{"as_of":"2026-08-07T06:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6c17ba581d961b42f24e13257704e57c981e44f370b82bd4f6f0eb1fd9a81025","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T05:32:12.226183Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.01605/citation-record","integrity":"/paper/2508.01605/integrity","json":"/paper/2508.01605/citation-record.json","paper":"/paper/2508.01605"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.047410Z","title":null,"venue":null,"work_id":"5cf8539b-129f-4d0f-a4eb-3de824851c7d","year":2020},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.012250Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:024de321ae9dd33dbb9925101c5b4f887f7d6803c559911cc34eddc9f0218576","observation_id":"8a1ab88a-b469-445d-89fc-7cf6ad384020","resolution":{"observed_at":"2026-08-06T05:32:13.052816Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06125","last_updated":"2022-04-13T01:10:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-13T01:10:33Z","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.06125","snapshot_observed_at":"2026-08-06T05:32:12.016766Z","title":"Ramesh, P","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.016766Z"},"links":{"cited_paper":"/paper/2204.06125","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:60bdf5ef33076080afa43fb783c741dd96b4309a1442ca642bca397cb94bacfa","observation_id":"3ac87962-d02a-4863-b7ac-f4daebcd24a3","resolution":{"observed_at":"2026-08-06T05:32:12.016766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.032782Z","title":null,"venue":null,"work_id":"cfb3a070-ac60-43cf-9bf4-262308201149","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.021719Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:211793d3e60c2dd4e2f220f0b1fd680ee983752521c3a59d31f09805f76d03cd","observation_id":"8cf656a7-24f9-4eda-8716-d34d3e7b6a14","resolution":{"observed_at":"2026-08-06T05:32:13.037548Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.018213Z","title":"Rombach, A","venue":null,"work_id":"52821e74-7b9c-4dc0-8fd4-d58a6c7ad5fb","year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.025967Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:55ea1e534d55904f21afbd6ef92337c51db2e1f5a6dc4e59d0e3b3b27256f52e","observation_id":"3fded077-b301-4c25-a3f3-d17c17163719","resolution":{"observed_at":"2026-08-06T05:32:13.022607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01952","last_updated":"2023-07-04T23:04:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-04T23:04:57Z","title":"SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01952","snapshot_observed_at":"2026-08-06T05:32:12.030286Z","title":"Podell, Z","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.030286Z"},"links":{"cited_paper":"/paper/2307.01952","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:3ae542a975d275e9a370dc2677e273a7c752ce4748c08ed44119eaa0d1dc3eb6","observation_id":"a1d5778c-c031-461a-b5bc-a1121c71739b","resolution":{"observed_at":"2026-08-06T05:32:12.030286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.11487","last_updated":"2022-05-23T17:42:53Z","snapshot_observed_at":"2026-07-06T13:12:59.688989Z","submitted_at":"2022-05-23T17:42:53Z","title":"Photorealistic Text-to-Image Diffusion Models with Deep Language Understanding","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.11487","snapshot_observed_at":"2026-08-06T05:32:12.034900Z","title":"Saharia, W","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.034900Z"},"links":{"cited_paper":"/paper/2205.11487","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:274702912a9e8b026463bf68df58a0efaf064c39bad103fa3daad91a1639f27d","observation_id":"e4f2e9f8-ebe5-4108-8414-84c0b9055897","resolution":{"observed_at":"2026-08-06T05:32:12.034900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.003592Z","title":"cancer