":{"observed_at":"2026-08-06T05:48:36.364320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:36.104490Z","title":"Safe latent diffusion: Mitigating in- appropriate degeneration in diffusion models","venue":null,"work_id":"3fcc93fe-09f5-43c2-b034-5487f7cab145","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.367197Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:96dd6667b366aff4209588cc752ab441b74011f2ea64be24fce7eebd67db8e17","observation_id":"68a41529-aabe-45f6-8ebf-f39d4fdc863e","resolution":{"observed_at":"2026-08-06T05:48:36.158189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:35.894988Z","title":"Stable Diffusion V2-1","venue":null,"work_id":"81faa7c5-1403-4bc2-bbd5-4d44cf3831cc","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.407934Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:30ba4190134d706083df2c2df5302b96bf38b0f97c68c4e67e0b0554a976f2d2","observation_id":"1a934a30-2a0c-429c-a8a8-942d11468d9b","resolution":{"observed_at":"2026-08-06T05:48:35.955793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:35.700591Z","title":"Robustart: Benchmarking robust- ness on architecture design and training techniques","venue":null,"work_id":"99b83620-39fa-4e32-8e7b-0c7ce3b1c8d1","year":null},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.496224Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:abad9a3d9fc30cbe01bb6f5c4d67df8c9036ef35f49af6d34e6ad2af0cca9ba0","observation_id":"16f922bc-1cca-4dd9-b597-2f97ccada220","resolution":{"observed_at":"2026-08-06T05:48:35.760837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:35.531274Z","title":"Automatic Evaluation for Text- to-image Generation: Task-decomposed Framework, Dis- tilled Training, and Meta-evaluation Benchmark, 2024","venue":null,"work_id":"688b2ecf-2126-4e45-8e05-30b97e9161a8","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.570731Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:9c738b0b98e4c3936613702994e8eaf4fe16beed99c9f65f1ef0520f0ea2e84e","observation_id":"5187bb90-e472-41a5-ba2a-5d5b9ba8a3b8","resolution":{"observed_at":"2026-08-06T05:48:35.599761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:35.370959Z","title":"Dual Attention Suppression At- tack: Generate Adversarial Camouflage in Physical World","venue":null,"work_id":"7bd4681f-4db4-4a14-9c67-fa668ddbc2d0","year":2021},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.643832Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:0ef5c9357f1aeb9e2f153c76f78c640a2d3abfa84ba7b0650fa9d797e782e01a","observation_id":"baf890c3-81ca-4bdf-899a-5ed5fdad5654","resolution":{"observed_at":"2026-08-06T05:48:35.440750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:35.188437Z","title":"AEIOU: A unified defense framework against NSFW prompts in text-to-image models, 2024","venue":null,"work_id":"314c8c13-7138-43bc-b89e-0dd772421ad8","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.694335Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:b68ca0f78a03ee686d65920dd185eab7f0935277f2b4b2cd20575761fdfb8e02","observation_id":"4c0624ec-43ef-472f-b609-52eadebb79eb","resolution":{"observed_at":"2026-08-06T05:48:35.267000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:33.792977Z","title":"Srd: Reinforcement-learned se- mantic perturbation for backdoor defense in vlms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.792977Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:db54dfeb84cea37e0dea0843c2f76d602f77ccbc2bd2e376160189e119bf631f","observation_id":"a7fb43ab-3a40-4445-842c-ef3ef69166f6","resolution":{"observed_at":"2026-08-06T05:48:33.792977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17516","last_updated":"2024-03-30T08:35:17Z","snapshot_observed_at":"2026-07-06T16:54:18.139849Z","submitted_at":"2023-11-29T10:39:53Z","title":"MMA-Diffusion: MultiModal Attack on Diffusion Models","version":4},"cited_work":{"arxiv_id":"2311.17516","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.17516","snapshot_observed_at":"2026-08-06T05:48:34.223137Z","title":"MMA-Diffusion: MultiModal Attack on Diffusion Models","venue":"cs.CR","work_id":"1bf8021d-9417-4ffb-9074-5fa38ec95dce","year":2023},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.847914Z"},"links":{"cited_paper":"/paper/2311.17516","citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:1324bf8b66b411d216ceb28aad02a7c743760ae3d05fc3944b717d98e7e31f2c","observation_id":"00d8bda8-afe0-494d-9806-ec5ab9197925","resolution":{"observed_at":"2026-08-06T05:48:34.307378Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:35.045674Z","title":"SneakyPrompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"23cb4816-e473-45e7-95cd-d7908243ad6b","year":2024},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:33.948993Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:ccb6fd0046dd94876cc903c1189d5ca5bf87c1c7362cb3a90b8290a452950151","observation_id":"72cf3388-3c07-4d1e-a581-994688096c57","resolution":{"observed_at":"2026-08-06T05:48:35.124846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:34.917080Z","title":"Reasoning- Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models, 2025","venue":null,"work_id":"b1fddde8-8704-4ad6-92bd-a9134b10a305","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:34.021068Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:0786735380a5f061b972035b45c0c0629cd2e20c484833efcb5dedaf5997840c","observation_id":"55b1ff26-7523-417a-8a68-75ba4d445c51","resolution":{"observed_at":"2026-08-06T05:48:34.978596Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:34.802023Z","title":"PromptGuard: Soft prompt-guided unsafe content moderation for text-to-image models, 2025","venue":null,"work_id":"b0898230-3b2e-434e-9b27-4f7c3cdc4267","year":2025},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:34.088245Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:4c7efbdba0141b1cebd23224ad48561f1a26f016c0af75bf1795b0ed2e63e88c","observation_id":"2d01184e-ca29-47f0-b0c0-c59fdf938e40","resolution":{"observed_at":"2026-08-06T05:48:34.864677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:48:34.658104Z","title":"Interpreting and im- proving adversarial robustness of deep neural networks with neuron sensitivity","venue":null,"work_id":"416ebf68-88e9-4fc2-a3db-c63dbef46939","year":null},"citing_paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:34.147423Z"},"links":{"citing_paper":"/paper/2508.01272"},"observation_digest":"sha256:5b70170e4c7aa025d0d4fa54fafb56f25c73de5c90728f67693a046157563d06","observation_id":"bc84559f-9693-4db9-9afd-8c08e9240304","resolution":{"observed_at":"2026-08-06T05:48:34.721961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.01272","last_updated":"2025-08-14T03:08:33Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T01:33:10.996177Z","submitted_at":"2025-08-02T09:09:40Z","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":2,"verified_fuzzy":38},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 1 inbound Pith citation observation for arXiv:2508.01272."}