{"as_of":"2026-08-23T04:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cb1e1aec7c465bd9282bb2e2fb324994e5835c634ba0cc5eb2a8c2b35e590500","coverage":[{"denominator":23,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":23,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T18:37:51.388667Z","state":"measured"},{"denominator":23,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":23,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2512.04554/citation-record","integrity":"/paper/2512.04554/integrity","json":"/paper/2512.04554/citation-record.json","paper":"/paper/2512.04554"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.280952Z","title":"Docvqa: A dataset for vqa on document images,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.280952Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:8dc9ee5b287ae33663a7a1e1c991e2cedeb24b54048385299969922a55afafdc","observation_id":"14d836b5-fd69-44da-929f-dff6fc0b3669","resolution":{"observed_at":"2026-08-03T18:37:51.280952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.286936Z","title":"Pix2struct: screenshot parsing as pretraining for visual language understanding,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.286936Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:e1aa50cfdf84e3efd274fcdae1bb81af438642cf553d8968df291f0c2bd55e90","observation_id":"214d1ff8-1a21-4b16-8b4f-0065be2c91a7","resolution":{"observed_at":"2026-08-03T18:37:51.286936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.291527Z","title":"Ocr-free document understanding transformer,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.291527Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:26de16618e8fd15042d4cd039e49e25f7c33ad88a4a403126422b13885cde4a1","observation_id":"03ca0449-c02f-4df3-b3dd-d1dd02c1eb6c","resolution":{"observed_at":"2026-08-03T18:37:51.291527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.295980Z","title":"Evasion attacks against machine learning at test time,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.295980Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:0a043f6dfb2a7a58e896aff109031d1e8cbab821b6cc9aae48f1ab00fe07f0a3","observation_id":"e386c4ce-98bb-4d13-b1b0-cc2de03eba10","resolution":{"observed_at":"2026-08-03T18:37:51.295980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.300723Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.300723Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:513dc78ec5ce5bab81ef877d2ff0a2c77ba9c153a8c585c3a76851583dc1e26c","observation_id":"f69f1149-0f4e-415c-a7d1-74ec025cca81","resolution":{"observed_at":"2026-08-03T18:37:51.300723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.305632Z","title":"Scene text visual question answering,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.305632Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:eeab77a2a44b34376b7332347ca634d33199d4a31224a3f7adfc42b6fcf1d863","observation_id":"15dddbde-fd1f-4d0c-aeaf-2626f715b26d","resolution":{"observed_at":"2026-08-03T18:37:51.305632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.311060Z","title":"Wild patterns: ten years after the rise of adversarial machine learning,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.311060Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:ee087b98a1fc7e79fdf8d23cb7450d2409f6e48e74ee0b7b0a2773639b1467bf","observation_id":"55051fe0-dfb5-4ac4-830d-cdb42ed35765","resolution":{"observed_at":"2026-08-03T18:37:51.311060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-16T02:01:26.676409Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-03T18:37:51.315993Z","title":"Adver- sarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.315993Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:a3278cb5f05e061967ddf3035506f48765e07bb2af659fad15eba4af7442c240","observation_id":"ed5b5170-4fcb-469e-a9f4-cc3d7f5b9d16","resolution":{"observed_at":"2026-08-03T18:37:51.315993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.321453Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.321453Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:aa83cb996167a4a2a4858dc19292385840b7bae6c07f50ff55822b0bdb4c2acd","observation_id":"82780bc1-d6f9-46f2-be4b-0f5222c568c4","resolution":{"observed_at":"2026-08-03T18:37:51.321453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.325865Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.325865Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:fd5d6b2e5a4b9bcad8b1a5bc4851f1da223ab275ae16c5acd6778b7facede8b3","observation_id":"16c4f7ac-8ad0-4340-be10-ab948a5664d8","resolution":{"observed_at":"2026-08-03T18:37:51.325865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.330452Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.330452Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:4e080d292d1b3b4f63d6b2fa37589cfac4c25029101058c58f7d86e64bb36012","observation_id":"27c089bb-8082-4e17-8c1c-9d61ba310fbc","resolution":{"observed_at":"2026-08-03T18:37:51.330452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.334838Z","title":"Seeing is not believing: Camouflage attacks on image scaling algorithms,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.334838Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:a0ded4fd248d8db8eb86708fe87a09b3fde251ff4def4180952b4b66ac4dba9f","observation_id":"975baba0-49e2-48ca-ad61-28de3c544764","resolution":{"observed_at":"2026-08-03T18:37:51.334838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.339507Z","title":"Privacy- aware