{"as_of":"2026-08-05T08:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:456a6307444325a4ede8641ea45341b33152e77faad2d3e292c24377161a970f","coverage":[{"denominator":68,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":68,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-07T16:55:19.775120Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.25119/citation-record","integrity":"/paper/2604.25119/integrity","json":"/paper/2604.25119/citation-record.json","paper":"/paper/2604.25119"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.14082","last_updated":"2024-08-23T23:02:28Z","snapshot_observed_at":"2026-07-06T18:03:38.397804Z","submitted_at":"2024-04-22T11:01:51Z","title":"Mechanistic Interpretability for AI Safety -- A Review","version":3},"cited_work":{"arxiv_id":"2404.14082","doi":"10.48550/arxiv.2404.14082","metadata_source":"pith","pith_arxiv_id":"2404.14082","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mechanistic Interpretability for AI Safety -- A Review","venue":"cs.AI","work_id":"45111204-32e8-4772-9cb5-b333c52c39e3","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2404.14082","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:d9960123d2b40e954c68b0d99a93613af434ae5bf5683eb04a0e87d27e5446df","observation_id":"0bdfe039-7a24-4581-94d1-8c820d6af29a","resolution":{"observed_at":"2026-05-22T14:22:15.575714Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-18T08:21:04.963653+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-18T08:21:04.963653+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"kohya ss: Gui and cli for training diffusion models.https://github.com /bmaltais/kohya_ss","venue":null,"work_id":"d52cab36-6e4e-4f0d-87ae-d4090d9c7f88","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:8a1e3296777007cb760f61087df98746ec5339b09cddd4bc18941e940c5c27a7","observation_id":"ab811671-a1ec-409a-9a8d-7186f3e57750","resolution":{"observed_at":"2026-05-27T01:38:23.226400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Conceptual 12m: Pushing web-scale image-text pre-training to recognize long-tail visual concepts","venue":null,"work_id":"a1e29ce7-577f-4fc4-866c-75e5a8b27612","year":2021},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:61b1c02f0529eaff15ffba3a87630921226d0f42faac048a25c04fcadbf96f7b","observation_id":"02e88f19-48f6-46cc-a642-49ffabd23b17","resolution":{"observed_at":"2026-05-27T01:38:23.248463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8a3b5c0d-de1f-4496-befd-aaab662b601d","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:9ce8eb611af93c808bef65d1fc9fa66b47f8ea470d73279bf008bf2de7f55738","observation_id":"b730f365-612e-493f-bdc3-07dacec08644","resolution":{"observed_at":"2026-05-27T01:38:23.238818Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards automated circuit discovery for mechanistic inter- pretability.Advances in Neural Information Processing Systems, 36:16318–16352","venue":null,"work_id":"983ff5da-490f-4a95-b2dc-6be42c050c72","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:06d7174783b83573a4ce8f3a4419f772449be62e2509f31a43b24935e25bdbaa","observation_id":"3d7f6b91-ea7c-499f-ae6b-769202d45c2e","resolution":{"observed_at":"2026-05-27T01:38:23.242807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.05707","last_updated":"2026-04-23T19:53:13Z","snapshot_observed_at":"2026-07-06T22:37:54.987339Z","submitted_at":"2025-12-05T13:34:05Z","title":"Evaluating Concept Filtering Defenses against Child Sexual Abuse Material Generation by Text-to-Image Models","version":2},"cited_work":{"arxiv_id":"2512.05707","doi":"10.48550/arxiv.2512.05707","metadata_source":"pith","pith_arxiv_id":"2512.05707","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Evaluating Concept Filtering Defenses against Child Sexual Abuse Material Generation by Text-to-Image Models","venue":"cs.CR","work_id":"f3d780a2-4556-4ab1-a86a-02902d8dd31a","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2512.05707","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:5c024610092b42cf93bd30acb4151ead4103c08823d497eba87c2e293afa5bb8","observation_id":"1f4075ed-e30d-490c-8111-5938488a47d2","resolution":{"observed_at":"2026-05-11T23:31:14.064293Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Interpreting the weight space of customized