{"as_of":"2026-08-03T14:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d5ac771c388f39a635a814da6a7d1ec344ccb0bb683bdf4e8cc8c71d9f1faf3a","coverage":[{"denominator":63,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":63,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T15:06:43.140580Z","state":"measured"},{"denominator":64,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":64,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-03T06:30:56.289259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T02:44:13.644542Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.12616","snapshot_observed_at":"2026-08-02T02:44:13.644542Z","title":"Every picture tells a dangerous story: Memory-augmented multi-agent jailbreak attacks on vlms.arXiv preprint arXiv:2604.12616, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14256","last_updated":"2026-07-15T18:13:05Z","snapshot_observed_at":"2026-08-03T04:05:16.409039Z","submitted_at":"2026-07-15T18:13:05Z","title":"Automatic Hard Example Synthesis with Multi-Level Agentic Data Curation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T02:44:13.644542Z"},"links":{"cited_paper":"/paper/2604.12616","citing_paper":"/paper/2607.14256"},"observation_digest":"sha256:75ce798e458847a6de6303d370e82844f19ba50167542b6ee69ca7406cfdf381","observation_id":"d430814e-b2b2-4e82-9c3d-bf34a6ec2e5f","resolution":{"observed_at":"2026-08-02T02:44:13.644542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2604.12616/citation-record","integrity":"/paper/2604.12616/integrity","json":"/paper/2604.12616/citation-record.json","paper":"/paper/2604.12616"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"33f713a8-69eb-4075-b79e-58b47226304c","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:f461f32585b8fd78d4ce7f78c67de8bbb48c09014f48b03e5b709ff3be405f81","observation_id":"d9fc1dd2-a021-4347-ba30-6b9a704aa26d","resolution":{"observed_at":"2026-05-18T08:02:31.598497Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e51a8498-6908-495e-b89d-f6a486202092","year":2012},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:52bee9fd3688efab57dbd875c12dd8d54d5f754d138a3bc5f027dc47d1280fc1","observation_id":"0417bc13-3a5f-49d6-9929-c07f9d15aec8","resolution":{"observed_at":"2026-05-18T08:02:31.601467Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4287.2025","doi":"10.1109/satml64287.2025.00010","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) , year =","venue":null,"work_id":"7247a4a2-de8b-4085-82d2-c1f1d6500f88","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:73d37cea7c461d114124a1dd3bce9a14cfac5ab3228f0ea81f6a6cde0e3fd460","observation_id":"3f804cb1-ce7c-414f-99f6-24d65acefc11","resolution":{"observed_at":"2026-05-10T15:10:31.499253Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-05-22T10:23:58.36096+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-22T10:23:58.36096+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2022.emnlp-main.771","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-30T07:24:20.869446Z","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","venue":null,"work_id":"1ab0b1a7-3cee-4980-8ae9-797f08c7f695","year":2022},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:6302b3b2b40ef149a86549a1bbb08b23095ba2ff6720df1f5c22a2617b45ca51","observation_id":"6322f05b-9528-4d03-a836-a22fd748ee24","resolution":{"observed_at":"2026-05-10T15:10:31.494709Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12784","last_updated":"2024-07-17T17:59:47Z","snapshot_observed_at":"2026-07-06T18:47:56.109836Z","submitted_at":"2024-07-17T17:59:47Z","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","version":1},"cited_work":{"arxiv_id":"2407.12784","doi":"10.48550/arxiv.2407.12784","metadata_source":"pith","pith_arxiv_id":"2407.12784","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases","venue":"cs.LG","work_id":"fd576f32-99d7-40a6-866a-ad86ad47565d","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2407.12784","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:7f20225ed5458a806e9f18efbafb84eb6945ddb8e075bbf02952318747f35c2a","observation_id":"22702ab2-e43c-4599-bc3e-d96b2b602d23","resolution":{"observed_at":"2026-05-11T11:11:05.393842Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.11496","last_updated":"2024-11-28T02:07:46Z","snapshot_observed_at":"2026-07-06T19:51:54.660531Z","submitted_at":"2024-11-18T11:58:07Z","title":"Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models","version":3},"cited_work":{"arxiv_id":"2411.11496","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.11496","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safe+ safe= unsafe? exploring how safe images can be exploited to jailbreak large vision-language models","venue":null,"work_id":"a68b899f-ece9-4b25-882a-c014a36c9292","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2411.11496","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:45988a2df37b506b9aacf151748415c42e2c21362794e69d87dd4eb9586d04a6","observation_id":"86133c2f-bdc7-43ce-8f57-fa6e2d89ecbf","resolution":{"observed_at":"2026-05-11T11:11:05.382509Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.02556","last_updated":"2025-12-02T09:25:14Z","snapshot_observed_at":"2026-07-31T23:49:25.878472Z","submitted_at":"2025-12-02T09:25:14Z","title":"DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models","version":1},"cited_work":{"arxiv_id":"2512.02556","doi":"10.18653/v1/d18-1512","metadata_source":"pith","pith_arxiv_id":"2512.02556","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models","venue":"cs.CL","work_id":"07c85cc5-4086-4abc-823b-6d0f4ff784d0","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2512.02556","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:4a54984d7d4b5794d6dde841ded9b2a4d9b9a8a14503de2bb7626759e5d4148c","observation_id":"385ef909-07e9-4842-b8a9-50f2d593d6c1","resolution":{"observed_at":"2026-05-11T11:11:05.356850Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"3fbcbc0e-354e-4b60-8faa-abecb390ac06","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:89b920dee055b225c4fe7528dfb103c40d9761eb85d62fc4e11d65ed8333002e","observation_id":"ee2f2bb6-2f70-46f2-acb6-0075cde24b6d","resolution":{"observed_at":"2026-05-18T08:02:31.593184Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"9d8e7185-574d-48b5-b835-12fafd6f42f9","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:a9d3bc9384ecd0e4d6b641915c709d5e7e76b30546589bd7ce4dcd3249a6f209","observation_id":"2fbfbdb7-3bf4-4da1-9342-5934c18c20ff","resolution":{"observed_at":"2026-05-18T08:02:31.580302Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2511.21631","last_updated":"2025-11-27T12:16:54Z","snapshot_observed_at":"2026-07-06T22:37:03.716474Z","submitted_at":"2025-11-26T17:59:08Z","title":"Qwen3-VL Technical Report","version":2},"cited_work":{"arxiv_id":"2511.21631","doi":"10.1016/j.neunet.2025.107777","metadata_source":"pith","pith_arxiv_id":"2511.21631","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3-VL Technical Report","venue":"cs.CV","work_id":"1fe243aa-e3c0-4da6-b391-4cbcfc88d5c0","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2511.21631","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:9f5491b28878b324a1eb378b9b95f8e1bf7b6da55537a60a714c8a2e0a163cda","observation_id":"c6348f86-cafe-4cd9-9d37-8af063015e45","resolution":{"observed_at":"2026-05-11T11:11:05.716356Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08567","last_updated":"2024-06-03T14:15:03Z","snapshot_observed_at":"2026-07-06T17:29:34.813390Z","submitted_at":"2024-02-13T16:06:17Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","version":2},"cited_work":{"arxiv_id":"2402.08567","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08567","snapshot_observed_at":"2026-07-02T21:17:24.419057Z","title":"Agent smith: A single image can jailbreak one million multimodal llm agents exponentially fast","venue":null,"work_id":"38a3a5b4-db9c-4f76-91c7-37d45b57783d","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2402.08567","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:bed03704c1349672588c57ec9bc73c08b17383ec51f55e083be23e142fe8d4aa","observation_id":"e0900156-f996-4636-b475-b5bdc32e9b9c","resolution":{"observed_at":"2026-05-11T11:11:05.672343Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.08532","last_updated":"2025-05-01T11:56:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-15T16:50:09Z","title":"EvoPrompt: