{"as_of":"2026-08-08T18:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9af017f62bd1682c698a84285c5a86566b47f31fbbb131e4ad986fb1c4fd9029","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:42:52.464160Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.03696/citation-record","integrity":"/paper/2508.03696/integrity","json":"/paper/2508.03696/citation-record.json","paper":"/paper/2508.03696"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:57.256199Z","title":"Available: https://openai.com/index/ dall-e-3/","venue":null,"work_id":"1596e1da-b7af-4c65-9d3d-c3e7be5a0f4e","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:47.970036Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:2e8dc0397ea6637437edcb87355ae53be4b47fbae9121ba292d8df4812df7d7a","observation_id":"063901a5-f083-4d37-979a-23aac4fdc43d","resolution":{"observed_at":"2026-08-06T17:42:57.348575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:57.125000Z","title":"Available: https://openai.com/index/ gpt-4/","venue":null,"work_id":"aad17c18-3031-46ef-82e1-9ff3ae2e7bad","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.050324Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:cedd4335e8229cfc1d10b0878cf755dc36a305f9f56f7add069cf0f21d7d4a5b","observation_id":"a1626c68-efef-4b1c-b3c5-2080fb5e9dd0","resolution":{"observed_at":"2026-08-06T17:42:57.192526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:57.001998Z","title":"Available: https : / / runwayml","venue":null,"work_id":"35d6b171-5bdd-449b-b36d-90eed7863d48","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.195421Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:330f40550215a6f79a613a43d47388c13152982e721bcd721d4ce1bdc69d9171","observation_id":"7a270a45-246f-4d71-9b1a-089d4052125f","resolution":{"observed_at":"2026-08-06T17:42:57.052310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.846117Z","title":"Available: https://designer","venue":null,"work_id":"aeefd06c-0f8e-4103-81ee-81b3e00a91e8","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.294026Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:5e41624ee25e53c899ca0ed8d11ea7b0b43183a5e0fa16d6cedf3a59567fd0e1","observation_id":"493c9c2b-ba86-4573-bd9f-b79e1dac2601","resolution":{"observed_at":"2026-08-06T17:42:56.912119Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.691876Z","title":"Available: https://www.midjourney","venue":null,"work_id":"059e7328-9f5b-4f38-8196-3d4bdbace77c","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.467090Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:281206a3879a635c3d5f68fb3403255a69464beb763694cb437a1aa4f63c6ecd","observation_id":"2d42bdc9-2ccb-4c60-b344-ba5177e4811f","resolution":{"observed_at":"2026-08-06T17:42:56.754644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.509655Z","title":"Available: https://github.com/PixArt- alpha/PixArt-alpha","venue":null,"work_id":"35179b22-3277-4f1c-8906-b03b9c7cda8c","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.618799Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:a236c37a0d5c4f2e2db04e231cf1ef55ea0fda8e4e921d1131ce79a55e91a663","observation_id":"41a0b158-4aed-47c7-9531-c9ff179f7037","resolution":{"observed_at":"2026-08-06T17:42:56.617825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.397645Z","title":"Available: https:// huggingface.co/CompVis/stable-diffusion- v1-4","venue":null,"work_id":"6657c692-e3da-44cd-8094-70f4d971b602","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.733100Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:03b56f3b753b4d70519ed34f1d70b6b28b00180a46f60aa3101463b98ac44857","observation_id":"faf69e01-7acb-4db8-98b0-3830e3df243c","resolution":{"observed_at":"2026-08-06T17:42:56.448036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.272912Z","title":"Available: https: //huggingface.co/stable- diffusion- v1- 5/ stable-diffusion-v1-5","venue":null,"work_id":"3e95d9e2-c60c-4ea3-8d6f-e8057bd664a0","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.820848Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:65a024123460f02f1a5d8382ee57cf5ad3f2dfea5179cf2d03663da0b8916dc7","observation_id":"c3438bb7-748a-4e3c-ba14-89646d1d4b0e","resolution":{"observed_at":"2026-08-06T17:42:56.322817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.134823Z","title":"Available: https://stability.ai/","venue":null,"work_id":"650e876d-d1be-4d10-9bb7-35a21cac414e","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.903971Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:a80a2e39e5e23384feee4a0aa9e6d077263f723b3bfd1056250cce58d370bab0","observation_id":"a995a7d2-0e47-4d68-85b6-3dfe54f9f09d","resolution":{"observed_at":"2026-08-06T17:42:56.225753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02025","last_updated":"2024-03-15T15:28:11Z","snapshot_observed_at":"2026-07-06T16:27:07.155310Z","submitted_at":"2023-10-03T13:05:36Z","title":"DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Training","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02025","snapshot_observed_at":"2026-08-06T17:42:49.015546Z","title":"Deepzero: