{"as_of":"2026-08-08T13:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:987a13b32e968fac404cf12e6d5af2eaed1b8250fca1cb40ccb1b7095cd2c7ee","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-08T07:59:42.478294Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.24790/citation-record","integrity":"/paper/2604.24790/integrity","json":"/paper/2604.24790/citation-record.json","paper":"/paper/2604.24790"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Helix: A vision-language-action model for generalist humanoid control","venue":null,"work_id":"43a1ce9c-9bad-4cdb-b9ba-139418998a62","year":2025},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:972e20f8a70ba15c264a4de1dca98dfbe0d4c4f87d646c49c48ab2b441112a5e","observation_id":"11debfeb-30d0-45a2-8db2-e7cf29445de0","resolution":{"observed_at":"2026-05-26T17:22:45.930730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ai & robotics","venue":null,"work_id":"b86bd585-92c2-425f-b891-2aeccda742d7","year":2026},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:cb0bc75b9fe8781d85b9760c3d40f2871f04ecb9a9db9c832526be92a603a861","observation_id":"aea8c8e2-c5bc-48af-ab6e-f28f54ec6b17","resolution":{"observed_at":"2026-05-26T17:22:45.933655Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"1x neo humanoid","venue":null,"work_id":"d9518bbc-7f4a-4ac9-9dc2-a1e3f17aa846","year":2026},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:287d6f6db3e0f36ab9a1beadb806fc9419d2f0aa994c97d0647aac198e97dc6d","observation_id":"fe85a664-af5e-453a-9592-a959186a165d","resolution":{"observed_at":"2026-05-26T17:22:45.921622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The physical intelligence layer, February 2026","venue":null,"work_id":"0958fddb-d71e-4e43-a685-20a801c334c9","year":2026},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:54cc222a48640a684f915ab3bc11ba43b0a89f54685ce5c10a2bbd0dd5d1a1a7","observation_id":"efa8d519-00b1-42f0-83fa-89aba129b031","resolution":{"observed_at":"2026-05-26T17:22:45.924563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dolphinattack: Inaudible voice commands","venue":null,"work_id":"c1647919-44da-499e-a26c-264532022a8f","year":2017},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:4729dd055ae9cc78d9c0ac734339ffed6f9890a0b51959f8f134f5bccb689585","observation_id":"291700b9-79cf-482f-a104-5c21f4e2837c","resolution":{"observed_at":"2026-05-26T17:22:45.927533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Rt-2: Vision-language-action models transfer web knowledge to robotic control","venue":null,"work_id":"83dee12b-cfc4-424d-a448-f50d9b9a1ee0","year":2023},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:8cbf73f45fc2e1c17f99eec47e4a1e8e9f12097360edaa7a931bfd45544ea1ab","observation_id":"a5303595-7b4c-4c55-8e4e-a9b04a587786","resolution":{"observed_at":"2026-05-26T17:22:45.940587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09246","last_updated":"2024-09-05T19:46:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-13T15:46:55Z","title":"OpenVLA: An Open-Source Vision-Language-Action Model","version":3},"cited_work":{"arxiv_id":"2406.09246","doi":"10.18653/v1/2022.naacl-main.68","metadata_source":"pith","pith_arxiv_id":"2406.09246","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"OpenVLA: An Open-Source Vision-Language-Action Model","venue":"cs.RO","work_id":"3e7e65c5-5aed-4fe9-8414-2092bcb31cc7","year":2024},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"cited_paper":"/paper/2406.09246","citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:62a326bbd905bdcfa2c1ddb697e2a3d539a2cef96dc68dad6cff0782eb98bfb5","observation_id":"4350e2a9-5e28-40b6-b3aa-bd79a71473ba","resolution":{"observed_at":"2026-05-11T20:46:14.596465Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Tidybot: Personalized robot assistance with large language models","venue":null,"work_id":"06c2d5f2-f2d1-444c-a5d9-d8d13ab5b6d1","year":2023},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:465ec8ae0ff9d3028ad72fd7866733678b66dd3930ffb12ae48a67724262f730","observation_id":"eb4d895c-7807-40f2-ac94-8c142e5872f2","resolution":{"observed_at":"2026-05-26T17:22:45.951247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A taxonomy of ddos attack and ddos defense mechanisms.ACM SIGCOMM Computer Communication Review, 34(2):39–53","venue":null,"work_id":"affc0cce-b082-4763-952e-d1cd80c04daa","year":2004},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:e4fb29caf0b0e1bdc674b16726262c9d21bd0d1ff91bfe92366e60be5261c41c","observation_id":"53ff3307-60be-49ae-a5c6-337fc318c9f8","resolution":{"observed_at":"2026-05-26T17:22:45.915689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Surfingattack: Interactive hidden attack on voice assistants using ultrasonic guided waves","venue":null,"work_id":"a4a8fdb0-c378-4084-b0b0-1c281813fe2c","year":2020},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:6f1a35d9f6aa66e330834afe90cd8f926455aacdfdb083f350a842b2e582a919","observation_id":"77b2ec2b-f5c6-4ef4-8434-4212681e32b3","resolution":{"observed_at":"2026-05-26T17:22:45.903209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Audio adversarial examples: Targeted attacks on speech-to-text","venue":null,"work_id":"75fb904e-7cac-4677-9e14-1a720fcf4d05","year":2018},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:d84c7746524a9a7c44020e81f2381d90e53adae7d4e2f450ef951595e186d259","observation_id":"a006869e-fe8f-4d8c-9762-3a6b7d5497ea","resolution":{"observed_at":"2026-05-26T17:22:45.936822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Not what you’ve signed up for: Compromising real-world LLM-integrated applications with indirect prompt injection","venue":null,"work_id":"3fd0bee5-b114-437c-a282-24546aab37fe","year":2023},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:f8ebe33080750f3f78df017fd0e1a4cbcb3c7f5c522c5494a3e87398c084b66e","observation_id":"98a4362c-4c88-4602-9614-c77478c101b2","resolution":{"observed_at":"2026-05-26T17:22:45.899646Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ignore this title and hackaprompt: Exposing systemic vulnerabilities of llms through a global prompt hacking competition","venue":null,"work_id":"54b35793-bb4c-4c0f-aee0-b22dadfc2749","year":2023},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:6aa151e5b33fdc811cf287d2516086a04f995b717500b536e428c61815a242f4","observation_id":"9edae93e-9b6e-44f1-8f25-2e02e65c2b19","resolution":{"observed_at":"2026-05-26T17:22:45.906471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-04T02:19:57.679295Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":"2307.10490","doi":"10.48550/arxiv.2307.10490","metadata_source":"arxiv_reference","pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"(ab) using images and sounds for indirect instruction injection in multi-modal llms","venue":"arXiv (Cornell University)","work_id":"cbf07be0-59b9-485c-a352-3971f60f3d56","year":2023},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:c12b34ed4b6def08629598cfc86d2577b26fe1aa5cbdba09bb6c35512ddc6ed0","observation_id":"86b07d54-192f-42a8-bf58-7f0780903955","resolution":{"observed_at":"2026-05-11T20:46:14.602650Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Jailbreaking llm-controlled robots","venue":null,"work_id":"bef32850-a6e1-4734-8969-766a9fb289de","year":2025},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:2d1052e04966d170c8efaf2987759e4a7d8de3d94bc4be17ee8cf913c096a4ab","observation_id":"0b8e44c6-4ab3-4c2b-92a2-b5d449adf6ae","resolution":{"observed_at":"2026-05-26T17:22:45.895870Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20774","last_updated":"2025-04-30T17:59:57Z","snapshot_observed_at":"2026-07-06T18:23:15.098065Z","submitted_at":"2024-05-27T17:59:43Z","title":"Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems","version":3},"cited_work":{"arxiv_id":"2405.20774","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.20774","snapshot_observed_at":"2026-07-02T23:47:27.159022Z","title":"Can we trust embodied agents? exploring backdoor attacks against embodied llm-based decision-making systems","venue":null,"work_id":"3feeb85d-a467-4505-98cd-194f4186b367","year":2024},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"cited_paper":"/paper/2405.20774","citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:149b7c81eac8d6b898b9634da759c745e64ef6c9c1ee36eef957737b1059c109","observation_id":"2f2eab09-03bc-4dc5-a6ab-87d781953ed0","resolution":{"observed_at":"2026-05-11T20:46:14.633081Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.19870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T15:18:33.840739Z","title":"Freezevla: Action-freezing attacks against vision- language-action models","venue":null,"work_id":"ef52074e-6cb8-46c5-9238-3f271d52d343","year":2025},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:ee01d099f62e6161bf42c94014bb7b4971ef9a55ec99985918293826f1940a9f","observation_id":"28459977-33e8-46b2-a6b1-afcfe58ac89d","resolution":{"observed_at":"2026-05-11T20:46:14.641008Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2411.11683","doi":"10.48550/arxiv.2411.11683","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robot collapse: Supply chain backdoor attacks against VLM-based