Connecting LLMs with Evolutionary Algorithms Yields Powerful Prompt Optimizers","version":3},"cited_work":{"arxiv_id":"2309.08532","doi":"10.48550/arxiv.2309.08532","metadata_source":"pith","pith_arxiv_id":"2309.08532","snapshot_observed_at":"2026-07-11T03:27:45.451046Z","title":"EvoPrompt: Connecting LLMs with Evolutionary Algorithms Yields Powerful Prompt Optimizers","venue":"cs.CL","work_id":"fa7fdd38-244f-4722-a136-ba8667c8a974","year":2023},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2309.08532","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:432e9e95d9692fa7443901d6b595987510ce9c72f9216e70aaf0f9f7cc8d75d2","observation_id":"9baf8ce6-e296-48d0-9078-4b3900b9261c","resolution":{"observed_at":"2026-05-16T06:11:49.925109Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.02286","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Tree-based dialogue reinforced policy optimization for red-teaming attacks","venue":null,"work_id":"326dad13-b8df-42bc-ba34-5d0191199589","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:94fa237219c158be0a544ddd064f03e95cbe5bef0cf6f8b1d2bda204f7def2d9","observation_id":"eac0e59c-228f-4e21-abf1-8fdfe685d1b1","resolution":{"observed_at":"2026-05-11T11:11:05.511358Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14831","last_updated":"2025-01-14T16:17:49Z","snapshot_observed_at":"2026-07-06T18:18:47.640933Z","submitted_at":"2024-05-23T17:47:55Z","title":"HippoRAG: Neurobiologically Inspired Long-Term Memory for Large Language Models","version":3},"cited_work":{"arxiv_id":"2405.14831","doi":"10.48550/arxiv.2405.14831","metadata_source":"pith","pith_arxiv_id":"2405.14831","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"J.; Shu, Y.; Gu, Y.; Yasunaga, M.; and Su, Y","venue":"cs.CL","work_id":"c964b1e8-cbf5-49dd-ac34-b8f733b02a9d","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2405.14831","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:d6bb7fb0ba3874bcc5d6cbe1025bd89077a04c72b3fa60a2693775634c9c483e","observation_id":"33231b45-32de-4982-8e26-6d79e350a989","resolution":{"observed_at":"2026-05-11T11:11:05.735684Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T05:46:50.493240Z","title":null,"venue":null,"work_id":"6f06c7d5-2ddd-40ab-a1a3-21e3d71f66fc","year":2019},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:4d7a9c2806093d291f08d19be35e4e6ec74888fee6b6408747ea3702acaab18d","observation_id":"e5d807d1-8bf1-489e-8f1e-0785aca47fd6","resolution":{"observed_at":"2026-05-18T08:02:31.566857Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d148f3de-9f64-4a20-9158-2f1b280eff3b","year":2020},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:6a1e9b01910bfc2351b13590224222cb9504865e932371076ddd44d901535eb4","observation_id":"98cbaeb7-5cfd-41a3-b9a4-7c001bc5dc6f","resolution":{"observed_at":"2026-05-18T08:02:31.633447Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"85d48e9e-944a-40cf-95ed-117fb3f17b8d","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:d0b791f7995a2169cbe4e33740a910263afa7fb789505e1b70e882f52c6b1a2c","observation_id":"993483cd-befb-4489-b115-789523ec2f63","resolution":{"observed_at":"2026-05-18T08:02:31.624897Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.04720","last_updated":"2026-01-19T09:03:26Z","snapshot_observed_at":"2026-07-06T22:41:05.793337Z","submitted_at":"2026-01-08T08:36:06Z","title":"Qwen3-VL-Embedding and Qwen3-VL-Reranker: A Unified Framework for State-of-the-Art Multimodal Retrieval and Ranking","version":2},"cited_work":{"arxiv_id":"2601.04720","doi":null,"metadata_source":"pith","pith_arxiv_id":"2601.04720","snapshot_observed_at":"2026-07-08T20:35:34.399203Z","title":"Qwen3-VL-Embedding and Qwen3-VL-Reranker: A Unified Framework for State-of-the-Art Multimodal Retrieval and