diffusion models.Advances in Neural Information Processing Systems, 37:137334– 137371","venue":null,"work_id":"5dc0ad72-3aae-497b-8fbd-008d559c8c05","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:e7061eabff1c611e84aebeb0b53a4fe845403bb44eb435c4904987631bb539fd","observation_id":"94288aa0-ab4f-49b8-b6cc-a94243dccc5f","resolution":{"observed_at":"2026-05-27T01:38:23.230922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12508","last_updated":"2024-04-04T07:45:38Z","snapshot_observed_at":"2026-08-03T17:30:25.153454Z","submitted_at":"2023-10-19T06:17:17Z","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","version":5},"cited_work":{"arxiv_id":"2310.12508","doi":"10.48550/arxiv.2310.12508","metadata_source":"pith","pith_arxiv_id":"2310.12508","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","venue":"cs.LG","work_id":"b38d8886-7b2d-4e04-a02e-e7fda5a55db0","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2310.12508","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:03ef88102cb8306d228f50be719f4dcecaaba16c11496330d8dd4813f36b3338","observation_id":"a369f2c2-2f14-4650-be3f-8e1939491057","resolution":{"observed_at":"2026-05-16T17:56:24.064532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 cybertipline report.https: //www.missingkids.org/content/dam/missingkids/pdfs/cybertiplinedata202 4/2024-CyberTipline-Report.pdf","venue":null,"work_id":"b985edcb-f64b-4a3b-804f-59a4bfa63863","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:af815c206aa3b4cbfce09b8c08590bf4a6a68569bcf0fe43ec9bae281d20818e","observation_id":"9eda9242-41be-49fc-8d3d-62b8b2b8ea60","resolution":{"observed_at":"2026-05-27T01:38:23.235006Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.07288","last_updated":"2024-08-29T06:22:48Z","snapshot_observed_at":"2026-07-06T18:13:12.014618Z","submitted_at":"2024-05-12T14:01:05Z","title":"Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning","version":2},"cited_work":{"arxiv_id":"2405.07288","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.07288","snapshot_observed_at":"2026-07-02T02:06:27.193222Z","title":"Erasing concepts from text-to-image diffusion models with few-shot unlearning","venue":null,"work_id":"eadadff9-659e-487b-8d91-f3af63cb83cb","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2405.07288","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:78df518cdd52374d830cf3ce0bae3459bbe06d78ba565e87ec9d21d8776c4d79","observation_id":"ec43771b-b034-45d4-bc1d-261750fe9ffb","resolution":{"observed_at":"2026-05-11T23:31:14.097140Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diffusion models and representation learning: A survey.IEEE Transactions on Pattern Analysis and Machine Intelligence","venue":null,"work_id":"27d9c2bc-ecc5-4378-b41c-bd108b9f81a5","year":2026},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:dcc78319d16043d6ac064004adaf87d5ca496e09d85a7abb4191d346e2eb0594","observation_id":"c488cb82-ab6e-491e-a9d3-ec217a2fc8c4","resolution":{"observed_at":"2026-05-27T01:38:23.256091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Eras- ing concepts from diffusion models","venue":null,"work_id":"05e472e0-a62e-4301-9436-3c209857a736","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:79d72f6139c0f23671d64f0d5349b6792de0da3a8c9c1536eb64d9cef1edef90","observation_id":"8f6c6802-090d-4a89-9c5a-c3f26d596df9","resolution":{"observed_at":"2026-05-27T01:38:23.260369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Unified concept editing in diffusion models","venue":null,"work_id":"5dac6b83-afea-4d76-883e-a34af4bfa2be","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:89ac24012afb34928a791593e39fc3835c9135ba3f1f005d06bf7d7677d72673","observation_id":"967aa2a3-f444-48e3-bce4-3fe92bfcfd5e","resolution":{"observed_at":"2026-05-27T01:38:23.252123Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":"2209.07858","doi":"10.1136/bcr-2013-201554","metadata_source":"pith","pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","venue":"cs.CL","work_id":"1aabd84d-3779-4ba9-ba2f-15ce264a9b1e","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:a7b9e0d14a98be839687f70df664c113bbe67fbe9886d9fe8a9d52cbea3bf597","observation_id":"0de47271-54bd-489d-8bd2-b4e9ab93d6ca","resolution":{"observed_at":"2026-05-12T01:38:08.797180Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Meta-unlearning