survivor","venue":null,"work_id":"01217de9-100a-4c93-ae03-a227e4f1db8f","year":2025},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.039729Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:d8684619cf3b162ff9a9ca7e95b65a7b9fc8ceed3a99b28a0a7536479236adf7","observation_id":"e8d6aa47-0e18-491e-bf6d-937dda01e981","resolution":{"observed_at":"2026-08-06T05:32:13.008312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.988253Z","title":null,"venue":null,"work_id":"eb7018d1-832a-4bec-9eb8-bdcabf2eb4fb","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.044054Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:7da758cf8f4b3e3587e26a543e05d1c3df97e33be03254c8cca53617f7713067","observation_id":"e75d94f7-a6c9-4638-bcfa-c85b04ae7462","resolution":{"observed_at":"2026-08-06T05:32:12.993012Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.972812Z","title":null,"venue":null,"work_id":"fe87f788-8fe7-43f5-a6c0-53f863b2a518","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.048284Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:20366b11606b4f035acdc5fa337409f96214d1e5fe3658d716188718c2fc8fef","observation_id":"6727d550-643f-4bc6-aa4a-ee41e4439f70","resolution":{"observed_at":"2026-08-06T05:32:12.977807Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12617","last_updated":"2024-10-23T06:28:19Z","snapshot_observed_at":"2026-08-06T02:11:46.351742Z","submitted_at":"2024-02-20T00:51:05Z","title":"Generative AI Security: Challenges and Countermeasures","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12617","snapshot_observed_at":"2026-08-06T05:32:12.052212Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.052212Z"},"links":{"cited_paper":"/paper/2402.12617","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:b570f77ff48891008f5353204e23f9a35701a6a8867ad0ab0447d5be82f602ef","observation_id":"6c1da230-3aea-4950-b478-aa8847102d52","resolution":{"observed_at":"2026-08-06T05:32:12.052212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.957139Z","title":null,"venue":null,"work_id":"05154c2b-3475-4e62-a17f-db885e0f1c61","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.056594Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:53c3a21f9a0bcceaf420b8fecbbe2826d33c09e0456da49a7ee29ed4976c0b79","observation_id":"b648a029-db78-43ca-8a88-8a32d97edb2f","resolution":{"observed_at":"2026-08-06T05:32:12.962656Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.11441","last_updated":"2025-02-28T04:36:39Z","snapshot_observed_at":"2026-08-05T03:31:35.982163Z","submitted_at":"2024-12-16T04:47:55Z","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","version":3},"cited_work":{"arxiv_id":"2412.11441","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.11441","snapshot_observed_at":"2026-08-06T05:32:12.422653Z","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","venue":"cs.CR","work_id":"bbb2da1b-636c-4248-a048-19ca395fd09c","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.060888Z"},"links":{"cited_paper":"/paper/2412.11441","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:81ccb9dbde0ab700a864653d4c824be78bbc154cc540b91578da1bd943e50312","observation_id":"9823155a-a9f4-4565-924d-9e16c70dfafa","resolution":{"observed_at":"2026-08-06T05:32:12.427666Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.941749Z","title":"Chou, P.-Y","venue":null,"work_id":"94449cdd-728f-4ed6-a71b-2542bd860c0f","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.065432Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:06b5f256a71b2c374c2591374ccb88472d3f99acf021c2d7f18c0ccd2e5bc5ed","observation_id":"5e4b1347-cc38-49d0-b425-1329a020cca3","resolution":{"observed_at":"2026-08-06T05:32:12.946723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.926372Z","title":null,"venue":null,"work_id":"12e710c1-9a57-45d8-b4c8-5a373a74ffda","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.069692Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:db261c38e43dad79d5a901a86865c5932223cc8d1af4151d6b62f8195d445712","observation_id":"575cfbbd-996c-4848-96e8-e0de94265c4d","resolution":{"observed_at":"2026-08-06T05:32:12.931102Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.910804Z","title":null,"venue":null,"work_id":"5baa3457-bed7-4e85-9ec5-d174617babe2","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.073718Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:4d5bf71183b78740f44d8c0b7a665522c6c3c735b950d7768fc5fdaf002afb75","observation_id":"7889afdd-737f-42b7-8cb3-da9d6bca0b83","resolution":{"observed_at":"2026-08-06T05:32:12.916217Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.895248Z","title":"Struppek, D","venue":null,"work_id":"554e10f2-dc67-48b6-b747-2078dca44a20","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.077938Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:a9e0fbc7044ae05f90f1e3806a19381ed5b9b7c1c2b25df0748ab9d80d08df16","observation_id":"c9879c3d-b910-4a78-b48d-d4c2c8e56497","resolution":{"observed_at":"2026-08-06T05:32:12.899942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.880561Z","title":"Chou, P.