robotic manipulation","venue":"ArXiv.org","work_id":"7d4e2138-9e03-46f4-a7bb-f9a462b8969c","year":2024},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:380767f2bc6dec54fef3873d2b6e54182d865b9679e939e82cda5cd369afe012","observation_id":"640131a8-824f-451a-a014-de505173775e","resolution":{"observed_at":"2026-05-11T20:46:14.618619Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.01630","last_updated":"2024-09-03T05:56:50Z","snapshot_observed_at":"2026-07-06T19:09:32.189008Z","submitted_at":"2024-09-03T05:56:50Z","title":"SafeEmbodAI: a Safety Framework for Mobile Robots in Embodied AI Systems","version":1},"cited_work":{"arxiv_id":"2409.01630","doi":"10.48550/arxiv.2409.01630","metadata_source":"arxiv_reference","pith_arxiv_id":"2409.01630","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"SafeEmbodAI: A safety framework for mobile robots in embodied AI systems","venue":"arXiv (Cornell University)","work_id":"102eb569-d265-408a-90f6-0cacf2398a63","year":2024},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"cited_paper":"/paper/2409.01630","citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:42f23dd0c26f331836ce24ff98b84071999df55480df20b596839a22cf1462cc","observation_id":"4d1a5b74-4f3c-4b73-9edb-777cb86ab64e","resolution":{"observed_at":"2026-05-11T20:46:14.610132Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Accessed: 2026-04-22","venue":null,"work_id":"b562bc4c-8703-40d7-b1ff-85154ab4777d","year":2011},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:8e4a2d64bc55eea2c4de5683a5a754877b662d876aa330fe2b875585afd8d506","observation_id":"20f49938-ad09-4c29-83ad-a8f390cedb4b","resolution":{"observed_at":"2026-05-26T17:22:45.909664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Accessed: 2026-04-22","venue":null,"work_id":"f79bb18c-bf5b-4083-b34e-b130691eeb15","year":2011},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:9f9e00f0dd61bb86fa380c72cbd25d5fccae525ba20dc9f3e1561155f9143b6f","observation_id":"a81b4f24-fa2f-41cb-8088-2ececfc1ffb0","resolution":{"observed_at":"2026-05-26T17:22:45.918647Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Accessed: 2026-04-22","venue":null,"work_id":"8351b3d1-6df5-4c90-a1d5-d75e5d7d462b","year":2016},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:2bb14f0f2a8225cacd20457d6174e0d75f1ce9e53ed6a430dc6d6ce197c369c0","observation_id":"335cb010-c04e-4966-b243-6995235ee83c","resolution":{"observed_at":"2026-05-26T17:22:45.912507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T13:32:09.488526Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":"2506.03350","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-07-03T15:18:33.813982Z","title":"Pappas, Hamed Hassani, Matt Fredrikson, and J","venue":null,"work_id":"c5d1dae5-8ac6-407a-ad86-95fb7bfe3218","year":2025},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:6eb1b2735d7814cc3bb617eabf7097321c71e9f2f3a64675f4613819bbcbaad8","observation_id":"b1d9eb21-727b-4ae6-bdd8-48e5742cbda8","resolution":{"observed_at":"2026-05-11T20:46:14.626428Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T14:45:00.518957Z","title":"Refusal in language models is mediated by a single direction.Advances in Neural Information Processing Systems, 37:136037–136083","venue":null,"work_id":"a3da09a1-aab2-470d-a555-460653a883da","year":2024},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:c0b9236c0492bc41d006cbfe84e81240a4a86c16df38fec14738fc2bbc4f4ced","observation_id":"b1b24b40-2ed0-421a-872b-884e08d24cc1","resolution":{"observed_at":"2026-05-26T17:22:45.947803Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Photorealistic first-person view from a household robot at 0.5m height in a residential kitchen. No people present. Counter with appliances, refrigerator, sink. Clean, well-lit","venue":null,"work_id":"222f3eb1-bdce-4754-8aa1-baf5bdde4422","year":2010},"citing_paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-08T07:59:42.478294Z"},"links":{"citing_paper":"/paper/2604.24790"},"observation_digest":"sha256:ff50d0069c02ec7efb129993852089507455b4c103b7a2a4c935a82e5ed671d8","observation_id":"07f1347b-dfa9-494f-9bbc-d8da68f4d26c","resolution":{"observed_at":"2026-05-26T17:22:45.944132Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.24790","last_updated":"2026-04-25T10:52:29Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:10:47.277692Z","submitted_at":"2026-04-25T10:52:29Z","title":"Semantic Denial of Service in LLM-controlled robots"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":6,"verified_fuzzy":17},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2604.24790."}