{"as_of":"2026-08-11T12:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:28949bce9fd03409ea314ab84ccdf34a715c0163d1e473369f224dc0a0112bc5","coverage":[{"denominator":12,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T18:19:58.970952Z","state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.06950/citation-record","integrity":"/paper/2604.06950/integrity","json":"/paper/2604.06950/citation-record.json","paper":"/paper/2604.06950"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2203.05794","last_updated":"2022-03-11T08:35:15Z","snapshot_observed_at":"2026-07-06T12:46:41.057346Z","submitted_at":"2022-03-11T08:35:15Z","title":"BERTopic: Neural topic modeling with a class-based TF-IDF procedure","version":1},"cited_work":{"arxiv_id":"2203.05794","doi":"10.1037/0003","metadata_source":"pith","pith_arxiv_id":"2203.05794","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"BERTopic: Neural topic modeling with a class-based TF-IDF procedure","venue":"cs.CL","work_id":"fe7000f5-9930-49ed-ba20-6975a338b713","year":2022},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"cited_paper":"/paper/2203.05794","citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:589bc8cc363d96e25a9f3542cb5fc603fe11d34379ad24c68c34a18f9ce7c712","observation_id":"1425f0d0-6b4f-407c-9291-766d9aecf743","resolution":{"observed_at":"2026-05-11T14:48:37.128055Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InPro- ceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V","venue":null,"work_id":"92bc29c0-1a4d-4fc2-89e8-9caf9b67c32c","year":null},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:01d0479775b28063d739ea41001080fa3085410b9cfc1e55cbafd2dcc66c36f3","observation_id":"e95773c8-1cf3-4663-99de-ce6ff12533fe","resolution":{"observed_at":"2026-05-17T05:14:05.708835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20773","last_updated":"2024-06-12T07:13:48Z","snapshot_observed_at":"2026-08-08T10:04:07.258178Z","submitted_at":"2024-05-25T17:17:18Z","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","version":2},"cited_work":{"arxiv_id":"2405.20773","doi":"10.48550/arxiv.2405.20773","metadata_source":"arxiv_reference","pith_arxiv_id":"2405.20773","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual- roleplay: Universal jailbreak attack on multimodal large language mod- els via role-playing image character","venue":"arXiv (Cornell University)","work_id":"cfff0289-3100-466e-9e4e-d6998de6b0b4","year":2022},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"cited_paper":"/paper/2405.20773","citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:0ea556d0ab52c46c19e737f5a6ed55ec6b6a9ff3a96068d9bad2d485417deb0c","observation_id":"f22ac78a-055d-4254-a4df-a8e26b4706be","resolution":{"observed_at":"2026-05-11T00:45:50.274862Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.03426","last_updated":"2020-09-18T01:56:41Z","snapshot_observed_at":"2026-08-02T15:32:07.466568Z","submitted_at":"2018-02-09T19:39:33Z","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","version":3},"cited_work":{"arxiv_id":"1802.03426","doi":"10.1037/adb0001138","metadata_source":"pith","pith_arxiv_id":"1802.03426","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","venue":"stat.ML","work_id":"54c15172-6304-4008-a3b6-c4cc0803c054","year":2018},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"cited_paper":"/paper/1802.03426","citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:65190a9afe1795c5729ef2378898831465afd48bde2723eadf916a40406758da","observation_id":"f807a792-f5b5-47e1-b298-6f4a8d2bf1d8","resolution":{"observed_at":"2026-05-11T00:45:50.266880Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-25T15:24:07.856203+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T15:24:07.856203+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":"2307.09288","doi":"10.24963/ijcai.2025/706","metadata_source":"pith","pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","venue":"cs.CL","work_id":"68a5177f-d644-44c1-bd4f-4e5278c22f5d","year":2023},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:ee7f54d2ddb8073e429f2caec28067e1cd3aee34673d77616368fba1fc1a1cb8","observation_id":"389d02ca-cd17-4b44-b432-c37ec7ebf6c0","resolution":{"observed_at":"2026-05-11T00:45:50.278532Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"jailbreaking","venue":null,"work_id":"e0536779-81aa-402a-a2f2-432537d74581","year":2025},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:4214b05e603b57e409a867c56f0e95c066bbe4e5d137e333d27d31eb6d81ee64","observation_id":"5c372ae1-90ae-4fc2-bc82-fbe7776ca8e8","resolution":{"observed_at":"2026-05-17T05:14:05.700740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"visual key","venue":null,"work_id":"ab4dee68-124d-45ef-a545-8c71a2fd41ef","year":2024},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:ede3b0a181cae6870e5adab6b09a845c94681719f710647aa1f40c039554a99c","observation_id":"bf47cfc8-245e-4cc6-a1f8-db3f99901634","resolution":{"observed_at":"2026-05-17T05:14:05.695784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"It uses a con- cise two-step logic to decouple perception (OCR) from reasoning (Violation Check)","venue":null,"work_id":"c690c68f-bed0-42d8-afba-67ecf5aebe8d","year":null},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:7bd6eaafbc3c4af33298ab364d0b3a1e2b19fce49e8bee1f07a91c296782b046","observation_id":"2fbfa3bf-1dd5-4057-a07c-db325b1b7820","resolution":{"observed_at":"2026-05-17T05:14:05.704884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A bouquet of wildflowers tied with placed in a jar","venue":null,"work_id":"c0292632-aacb-41bd-b701-88072cb5f5c4","year":2024},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:6148a44bbcaa3777508bfeab3783284faf4742566675b548868544af30a84ed8","observation_id":"b3bbcf9b-146e-4359-a920-0eda14430b23","resolution":{"observed_at":"2026-05-17T05:14:05.691122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"As shown in Table 6, even flagship models likeGPT-5and Claude-Sonnet-4.5struggle significantly in these categories","venue":null,"work_id":"b261e974-152a-41fd-9e43-ed99abb22791","year":null},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:05b2aecdff6df2bca88b11475f3a6bbdc3036bd8e77ba27ef66b73de025943eb","observation_id":"d746679b-a244-4dfe-ab35-5898fd920b9f","resolution":{"observed_at":"2026-05-17T05:14:05.713212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"While models are proficient at reading clean digital text, they fail to generalize to text that is partially obstructed or stylistically distorted","venue":null,"work_id":"e4502651-f172-44af-afc4-a6d4c53d6ee4","year":null},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:c09abada15c2d53293213914764f40cd2390959ebe1a10a4ac7b6b6673619af8","observation_id":"e2534d71-6e17-4ad6-9eda-b691f1fb9627","resolution":{"observed_at":"2026-05-17T05:14:05.718046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2b5cbed9-1aee-4887-aefb-faa59ba4adfc","year":null},"citing_paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T18:19:58.970952Z"},"links":{"citing_paper":"/paper/2604.06950"},"observation_digest":"sha256:bc468285635956f15ebe4d522780dd522d290c68465fff05a284cda40586c737","observation_id":"cd6d72dc-c6c4-4bdf-b8c6-04baba43c13a","resolution":{"observed_at":"2026-05-17T05:14:05.721670Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.06950","last_updated":"2026-04-09T01:50:11Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-07-06T22:55:20.208897Z","submitted_at":"2026-04-08T11:13:16Z","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation"},"reference_resolution":{"displayed":12,"state_counts":{"malformed_identifier":1,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":0,"verified_exact":1,"verified_fuzzy":7},"total_outbound_references":12},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 12 of 12 outbound references and 0 inbound Pith citation observations for arXiv:2604.06950."}