Scaling up zeroth-order optimization for deep model train- ing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.015546Z"},"links":{"cited_paper":"/paper/2310.02025","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:4cd955eaf2d2d0f8d0ab3316594280bc7e51aaa9bcc165b2aacdea8a3e05602a","observation_id":"8c03a571-4072-4ece-9fa7-e8be4a1c272f","resolution":{"observed_at":"2026-08-06T17:42:49.015546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.017618Z","title":"Zoo: Zeroth order optimization based black- box attacks to deep neural networks without training substi- tute models","venue":null,"work_id":"a04d41fb-c514-44b8-a068-6705881ce12e","year":2017},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.139634Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:01a95b9e85da4f9b0591db92b4a7315f2a2f08523709c6e6a8cc1c4a9c95b43a","observation_id":"4489bc2a-d1bd-464d-b9c9-bb36e3b0ac33","resolution":{"observed_at":"2026-08-06T17:42:56.070241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.860975Z","title":"Zo-adamm: Zeroth-order adaptive momentum method for black-box optimization.Ad- vances in neural information processing systems , 32, 2019","venue":null,"work_id":"81750800-6949-4327-9b68-37a41e64198f","year":2019},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.308386Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:5247d02645bb5fbd2f069271f708c16c7529b22b4c22a6d4d5d3f5579e54882d","observation_id":"38f51d3d-72d3-4e0c-959d-5ddbe45480ab","resolution":{"observed_at":"2026-08-06T17:42:55.950391Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.731921Z","title":"Gradient-based optimizer (gbo): a review, theory, variants, and applications.Archives of Com- putational Methods in Engineering, 30(4):2431–2449, 2023","venue":null,"work_id":"a365e4bb-8b9a-4716-9dd5-bc699e47d2bc","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.395675Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:5bad36da33d8796059696f3057327c26e2d1ce130493150ca3b514d6a9e11521","observation_id":"3849baf5-7b27-45b4-8d63-568e1f19d147","resolution":{"observed_at":"2026-08-06T17:42:55.791637Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:49.475618Z","title":"Erasing concepts from diffusion models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.475618Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:1ff0018d95484d382f68a67acb79e4ee04a9836d796ba57bf69b8ba7510e311c","observation_id":"e31b2771-688a-4e1e-b712-85fb672ac015","resolution":{"observed_at":"2026-08-06T17:42:49.475618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.570396Z","title":"Denoising dif- fusion probabilistic models","venue":null,"work_id":"2c22262c-b28f-4be0-96f8-f4376d5da009","year":2020},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.546843Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:4851290e1a72f41e00841aaa7c95c7e9ed996eda5b6a357af47e1a6f66688f67","observation_id":"690ce41f-88dc-4f37-be3a-9deb043dfd07","resolution":{"observed_at":"2026-08-06T17:42:55.646942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.440367Z","title":"Bert: Pre-training of deep bidirectional trans- formers for language understanding","venue":null,"work_id":"28458344-8e1c-4230-ad46-6d74348c7303","year":2019},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.638110Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:245dc07fb6944423e9374af3a7aea27bb4f6e443d78e38a466dcb7416c215e84","observation_id":"8870deda-0e87-457b-a5dc-aa444899c629","resolution":{"observed_at":"2026-08-06T17:42:55.492903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-06T17:42:49.744177Z","title":"Adam: A method for stochastic opti- mization","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.744177Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:50fe8bdeccf1a469a47308a4a77afcd88eede9b371f711783f325d257375b8f4","observation_id":"9272964f-f1a3-43c9-960d-f4f890befda1","resolution":{"observed_at":"2026-08-06T17:42:49.744177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.309289Z","title":"Ablating con- cepts in text-to-image diffusion models","venue":null,"work_id":"6a4b05a6-985c-4b03-8316-93f22c1c2224","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.853250Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:7c7112682db578a3aa4d03fe3422708cd1bf7c54a9b9f7d2d71d913762074780","observation_id":"4cec8742-fc15-46d3-8b6f-c238782b0023","resolution":{"observed_at":"2026-08-06T17:42:55.378751Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.149387Z","title":"Holis- tic evaluation of text-to-image