document visual question answering,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.339507Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:80dfc9cfbc2bd38dfc7bde75f504f05f928588507f1ff274366c83659d14869d","observation_id":"cabef7c4-0b55-404b-b2b1-f23156cc4619","resolution":{"observed_at":"2026-08-03T18:37:51.339507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.343789Z","title":"Infographicvqa,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.343789Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:0dad4e45a2a01c3b8d2de29ed9e3f57826cdec2f90b40bf7366e26cd6e80e42c","observation_id":"9b181abd-3f7f-484e-a87c-a4d7ed9ea2e1","resolution":{"observed_at":"2026-08-03T18:37:51.343789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.348433Z","title":"Not what you’ve signed up for: Compromising real- world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.348433Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:2dfc746d0313724b604e8866bf1c308f437a7cb49fa69aeea85417bce602e1eb","observation_id":"8bd4a65c-b355-4762-b323-9aae35e0fc65","resolution":{"observed_at":"2026-08-03T18:37:51.348433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.05385","last_updated":"2018-02-15T02:08:19Z","snapshot_observed_at":"2026-08-14T19:45:42.515628Z","submitted_at":"2018-02-15T02:08:19Z","title":"Fooling OCR Systems with Adversarial Text Images","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.05385","snapshot_observed_at":"2026-08-03T18:37:51.353057Z","title":"Fooling ocr systems with adversarial text images,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.353057Z"},"links":{"cited_paper":"/paper/1802.05385","citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:477926f885f4b72e6cf77b53920e052c8965c4a9a785af45dcf9ec6be613e979","observation_id":"a5243e7e-9c77-41d7-9026-6eb6843d2050","resolution":{"observed_at":"2026-08-03T18:37:51.353057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.357818Z","title":"Adversarial preprocessing: Understanding and preventing Image-Scaling attacks in machine learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.357818Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:690aa8867eb9f6c55d07f470c275326f4a9fd047e2d60deb12ff48edac7f33d1","observation_id":"52a224cc-826e-456b-9d69-d40c71ec47af","resolution":{"observed_at":"2026-08-03T18:37:51.357818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.363008Z","title":"Image hijacks: Adversarial images can control generative models at runtime,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.363008Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:c6870dc88552ff4680ea735eb2676045bfb85bcd1a9e7c50f2f7c9dd5cd7d253","observation_id":"7e67e12b-2b39-47ed-acd7-44d8e7e583f3","resolution":{"observed_at":"2026-08-03T18:37:51.363008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.367885Z","title":"On the robustness of large multimodal models against image adversarial attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.367885Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:45407c7d847cc74bb56cbd8ed648ac665da253feccea677d3a65368c08e8b63f","observation_id":"b7feedf5-5323-458f-a833-239761482895","resolution":{"observed_at":"2026-08-03T18:37:51.367885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.372604Z","title":"On the adversarial robustness of multi-modal foundation models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.372604Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:da59b9c32d8400770bb782632aeb2a4c539bad472b7554be0b1fb2f615132e21","observation_id":"3f85f24a-b911-4774-877d-f63bc12733f5","resolution":{"observed_at":"2026-08-03T18:37:51.372604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.377813Z","title":"Docmia: Document-level membership inference attacks against docvqa models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.377813Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:3253bf122283e5b5a4f25eb279ccf619405a0278023d4aa600e571a0b4bffc13","observation_id":"48f27704-d29c-40ec-a2b7-49ed3ec27dae","resolution":{"observed_at":"2026-08-03T18:37:51.377813Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-03T18:37:51.383186Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.383186Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:6816c618b78e4305e93316468c818d7706b73b20ffb7b0fc4161246690924920","observation_id":"9ae95ebc-c1ff-4d12-b394-eaa61c3d3647","resolution":{"observed_at":"2026-08-03T18:37:51.383186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T18:37:51.388667Z","title":"Are aligned neural networks adversarially aligned?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.388667Z"},"links":{"citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:da9a19adaa630069e47d91a6933afdac6d77703b06cc066ca5b7851dd896b720","observation_id":"b47debdf-49d3-4da7-a8f8-fe1e44df0f81","resolution":{"observed_at":"2026-08-03T18:37:51.388667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T02:03:26.954143Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering"},"reference_resolution":{"displayed":23,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":23},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 23 of 23 outbound references and 0 inbound Pith citation observations for arXiv:2512.04554."}