-Y","venue":null,"work_id":"ad9549c5-3342-4b56-84d3-bbd35e08c2bc","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.082163Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:769d76fbb6cd73de9064ed20c5818e3935812a6c97168dd5e6d4a3600e17e60e","observation_id":"d6f8f200-f862-4876-bb27-c0fc98278a82","resolution":{"observed_at":"2026-08-06T05:32:12.885324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.865418Z","title":"Huang, F","venue":null,"work_id":"c8db72e4-86ec-4373-9338-42ec5d7a7f9b","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.086368Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:05baf98d1d3837cc25357385090188609965206bfff795ea5fffa6f59ff8091d","observation_id":"e3c0ddac-3033-4bd5-a78b-583c8ada22cd","resolution":{"observed_at":"2026-08-06T05:32:12.870400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.849847Z","title":null,"venue":null,"work_id":"5cd7db6b-8cc4-405a-847f-a91b6a5712ce","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.090402Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:239eb195b401d8d0d1ba8600a63f16fb390ddc8a9fa9ee1d348e50a988625eb7","observation_id":"ac7fcfd6-f0f9-4a01-9e77-ad0c3d7323b1","resolution":{"observed_at":"2026-08-06T05:32:12.854771Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.835324Z","title":null,"venue":null,"work_id":"edd8893d-42e9-4138-9d51-b019d88ad776","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.094496Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:55a3c12bb50be834f46b0ca85b9ebfb2cf6469838695d2748a949ddc07f8a0fe","observation_id":"1ffe6d0d-0c37-443b-bf2e-d4aa1e381661","resolution":{"observed_at":"2026-08-06T05:32:12.839875Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10718","last_updated":"2023-08-23T13:56:52Z","snapshot_observed_at":"2026-07-31T14:37:50.657468Z","submitted_at":"2023-08-21T13:39:04Z","title":"Backdooring Textual Inversion for Concept Censorship","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.10718","snapshot_observed_at":"2026-08-06T05:32:12.098732Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.098732Z"},"links":{"cited_paper":"/paper/2308.10718","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:57a6050e6c84315bd40cfe970242583cf9a9163d94c1beafd851741fb342ca85","observation_id":"74fbb961-182f-4fb7-9150-2d1a5fae3182","resolution":{"observed_at":"2026-08-06T05:32:12.098732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.820462Z","title":null,"venue":null,"work_id":"56531db3-4d1b-44a5-a030-d7977c5773be","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.103002Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:776daead59fd9fab793a9fbda3f30d69613242972bd932f4a8eeb4944cdccd22","observation_id":"8138b3a4-7e0b-4cbc-add7-248648cf2f1c","resolution":{"observed_at":"2026-08-06T05:32:12.825512Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02739","last_updated":"2024-02-05T05:46:31Z","snapshot_observed_at":"2026-08-04T13:05:39.754475Z","submitted_at":"2024-02-05T05:46:31Z","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","version":1},"cited_work":{"arxiv_id":"2402.02739","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.02739","snapshot_observed_at":"2026-08-06T05:32:12.384625Z","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","venue":"cs.CR","work_id":"2efe3f04-1e7e-4f40-a7c3-cdc20826b39f","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.106811Z"},"links":{"cited_paper":"/paper/2402.02739","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:c5e1b5e82689e43bc6afcbe7640076c2d9f549e0bf04a789e9e910ee9aba01bb","observation_id":"1f0ed2a3-8281-4b5a-8b1f-9f862355aa39","resolution":{"observed_at":"2026-08-06T05:32:12.390433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.805949Z","title":null,"venue":null,"work_id":"32960ed0-b3fd-42b4-a7c6-16aad3f919dd","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.110797Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:8045c6f984813af99b51f9e22ec8c78f6a63d9139c2eb1276f60640e7b14853d","observation_id":"e8995aa3-9d64-4dae-8f76-43fce179e859","resolution":{"observed_at":"2026-08-06T05:32:12.810555Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.790025Z","title":null,"venue":null,"work_id":"a16b123a-d7b6-47b1-8a8c-e571c23b8eb3","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.114935Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:1401af89776599af50059ad55de848ea1fff9723db80a44bf6e84dc8fde90789","observation_id":"045cc1f9-ba1f-43f6-8f31-8a545bc7b5ec","resolution":{"observed_at":"2026-08-06T05:32:12.795162Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15721","last_updated":"2024-08-28T11:36:43Z","snapshot_observed_at":"2026-07-06T19:07:03.089243Z","submitted_at":"2024-08-28T11:36:43Z","title":"Defending