models","venue":null,"work_id":"d2b514ba-9c49-4c4f-9372-78dae3c8c7e6","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.980556Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c9dd72a673f687685485089a5b43f8a4a9d3255659c5f9cb59c65532a9c69371","observation_id":"bebe9a38-c3b0-47c3-b839-9ee8559b4b36","resolution":{"observed_at":"2026-08-06T17:42:55.231618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.041121Z","title":"Adversarial example does good: Preventing paint- ing imitation from diffusion models via adversarial exam- ples","venue":null,"work_id":"5c738984-8440-41fb-98ae-9cda2866b7d2","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.103028Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:871e23cd19dff60156341fb7b90e8b6be463f4d274c7e4a954fcdd250a047702","observation_id":"692ee038-a9c7-4109-823c-691f454bcc42","resolution":{"observed_at":"2026-08-06T17:42:55.090674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.907201Z","title":"Riatig: Reliable and imperceptible adversarial text- to-image generation with natural prompts","venue":null,"work_id":"05653993-72ef-4ef9-8b83-1f711b2b774f","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.165123Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:9aaba6b36717baee5f603e88762db49f33e577bf94c846aa3627ddabcaac05de","observation_id":"e1dadfd2-59c9-425c-a3a1-3165ec49412a","resolution":{"observed_at":"2026-08-06T17:42:54.974178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00974","last_updated":"2023-11-29T21:50:06Z","snapshot_observed_at":"2026-07-06T15:36:45.014921Z","submitted_at":"2023-06-01T17:59:00Z","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","version":5},"cited_work":{"arxiv_id":"2306.00974","doi":null,"metadata_source":"pith","pith_arxiv_id":"2306.00974","snapshot_observed_at":"2026-08-06T17:42:52.752048Z","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","venue":"cs.CV","work_id":"68a24a3f-6d6e-4afd-bbb2-be1d023743a4","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.321526Z"},"links":{"cited_paper":"/paper/2306.00974","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:a48145d0578cdeb50218b75b1c7b22c8a0efd73965a517b3c5d6d0900a08cb9d","observation_id":"1221ac06-09d5-47d5-9c54-78ff6db22c40","resolution":{"observed_at":"2026-08-06T17:42:52.786197Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.08031","last_updated":"2024-08-18T18:53:16Z","snapshot_observed_at":"2026-08-08T17:16:37.924010Z","submitted_at":"2024-04-11T17:59:52Z","title":"Latent Guard: a Safety Framework for Text-to-image Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.08031","snapshot_observed_at":"2026-08-06T17:42:50.420749Z","title":"Latent guard: a safety framework for text-to-image generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.420749Z"},"links":{"cited_paper":"/paper/2404.08031","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:49bf9a1f7311e32593c8c06f8e9531c6837424319af36800eb1a51f6d0da5e20","observation_id":"39a5d987-e454-4bc9-a1b1-8daa0901da5c","resolution":{"observed_at":"2026-08-06T17:42:50.420749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.778838Z","title":"Black box adversarial prompting for foundation models","venue":null,"work_id":"1964b604-89fc-4038-bc08-fb178965997e","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.514413Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:550a7a3bbb8d6d0d7e0a43e97b676cc735b851fb36377442c2333875d4282322","observation_id":"00f538af-167f-487f-b98b-73a90d838be9","resolution":{"observed_at":"2026-08-06T17:42:54.855732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01952","last_updated":"2023-07-04T23:04:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-04T23:04:57Z","title":"SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01952","snapshot_observed_at":"2026-08-06T17:42:50.602966Z","title":"Sdxl: Improving latent diffusion mod- els for high-resolution image synthesis","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.602966Z"},"links":{"cited_paper":"/paper/2307.01952","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:ddad3bdfb8721025d61d2cd121f01fb42f6b957e56a8416af75c9e60c5f4b160","observation_id":"92a23aba-3783-4918-9459-625d388e01f1","resolution":{"observed_at":"2026-08-06T17:42:50.602966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.657344Z","title":"Unsafe diffusion: On the generation of unsafe images and hateful memes from text-to-image models","venue":null,"work_id":"67bb0d95-f9b7-4edd-a6ec-4c39fe28371d","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.674069Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:a1938b1db350424ce331ccd8367a5a4f560bf9b0c8085fc58da5980349ec761b","observation_id":"9f0d8cf7-f718-4853-93ae-bab2b60daf42","resolution":{"observed_at":"2026-08-06T17:42:54.718348Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:50.766061Z","title":"Learning transferable visual models from natural language supervi- sion","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.766061Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c31af4a594cfa03dca910a316247687f442acf8c32272a145b27f331a288f06d","observation_id":"e58977e1-2072-460b-ab1a-3185514cdfdf","resolution":{"observed_at":"2026-08-06T17:42:50.766061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.531383Z","title":"Exploring