Ranking","venue":"cs.CL","work_id":"eb6d74de-e0e8-47b8-ac29-ca460a55fac5","year":2026},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2601.04720","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:8d2d87fff75122c018483ba7bbe05f905b509b1d67cfbb858197974df1eb3866","observation_id":"ed3b49ce-82c1-480d-a71f-4e369f40361b","resolution":{"observed_at":"2026-05-12T09:36:21.368649Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"1251ac75-f830-4771-8a99-9d4044643ddf","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:987cafc4887225f8131efc04e98baa5b432bdbc099feb189036d8ff929de65cc","observation_id":"207b53f4-7f38-4914-8dfa-86118fc878cf","resolution":{"observed_at":"2026-05-18T08:02:31.577700Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d1b74974-7844-4fc6-995c-b697f54913d9","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:fd42b36a68abf93315ad7c8fcee3c9c7bd06202cd813a82da9f63945892113c1","observation_id":"3b14ce19-a91c-488d-aefd-838dec9c6758","resolution":{"observed_at":"2026-05-18T08:02:31.563775Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Lawrence Zitnick","venue":null,"work_id":"63208730-0b27-4788-a52c-4c8e17c2c27e","year":2014},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:1a5231b376f28891d59ddc90893cea5775f9efd47668c0919cb7db338cfa2cdb","observation_id":"6f7dac83-8c85-49e1-9fa7-c61a78ea7039","resolution":{"observed_at":"2026-05-18T08:02:31.588051Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03744","last_updated":"2024-05-15T19:22:44Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:59:56Z","title":"Improved Baselines with Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":"2310.03744","doi":"10.48550/arxiv.2310.03744","metadata_source":"pith","pith_arxiv_id":"2310.03744","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Improved Baselines with Visual Instruction Tuning","venue":"cs.CV","work_id":"5baeaa33-5986-44a3-85a4-fcabd6fc1e8d","year":2023},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2310.03744","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:0bedb91dcc82fd5fdb64a81729148a3a60291d920d6c88e1f3d5b1353835fdc2","observation_id":"caa7e3ad-c817-49dc-ac0c-e10fbdb1009b","resolution":{"observed_at":"2026-05-12T19:11:34.143871Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-07-06T19:29:14.335016Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":null,"work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:6cc6bd74248cc56970662b43b15f88d9a61c388fe9a0fd059aeb7df4813886c6","observation_id":"69cd6318-8040-4648-aa31-5da6a783bd4f","resolution":{"observed_at":"2026-05-11T11:11:05.526422Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"9ece9f22-8fe2-479f-a64f-b9965a6ef91a","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:63fa58885ca3ad4777c47793e07d980b5f7094f5395d2ce176225027c7a1f8b7","observation_id":"3d294c83-fe80-44f9-a00a-c72a1cd9c73d","resolution":{"observed_at":"2026-05-18T08:02:31.569630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6d033ab2-130f-41ee-992a-5a1636724d1d","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:015559153eccf2a045777a8c550359690927843cf419189c675932f616db0365","observation_id":"ee0ff9d1-3e8c-4ce3-a64b-9a31ea9420a1","resolution":{"observed_at":"2026-05-18T08:02:31.595684Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"acd9a1c2-b5fe-4d61-b1a3-0df324df75fa","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:54da73962ce54bfe0147dbb1f95af04b25e3c434b67da174a57aecb1018ea258","observation_id":"e79cba21-01f1-4557-b032-b0dda5d71dcd","resolution":{"observed_at":"2026-05-18T08:02:31.557799Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"665ffa7b-e691-4bf9-9eba-29c5acd6f2cc","year":2026},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:c1f2f3ed22d2923b95f51ecee4f35a819ef2405e7feb5df4a579d946cc7a3081","observation_id":"5d35ea30-6ea0-438b-848c-7c2399bc7671","resolution":{"observed_at":"2026-05-18T08:02:31.560784Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a9ecd023-a707-43a8-866f-197ad78fe3d6","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:bee1b8ea72784f74615533007fc610c1e0034e651e841b548f512fcebff75f0f","observation_id":"ca267615-9cb7-418f-8dee-d30f043a325c","resolution":{"observed_at":"2026-05-18T08:02:31.590581Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"91267849-fa52-4146-83f5-440bfe66a3c6","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:8e9852eafebd4ec5992ec2473a8ce1ee2d44029aea9bea7f2a62b7fc59aa1411","observation_id":"bd104802-2d95-4646-9556-eb8b155fc22c","resolution":{"observed_at":"2026-05-18T08:02:31.572253Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"996cbe46-7b3c-4ef0-bf4e-b6188d4e0a9a","year":null},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:9969fc14e8c8232cbe32887d261dbb3d4f559e5700875bfdd6db9c44fbaf5326","observation_id":"1cb5aea9-9360-4888-ab71-93933af2fed7","resolution":{"observed_at":"2026-05-18T08:02:31.574856Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.52202/079017-1952","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:41:42.988952Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":"efda95fd-6815-4854-9847-1074ce367f6c","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:6eec04887a1f9148e638951764ab2198942c1a01719fdcdde92c861344bf53b9","observation_id":"02e0652a-f8f8-45c8-8671-15c73833a8c9","resolution":{"observed_at":"2026-05-10T15:10:31.500912Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a12d5d51-14a9-45d7-bf97-2723b4844d9d","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:ac473522612141db21863cd992daf26d418212c9e188629b9e1ce1f7baba3314","observation_id":"75049536-ebbe-4c1e-a2a6-12e80a9ab438","resolution":{"observed_at":"2026-05-18T08:02:31.582811Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"46d86948-add9-4020-84cb-432806b08b8c","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:ef4ffa055f4011fc6c3b3b6aa0dda5b6257e7d92d551cb2d30c2d81ce18dacfa","observation_id":"196a48cc-5a81-485c-9833-f95b313cdbac","resolution":{"observed_at":"2026-05-18T08:02:31.622186Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02309","last_updated":"2024-02-04T01:29:24Z","snapshot_observed_at":"2026-07-06T17:24:57.402088Z","submitted_at":"2024-02-04T01:29:24Z","title":"Jailbreaking Attack against Multimodal Large Language Model","version":1},"cited_work":{"arxiv_id":"2402.02309","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.02309","snapshot_observed_at":"2026-07-04T17:09:59.501805Z","title":"Jailbreaking attack against multimodal large language model","venue":null,"work_id":"851954dd-f188-4ea4-ac2e-661a15b87ae8","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2402.02309","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:2f2b848500e07e99e1b86b5fbcd2c3faf1e08a03c08c66baca9cd6b00eecb098","observation_id":"f6727b7a-bc53-41e2-ac0f-10da53980a4e","resolution":{"observed_at":"2026-05-11T11:11:05.554349Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c9464053-f95c-4a56-88c2-0d7b4cb62419","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:1124369dd4402b2f9264cffc5c7e40e4b106e777d255c7e4497072e1e2f7d1fc","observation_id":"15064cfd-c91d-46a9-9bed-2246a1dea3af","resolution":{"observed_at":"2026-05-18T08:02:31.627723Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2022.emnlp-main.225","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-30T21:05:03.181505Z","title":"Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing , year =","venue":null,"work_id":"664322b7-6ac6-46c5-b1f2-193a778945d2","year":2022},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:8d83ac66166abf75d3a7cb1dfb22cf32f7d6968c7d2fed74ab68ea9baa460be3","observation_id":"6cb2bc32-ee57-4175-b821-7ceedacdaf32","resolution":{"observed_at":"2026-05-10T15:10:31.502738Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-05-22T10:23:52.034599+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-22T10:23:52.034599+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1609/aaai.v38i19.30150","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-30T22:45:06.808808Z","title":"In: Wooldridge, M.J., Dy, J.G., Natarajan, S","venue":null,"work_id":"ea5b4152-a362-4519-b55c-e81142fc3fa2","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:a47a8e30d2a9981cd0ac76b642e4577b8bb566c71db41db049a64533be422d80","observation_id":"fcac2ebc-428f-4de1-87f5-62da0b4e464e","resolution":{"observed_at":"2026-05-10T15:10:31.496597Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"dd159e86-222f-4b9e-92e8-9244447ce7ff","year":null},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:f65d314a2a067be016fd786d7808a8547abd1a23a77c505e8e70d36a35a4a739","observation_id":"fa016be3-4ba5-46e9-afb5-eb87272e954a","resolution":{"observed_at":"2026-05-18T08:02:31.630508Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2020.acl-main.647","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T10:00:48.725009Z","title":"Null