Text-to-image Diffusion Models: Surprising Efficacy of Textual Perturbations Against Backdoor Attacks","version":1},"cited_work":{"arxiv_id":"2408.15721","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.15721","snapshot_observed_at":"2026-08-06T05:32:12.359388Z","title":"Defending Text-to-image Diffusion Models: Surprising Efficacy of Textual Perturbations Against Backdoor Attacks","venue":"cs.CV","work_id":"1c8cc149-7860-4621-9e88-2f249acd85bb","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.118776Z"},"links":{"cited_paper":"/paper/2408.15721","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:da3dbdcc4fe534711089346c4e27e5a121fbe35d32691e3984224382261f8eee","observation_id":"d42e9b51-cfcc-4b8f-bf48-9e468202bc5e","resolution":{"observed_at":"2026-08-06T05:32:12.367025Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.775020Z","title":"Radford, J","venue":null,"work_id":"ef76351f-ae19-4cc8-a930-fb9b2989d001","year":2021},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.122808Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:462535765b8b8d0d3c7251deac1297dfdc416fc44db26571c07d3e0ee5dc36b1","observation_id":"f7953152-c8a2-48f7-99d9-0173f9cfca7c","resolution":{"observed_at":"2026-08-06T05:32:12.779526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.760165Z","title":"Sohl-Dickstein, E","venue":null,"work_id":"48cda8ac-0f16-41fa-8afb-ad28e779332b","year":2015},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.126980Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:213930f2e9e7abf437805991dfd9e4dc1ddc7a462a205a18831f8370ce7d4d17","observation_id":"0fb43350-e52c-4b93-a76f-9402b857fc2e","resolution":{"observed_at":"2026-08-06T05:32:12.764628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00637","last_updated":"2023-09-29T05:32:46Z","snapshot_observed_at":"2026-07-30T14:57:15.227452Z","submitted_at":"2023-06-01T13:00:53Z","title":"Wuerstchen: An Efficient Architecture for Large-Scale Text-to-Image Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.00637","snapshot_observed_at":"2026-08-06T05:32:12.130886Z","title":"Pernias, D","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.130886Z"},"links":{"cited_paper":"/paper/2306.00637","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:df95f3af3340cce19cdd9a5fa996d4328df8bffd177fc1037bf4c9b16bfc2590","observation_id":"386213fd-5a87-40b0-8cca-0cb1cd43deb3","resolution":{"observed_at":"2026-08-06T05:32:12.130886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.745509Z","title":null,"venue":null,"work_id":"b876de9d-1e11-4701-8d7d-ec1960713cdb","year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.135165Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:2b806b989c270efe0f819f26636bdfb9c3670eb895768b2501c50e9668fad862","observation_id":"83c7282e-d168-4b2c-8143-b5bab02368b3","resolution":{"observed_at":"2026-08-06T05:32:12.749909Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-06T05:32:12.139185Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.139185Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:9d8506e2747af3abb500155fdea5915452d96cc03bf26dd3827559389c879cb8","observation_id":"62e858b5-c526-4f33-bcb5-2e86bbd48dc6","resolution":{"observed_at":"2026-08-06T05:32:12.139185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.731109Z","title":null,"venue":null,"work_id":"c06905b9-2717-4008-a4cd-963b2e66ec4b","year":2018},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.143357Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:2b8f576685ec0ea94d22aa07c40d13a1887be63f5ecfffb16041ea14287983cc","observation_id":"0f482e94-c295-4e64-b7ec-3a6c33f4d3fa","resolution":{"observed_at":"2026-08-06T05:32:12.735546Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.716881Z","title":"An, S.