the limits of transfer learning with a unified text-to-text transformer","venue":null,"work_id":"ec6a2541-ae40-48f6-a186-378e496d0586","year":2020},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.836771Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:0dd404d2b6203c939f451a53ad085e88ded1d6013662610efcc0a3b0ed6167c2","observation_id":"928aeee2-c7ab-4f5d-bdd4-23b6b151e7e7","resolution":{"observed_at":"2026-08-06T17:42:54.576280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-06T17:42:50.883150Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.883150Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:ffabfebf925c6318e272ea25e06efa2a406500f4dd9d48157188a5878c221b2b","observation_id":"d30b25dc-9f4c-4de3-884c-2cbb25a12374","resolution":{"observed_at":"2026-08-06T17:42:50.883150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:51.014461Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.014461Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:67a3507384cfaf6414a9d9b784df5aae5b07b39c11de5158c28769482d1add7c","observation_id":"77cf377b-f499-45c1-a775-ea4f0e1c4724","resolution":{"observed_at":"2026-08-06T17:42:51.014461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:51.128891Z","title":"Photorealistic text-to-image diffusion models with deep language understanding","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.128891Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:23659ff34c561f2334c3d58ba9945f4dba05c32f1cb7b9e702af63a59bfbdf09","observation_id":"b9f2733e-4ceb-4644-93b3-add87972ef67","resolution":{"observed_at":"2026-08-06T17:42:51.128891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.372127Z","title":"Raising the cost of malicious ai-powered image editing","venue":null,"work_id":"cc14d525-f4b7-420c-8b9a-e9773a22677c","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.254348Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c7f55684c6df97e922aed292ef06dfde1951f8d9156029bb06fd6da392e85fa0","observation_id":"a8876b3f-0ae2-4432-9a6f-67b8793c711c","resolution":{"observed_at":"2026-08-06T17:42:54.452602Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.207227Z","title":null,"venue":null,"work_id":"66ef69e6-0806-48a0-9ba3-7501de584a6e","year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.420180Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:e9f00423bfaa5835b1c54e3a7e8264db1d7c9a1f6e4356a50b828a5f777c6635","observation_id":"e0706ea0-663b-4d2a-86f8-8584b6e9fbb4","resolution":{"observed_at":"2026-08-06T17:42:54.297679Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.072981Z","title":"Safe latent diffusion: Mitigating inappro- priate degeneration in diffusion models","venue":null,"work_id":"6afc27f4-fb18-4fd6-8f10-f64016e9b88e","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.518884Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:e0c4bf1f20d3b1e701c0227a511a8800f97906dfa2ed4f8706da8477fc6af1d2","observation_id":"45e93b59-e40b-492a-a431-769583854207","resolution":{"observed_at":"2026-08-06T17:42:54.140158Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.885457Z","title":"Introduction to stochastic search and opti- mization: estimation, simulation, and control","venue":null,"work_id":"d14005f2-361e-42b4-85a1-75a247396126","year":2005},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.631335Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:49437ca7cf206f86d14461eb91abf0479bf2bbb7ce70d8ba90de5937757eb4e1","observation_id":"467330f9-236a-4507-820c-1edc63c5f567","resolution":{"observed_at":"2026-08-06T17:42:53.961806Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.781331Z","title":"Stochastic gradient descent as approximate bayesian infer- ence","venue":null,"work_id":"a20bdd34-d750-4950-b242-5311d9995c17","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.769123Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:14e55e05a9a71f5d42573f6f9da5e8423bce5c05a1ce925fc2f4bec885bd6197","observation_id":"b6ae0261-a326-439a-81f2-36746eea530e","resolution":{"observed_at":"2026-08-06T17:42:53.819640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.628892Z","title":"Ring-a-bell! how reliable are concept removal methods for diffusion models? In International Conference on Learning Representations, 2024","venue":null,"work_id":"1fd8a973-ce96-4b21-9543-b8f52fe60268","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.930861Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:f338b2edc52005dd5a859c18e0af3a0b2c7883cc46a876b4ed4cd76eb4b33180","observation_id":"aa34c804-60ad-44a6-85b8-d1126ef0dd81","resolution":{"observed_at":"2026-08-06T17:42:53.723429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.496256Z","title":"Mma-diffusion: Multimodal attack on diffusion