It Out: Guarding Protected Attributes by Iterative Nullspace Projection","venue":null,"work_id":"2d6e0593-a325-4156-a717-83b0749c447d","year":2020},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:16f284c8f3f8e58efd63375fa9ee2ec84fbeca6fae486b2cd5c5dc26b9b5918f","observation_id":"45bf207a-4f02-407e-87b0-5791b19c1a0f","resolution":{"observed_at":"2026-05-10T15:10:31.504594Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-07-12T16:19:34.639694+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T16:19:34.639694+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b5c7f043-00d7-4d5c-89fd-0219d6d80ff9","year":null},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:4ae4e83384034a590cb6a71ebcd6df05cfc4267b38ac5471f7d1dea218d64196","observation_id":"cc6911e2-b2d2-47ad-896f-9bb84ea34336","resolution":{"observed_at":"2026-05-18T08:02:31.613414Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2501.18638","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Graph of attacks with pruning: Optimizing stealthy jailbreak prompt generation for enhanced llm content moderation","venue":null,"work_id":"725da8a2-af80-48dd-8896-02eec13e3c0e","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:09672dccbdb56234729cc35913408d0093ae8cec4f496d3379192c2791274bea","observation_id":"257459ce-a4f2-4657-aef1-1d72628f4542","resolution":{"observed_at":"2026-05-11T11:11:05.655445Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2506.07022","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T13:06:58.815658Z","title":"Alphasteer: Learn- ing refusal steering with principled null-space constraint","venue":null,"work_id":"fa78bf0a-76d8-4c33-9a82-e6c4bd31216d","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:8d20c80bba7a1821f2df8d55d3a672dafc61741274e9e06d86ad8f4160d55d46","observation_id":"2f1daa98-92c9-4d39-92c6-587cba99b950","resolution":{"observed_at":"2026-05-11T11:11:05.700064Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a0735e2b-1ee3-4dfd-a824-c5e01321e304","year":2023},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:2bd8ea5e9640f84b54aba1a364c2f2dc05af83847e4be18eeced9a9d8c93abfb","observation_id":"1b8c2cb7-810d-421d-8edd-42cd11a42593","resolution":{"observed_at":"2026-05-18T08:02:31.585401Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.emnlp-main.312","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b505a83c-5a59-4ec9-861d-26a6079a314f","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:d608f84fc7b83686a60c33657d22663d7ca5ce6153a5db269d423551745c0997","observation_id":"da6b19da-2b98-47c7-a9ca-a36550563b6f","resolution":{"observed_at":"2026-05-10T15:10:31.480906Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"dd51a2a3-be04-465d-ab01-4a040a241fb5","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:905417adf5e068ad99aa5fd6ef306e198db86ff028647721aabba91b0004be91","observation_id":"95d76b98-1055-4ea3-9d45-bff5e1e27199","resolution":{"observed_at":"2026-05-18T08:02:31.619191Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.02276","last_updated":"2026-02-02T16:17:38Z","snapshot_observed_at":"2026-07-06T22:44:09.804048Z","submitted_at":"2026-02-02T16:17:38Z","title":"Kimi K2.5: Visual Agentic Intelligence","version":1},"cited_work":{"arxiv_id":"2602.02276","doi":"10.48550/arxiv.2602.02276","metadata_source":"pith","pith_arxiv_id":"2602.02276","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Kimi K2.5: Visual Agentic Intelligence","venue":"cs.CL","work_id":"d690be8f-5d53-49b0-b1e7-79668eb8fcdb","year":2026},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2602.02276","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:9e9e08017714fbb8bd5a57eedad6641b70446614ebd8e020cdea4243ca80cbd2","observation_id":"ac155ce7-2c5b-4378-80c5-af1e36364540","resolution":{"observed_at":"2026-05-11T11:11:05.455856Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":"2505.09388","doi":"10.1016/j.aiopen.2022.12","metadata_source":"pith","pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3 