-Y","venue":null,"work_id":"a9518516-6df9-49d2-b054-6840fa1dbfe5","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.147389Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:809bed59a081ecc90788b3e921990fb053b54449b50628d4f44be546abea3047","observation_id":"51494fbc-eeec-4292-a008-ba53ac1e3bfe","resolution":{"observed_at":"2026-08-06T05:32:12.721324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.702406Z","title":null,"venue":null,"work_id":"3d388998-55b2-4efd-bd3e-cc6d870e6bb7","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.151713Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:b37ef1e23cd4be3e30bd266c10b76d8d9c1202ec7b71a720c6a47c1f0cf6e362","observation_id":"a999f37b-bd35-480b-8b99-faa2d2c27dc0","resolution":{"observed_at":"2026-08-06T05:32:12.707127Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.688523Z","title":"Vaswani, N","venue":null,"work_id":"0a526cd2-c986-4cee-bb80-ad42c09808df","year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.155584Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:66602c5ccfaf4c529d70e923a9a4cd8d419b8b8a35b69c8951cb447b9dbb028e","observation_id":"bab6ce5e-8557-4792-ac33-b2eaa1f8d614","resolution":{"observed_at":"2026-08-06T05:32:12.692793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-06T05:32:12.159626Z","title":"Dosovitskiy, L","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.159626Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:5c46114ee37e0d31fb838bf1b151dce0d0fb9c59c529c4a375fc18151ea60ccd","observation_id":"1ac4efb7-622f-4e32-9864-4a306db17d33","resolution":{"observed_at":"2026-08-06T05:32:12.159626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.674358Z","title":null,"venue":null,"work_id":"42afd32d-a9e2-4b68-ac26-3ed6a88103c3","year":2016},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.163845Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:5399b1795a2a92916c03320dde095a95db4234552fe92a7b3108e323b64da59b","observation_id":"a70b095b-e2db-4414-a192-7b3a50a190fa","resolution":{"observed_at":"2026-08-06T05:32:12.678885Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-07-06T05:47:27.191725Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T05:32:12.168002Z","title":"Madry, A","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.168002Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:76209295d3876585bdaadf1c16b691d3f4403a37df78c84f32b10244a2c25229","observation_id":"6c099b5a-9637-483b-925c-f0fea15b538c","resolution":{"observed_at":"2026-08-06T05:32:12.168002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.659563Z","title":"Team, ``Flux.1: Next-gen text-to-image model,'' https://fluxdev.net/flux-1-dev, 2024","venue":null,"work_id":"b972c294-2ba0-4c5a-baeb-7cc137d3cfec","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.172343Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:4b1e50e29da330dc514872a9366e3674de16ababc90830a874a626c4f5d3f3db","observation_id":"7b3f10fe-88bf-43f0-aea2-a3b0620bcbac","resolution":{"observed_at":"2026-08-06T05:32:12.664420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.642579Z","title":null,"venue":null,"work_id":"f5d0067d-2b15-43d5-8c34-6ec825c01030","year":2009},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.176461Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:d0c7ca01dff2af1a9c2d79650018709bdc9dfff833aa67b7d0eb4b0df31021be","observation_id":"66618bf3-ed13-4969-886c-331344d3b127","resolution":{"observed_at":"2026-08-06T05:32:12.649560Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.627379Z","title":"Zhang, P","venue":null,"work_id":"eec674da-81c4-4b46-94ad-f42ecd8f89b8","year":2018},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.180683Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:7de9645db7db194620a097c46f282c5608aa82725c9e781865ff9eae43279862","observation_id":"be49e92c-124c-49b3-bd27-9a1972dd50b9","resolution":{"observed_at":"2026-08-06T05:32:12.631937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.612681Z","title":null,"venue":null,"work_id":"50f66202-4415-4530-a0df-811419007fbf","year":2004},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.184876Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:d189a404b1fe6951c2301978ef7add531de43e34c16c2568a23886bf1dc6213e","observation_id":"89fbe24a-f6a6-4c16-ab93-323e72f72746","resolution":{"observed_at":"2026-08-06T05:32:12.617096Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.597423Z","title":null,"venue":null,"work_id":"23f2b7df-6cd2-4607-9dc6-ca5361144845","year":2003},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.189139Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:edbdfffc40cae1b859c1a402f9f401e2ca479b0b07468202ed0cb7f6b6a364d6","observation_id":"b15caa99-e7b8-433b-b66e-4fa9e2fd0f0d","resolution":{"observed_at":"2026-08-06T05:32:12.602297Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.580906Z","title":"Heusel, H","venue