models","venue":null,"work_id":"48373130-4873-448d-86e7-2f1feaaf7ea5","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.032967Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:6681ebacd63b883a7e6e116d718bcc14e0dc65a9387c7d062174fedae3aec8f4","observation_id":"e50eaccb-ada0-4b20-95ce-25a54e47e21b","resolution":{"observed_at":"2026-08-06T17:42:53.565636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01446","last_updated":"2024-10-30T05:56:30Z","snapshot_observed_at":"2026-07-06T17:38:47.079643Z","submitted_at":"2024-03-03T09:04:34Z","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","version":2},"cited_work":{"arxiv_id":"2403.01446","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.01446","snapshot_observed_at":"2026-08-06T17:42:52.579790Z","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","venue":"cs.CV","work_id":"d2987fbb-e0b1-4e91-a844-acd29a1ee87e","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.132859Z"},"links":{"cited_paper":"/paper/2403.01446","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:ab2005c39011338d154c766f571956ba5fddcfeea49a52d78b5815c033437292","observation_id":"c80bec2f-1902-442b-89c8-b6d8dbb8a43c","resolution":{"observed_at":"2026-08-06T17:42:52.628693Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.312176Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"dd7df38b-fbe6-4a63-841d-e3930519c8d0","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.188077Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:37b1aa537a24e856e844611761c4ae69e5b8cc0b20a8df3b4d5c9a937e3d7792","observation_id":"366d2565-c5ae-470b-919a-d9b275359518","resolution":{"observed_at":"2026-08-06T17:42:53.418154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.188537Z","title":"Forget-me-not: Learning to forget in text-to-image diffusion models","venue":null,"work_id":"49a965bb-9169-4614-9740-13b15f2ba94b","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.230415Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:f9f3a01f5c28b42a89296513237048ba58607210495a785761b459ce57e643e5","observation_id":"d2aa8b83-e33c-408a-8983-92714e29458d","resolution":{"observed_at":"2026-08-06T17:42:53.250004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.08257","last_updated":"2023-06-14T05:47:15Z","snapshot_observed_at":"2026-08-01T17:26:27.564368Z","submitted_at":"2023-06-14T05:47:15Z","title":"On the Robustness of Latent Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.08257","snapshot_observed_at":"2026-08-06T17:42:52.277702Z","title":"On the robustness of latent diffusion models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.277702Z"},"links":{"cited_paper":"/paper/2306.08257","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:71fe0045e0bc961824fb9631d411aac5d873bad44e02f7671ac7c460b200d732","observation_id":"5ee77b2b-2460-49c1-a2a4-5bcd26ac6466","resolution":{"observed_at":"2026-08-06T17:42:52.277702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.11868","last_updated":"2024-07-07T23:10:59Z","snapshot_observed_at":"2026-07-06T16:34:54.717394Z","submitted_at":"2023-10-18T10:36:34Z","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.11868","snapshot_observed_at":"2026-08-06T17:42:52.349485Z","title":"To gener- ate or not? safety-driven unlearned diffusion models are still easy to generate unsafe images","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.349485Z"},"links":{"cited_paper":"/paper/2310.11868","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:6e448f8b28c8ee0f1e4cd72f9540b31ae76fae47e586bb143fdb7079ac146dde","observation_id":"615fcfd1-3c5e-437e-a0ae-cc0ac3553150","resolution":{"observed_at":"2026-08-06T17:42:52.349485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.066256Z","title":"Random learn- ing gradient based optimization for efficient design of photo- voltaic models","venue":null,"work_id":"72cbe64f-df8e-4cdc-b1f6-008fda909329","year":2021},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.383644Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:307d8538581812b690b2bae757a61a30d567e72ffb78e63ed5dbd34526ae8b08","observation_id":"94b28126-2f9f-4dc8-897f-09e5a25baa82","resolution":{"observed_at":"2026-08-06T17:42:53.118301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:52.957178Z","title":"A pilot study of query-free adversarial attack against stable diffusion","venue":null,"work_id":"28e12c25-4437-43f7-a4ba-e9b1fa4a1fd5","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.464160Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:7c06ce290686f8c82aa3f32224d6d2737b2f2fb16080ec927ca52a4149c43cbf","observation_id":"915b913b-1088-43fa-98bf-99b78b17c389","resolution":{"observed_at":"2026-08-06T17:42:52.996915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T23:29:12.449581Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":2,"verified_fuzzy":31},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2508.03696."}