Technical Report","venue":"cs.CL","work_id":"25a4e30c-1232-48e7-9925-02fa12ba7c9e","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:a61dd7fb4a03168c216bf75e210e478ad9f164ebad7bb04ecd585fc468378c70","observation_id":"6c728998-3b2d-42e9-9500-5b663e24e0d7","resolution":{"observed_at":"2026-05-11T11:11:05.484804Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.01006","last_updated":"2026-01-01T13:07:25Z","snapshot_observed_at":"2026-07-06T21:50:40.454777Z","submitted_at":"2025-07-01T17:55:04Z","title":"GLM-4.5V and GLM-4.1V-Thinking: Towards Versatile Multimodal Reasoning with Scalable Reinforcement Learning","version":6},"cited_work":{"arxiv_id":"2507.01006","doi":"10.48550/arxiv.2507.01006","metadata_source":"pith","pith_arxiv_id":"2507.01006","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"GLM-4.5V and GLM-4.1V-Thinking: Towards Versatile Multimodal Reasoning with Scalable Reinforcement Learning","venue":"cs.CV","work_id":"366607ba-e4ea-4726-98c3-63356e32351c","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2507.01006","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:e7df5ee007b2d36b6eefef6d48bf821cef586b1bd47cc12aa57050f2451d5f9e","observation_id":"0400511a-8c66-4178-8e4d-f5134b8ad98e","resolution":{"observed_at":"2026-05-11T11:11:05.467585Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":"2305.16291","doi":"10.18653/v1/2023.emnlp-main.118","metadata_source":"pith","pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","venue":"cs.AI","work_id":"ffe0d207-86cf-4742-a100-e988ac8b9676","year":2023},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:ed113f398a52c2824cba0ea9ef35daaee66f08300ec575f94faaad405209c827","observation_id":"c49b15cc-542d-4760-bb08-87db5913faae","resolution":{"observed_at":"2026-05-11T11:11:05.638348Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"f2104209-c85f-4a26-baa3-8b32d447ee03","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:4f6db56b587cfa9b7a16330e0a0c9451993310b504de3fee4db549f7b687c182","observation_id":"21fd1ce9-24ff-44f1-a803-7f979c359d75","resolution":{"observed_at":"2026-05-18T08:02:31.610527Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5083b17b-9129-4cc0-a319-da7ca2f82883","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:4aaff8f455563b7ae006a904cf0ded85d6f16340087a74ba9463c04ebdb2c6c4","observation_id":"5ae38cc5-e964-4cae-9244-bf7870fe0538","resolution":{"observed_at":"2026-05-18T08:02:31.607656Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.74","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T23:58:42.878806Z","title":"Jailbreak large vision-language models through multi-modal linkage","venue":null,"work_id":"f138d320-546d-4e8b-b4d0-878f9d6950b5","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:5f40aeb2b587276661e98684bad4c6ac622ea3087d6055718243297e401efce0","observation_id":"4b8c64a4-72cc-4163-a3ea-5fcd5a327d41","resolution":{"observed_at":"2026-05-10T15:10:31.489827Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a8bbb6d1-6f20-4981-abfc-9bc5572c35b4","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:ec9b34e2e4d95adc93ec9ef3e77bb1ce579f92f47bef8dd02ea3ffa85b8c5ead","observation_id":"fa7e3ed3-0462-4e1c-ace5-56ac4f9ed408","resolution":{"observed_at":"2026-05-18T08:02:31.616201Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"3cb10487-a559-468d-8b52-b24c6c1b5156","year":null},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:9f027e34d17d6b03dafc11716932eba6af14c656eada5955eeb4ce6f587826f4","observation_id":"4fcebdfc-ab05-4d9a-aa17-7b06a7555fc7","resolution":{"observed_at":"2026-05-18T08:02:31.636280Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.findings-acl.745","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"doi:10.18653/v1/2025.findings-acl.745","venue":null,"work_id":"735ea58b-bb1d-4bd9-94ba-a731e61a4e3f","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:76744e7dbbcc133abc130426dfd8926fc8ae55d950a20cf4c740d69cce2ac954","observation_id":"1e0820fd-23f2-43da-b1bb-fdece08d6bd6","resolution":{"observed_at":"2026-05-10T15:10:31.493000Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.10148","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c43d4003-f1e2-4238-a377-149d87a8da24","year":2026},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:0c8c8d054cc9949a6cfc2c6e662b474e1e2b4dc33344ee272e057ab4a3a7d5e3","observation_id":"2c8098e4-cca3-4251-bcbf-635e660be0ad","resolution":{"observed_at":"2026-05-11T11:11:05.420723Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2734.2025","doi":"10.1109/cvpr52734.2025","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Freeman, Frédo