":null,"work_id":"212daf8b-5fab-480f-9be0-e51e54e63b61","year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.193233Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:0cd3232a6e0c2bec22fd65dac7a0ad1d764435dabd312cf512b9dd72baf07a4d","observation_id":"5e72579b-b592-44f3-8efe-78e7556d3ec8","resolution":{"observed_at":"2026-08-06T05:32:12.586531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.563510Z","title":null,"venue":null,"work_id":"53765ff7-3a79-4fe7-bae9-3cd8d931b3ff","year":2014},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.197421Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:13b7948746ddd17fbbcad402b42206e7602a46a28db4af2f9baccf51c3cc977d","observation_id":"641cbed8-63df-4c24-af99-94dd7a3dd351","resolution":{"observed_at":"2026-08-06T05:32:12.568909Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.547165Z","title":"Seitzer, `` pytorch-fid: FID Score for PyTorch ,'' https://github.com/mseitzer/pytorch-fid, August 2020, version 0.3.0","venue":null,"work_id":"5b4ef294-4af2-4924-9ae6-dce10d8eeea0","year":2020},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.201509Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:a3f85090b4997e5cf8d27e7a7233249a5f33d08c7040694fb360d6744f0277a4","observation_id":"0207e73c-1995-4559-8c5d-5b1670c35c77","resolution":{"observed_at":"2026-08-06T05:32:12.552685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.04037","last_updated":"2024-09-12T19:54:37Z","snapshot_observed_at":"2026-08-05T10:56:57.750412Z","submitted_at":"2022-12-08T02:21:47Z","title":"Demystifying Prompts in Language Models via Perplexity Estimation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.04037","snapshot_observed_at":"2026-08-06T05:32:12.205549Z","title":"Gonen, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.205549Z"},"links":{"cited_paper":"/paper/2212.04037","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:896748b62139edb793cb4e599560a97ad8efd5450bd0baed22ab6d158b407bc5","observation_id":"2fff2e03-5f19-446d-8d9d-055967915801","resolution":{"observed_at":"2026-08-06T05:32:12.205549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.531100Z","title":"Dholakia, ``betterprompt: Test suite for llm prompts,'' 2022","venue":null,"work_id":"43d65d33-6215-42bb-9449-e23828c2f556","year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.210071Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:de9a02c253bbbabb461e35bd31e891128dd04b98e8187e68c57d4ecd8460ee9d","observation_id":"d6ea3227-344d-478d-9879-da3c7b1ebad1","resolution":{"observed_at":"2026-08-06T05:32:12.535981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.05909","last_updated":"2020-10-05T00:10:24Z","snapshot_observed_at":"2026-08-05T07:11:54.244493Z","submitted_at":"2020-04-29T21:33:35Z","title":"TextAttack: A Framework for Adversarial Attacks, Data Augmentation, and Adversarial Training in NLP","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.05909","snapshot_observed_at":"2026-08-06T05:32:12.214353Z","title":null,"venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.214353Z"},"links":{"cited_paper":"/paper/2005.05909","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:10056eac029d28927dd9c6a16250433186ccbfff6b97caa82f49227929ccbd68","observation_id":"28e3c9ee-2ecf-4ca4-a0bf-7e76b20cf39e","resolution":{"observed_at":"2026-08-06T05:32:12.214353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.516059Z","title":"Tiedemann, M","venue":null,"work_id":"01a17a15-47ef-4ca9-a5ac-6d136b56deb4","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.218870Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:3d7227b35ab26c934a2905c2030bfd85ac8ce5db7b076f2a4a4cffa039d75d8f","observation_id":"8da11a1a-974b-4852-b46e-b98e8331ac20","resolution":{"observed_at":"2026-08-06T05:32:12.520539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.500643Z","title":"Tiedemann and S","venue":null,"work_id":"235f3eba-bc2e-4f8b-b5a3-ac298163935f","year":2020},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.226183Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:5f83d70b6604c4e836929024483ef728de94db4c8159d4bc6b7b8c72e93a3cec","observation_id":"4f73f094-5e68-4c75-b331-2f6975854663","resolution":{"observed_at":"2026-08-06T05:32:12.505509Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T05:32:10.145767Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":3,"verified_fuzzy":17},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:2508.01605."}