Durand, Eli Shechtman, and Xun Huang","venue":null,"work_id":"d0e5199d-8907-47b1-905a-07ab8b623a4c","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:1cd44a7209e3eb3249e474789d7514093392e82fde19f5347bdcb5a4c5605fbf","observation_id":"1d61a655-41af-436f-99a8-5929f10ca057","resolution":{"observed_at":"2026-05-10T15:10:31.483338Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-07-11T19:50:06.316117+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T19:50:06.316117+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2025.358324","doi":"10.1109/tifs.2025.3583249","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Jailbreak vision language models via bi-modal adversarial prompt.IEEE Transactions on Information Forensics and Security, 20:7153–7165, 2025","venue":null,"work_id":"5d54215e-311c-4f3e-94f5-d4e0a016ac3e","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:89f2828ddf1a088768a11709e4fdef228a7aa82282113f518478f1733f7ad0fc","observation_id":"18a0f2e9-5296-4341-928c-b76789fe7282","resolution":{"observed_at":"2026-05-10T15:10:31.485946Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2734.2025","doi":"10.1109/cvpr52734.2025","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Freeman, Frédo Durand, Eli Shechtman, and Xun Huang","venue":null,"work_id":"d0e5199d-8907-47b1-905a-07ab8b623a4c","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:b6683946c2715d0cfbc81cf3d226238dc65dc59785ff066dfb1fe6118a4ef8cd","observation_id":"11f15b1e-bf2d-455c-94b2-bcfea0711a23","resolution":{"observed_at":"2026-05-10T15:10:31.488293Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-07-11T19:50:06.316117+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T19:50:06.316117+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":"2510.14276","doi":"10.48550/arxiv.2510.14276","metadata_source":"pith","pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Qwen3Guard Technical Report","venue":"cs.CL","work_id":"de1c5964-d29a-456c-97cc-30684b243a85","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:7cc18ba063ea44a0119ecb26fcfcb023464c7e3ba8c09a931184ce822e3bafe0","observation_id":"9907746f-35e6-4bc4-9247-2c87138b28bf","resolution":{"observed_at":"2026-05-13T22:33:37.835217Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"7b72a7d1-d295-426d-b571-a98d1fd6d46a","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:9734ca27098810d4567c41dec8e0c8bb307d8f25f33f8732a34076ed521968ae","observation_id":"92d96a0d-5e38-4197-863b-238b806111ec","resolution":{"observed_at":"2026-05-18T08:02:31.604290Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.emnlp-main.487","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"ed02b09e-cecf-47f0-a0aa-1ebb64b6209b","year":2025},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:111a6c3be3f68e6dc61f5f23cc8fd19f2c8f956c482732f4311b0c7080273291","observation_id":"087f8f43-3d0c-45bd-806c-a3acf0ff1aac","resolution":{"observed_at":"2026-05-10T15:10:31.491442Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-07-11T02:47:49.837877Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:4a6961e6166a4b63b80e14c05efa53110ae3a4e0e1ef265a705fb6d1f2b154d9","observation_id":"49b13a73-32e6-4f88-8d31-a8249e34a368","resolution":{"observed_at":"2026-05-11T11:11:05.623353Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs"},"reference_resolution":{"displayed":63,"state_counts":{"malformed_identifier":0,"metadata_mismatch":5,"parse_uncertain":0,"unresolved":28,"verified_exact":29,"verified_fuzzy":1},"total_outbound_references":63},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"thesis":"As of 3 August 2026, this Paper Citation Record lists 63 of 63 outbound references and 1 inbound Pith citation observation for arXiv:2604.12616."}