on diffusion models: Preventing relearning unlearned concepts","venue":null,"work_id":"bd61d2f8-e454-479b-ae71-3865a5d2c2fb","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:0471f76a549afe7062d3e74ab4a5e5b055c0f57ce415e4c40765298c0243fa88","observation_id":"aff018b8-ee41-4638-b687-ce8e3b0b4b15","resolution":{"observed_at":"2026-05-27T01:38:23.116701Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Yale University Press","venue":null,"work_id":"b66d1193-d532-4998-8bca-893ac184921b","year":2018},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:e2029d064430f42a17abd0d9d474a41a6a631d2fbdf3e3d6833a06e5a871feec","observation_id":"fd468414-65ce-4378-8ce4-778c63fd1943","resolution":{"observed_at":"2026-05-27T01:38:23.109122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:11:52.650423Z","title":"Lora: Low-rank adaptation of large language models.ICLR, 1(2):3","venue":null,"work_id":"421353f1-f10a-4559-8de6-966e7d699eaf","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:08f3f160980bedcafd706cc7b1aed94805b6f58c8b139c4cbf9a9a6ddb3ecef1","observation_id":"e906d8d9-5e35-4b92-a687-3ce62c6a8a05","resolution":{"observed_at":"2026-05-27T01:38:23.120592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17717","last_updated":"2024-07-18T07:23:03Z","snapshot_observed_at":"2026-07-06T16:54:26.205948Z","submitted_at":"2023-11-29T15:19:49Z","title":"Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers","version":3},"cited_work":{"arxiv_id":"2311.17717","doi":"10.48550/arxiv.2311.17717","metadata_source":"pith","pith_arxiv_id":"2311.17717","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Receler: Reliable concept erasing of text-to-image diffusion models via lightweight erasers","venue":"cs.CV","work_id":"0934a52c-523f-4766-8ef1-4312a7f3578f","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2311.17717","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:bf10e9d1171163c9a6993f0ff1b348f50e2b6b12f6a40625dfb0c10f1ff7957f","observation_id":"8bfc7f86-903c-454a-b0f1-7cc12a1cbc1d","resolution":{"observed_at":"2026-05-11T23:31:14.165290Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Harm without limits: Ai child sexual abuse material through the eyes of our analysts, March 2026","venue":null,"work_id":"a6a507cc-0320-431b-90aa-f07973d30e7d","year":2026},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:e5c1185518e96d5e1051b571a7eda3ca53bbae7d244d2b1983584009390d1f23","observation_id":"75be1f2b-31ac-48e0-acfa-f64ef21ea1bb","resolution":{"observed_at":"2026-05-27T01:38:23.099264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Invokeai","venue":null,"work_id":"f715e14b-3194-48fc-a69b-04705af9a5e1","year":2026},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:a24b810401c778f1708b85def9067044f9c63b26d866fd8b742f560be135b4be","observation_id":"61f1cc4a-cdf6-4fd2-be0d-6b287d1f9a23","resolution":{"observed_at":"2026-05-27T01:38:23.096030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Jailbreakdiffbench: A comprehensive benchmark for jail- breaking diffusion models","venue":null,"work_id":"9ae0cad8-9305-4efb-b0e7-3b7f053bef8c","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:df3b258f7e8bd4c3f64a0ea43fdbf75a5824f1366bbf5db7f733f7d50bb33a3b","observation_id":"ca1e775c-b581-4101-a501-8cfe551ecea8","resolution":{"observed_at":"2026-05-27T01:38:23.102152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep linear probe generators for weight space learning","venue":null,"work_id":"a0f6d122-b349-4354-9e49-1b7159931614","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:130a56d96a2a34f7f751069d22be876bf55b76e8c733c5132e8f3729537fb70f","observation_id":"7f2c34a7-f76b-4455-b853-e8bb262724aa","resolution":{"observed_at":"2026-05-27T01:38:23.112918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Child safety necessitates new ap- proaches to ai safety","venue":null,"work_id":"befea740-4ebc-44a4-854f-e52faae07912","year":2026},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:f52d7b8c0457cb2de172c890a2b286a7b9bc9dc9ea3c0c771b7ea155cb8c7be3","observation_id":"a2124c35-da72-4957-ad0c-4a28c9912f9c","resolution":{"observed_at":"2026-05-27T01:38:23.074399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00064","last_updated":"2025-02-19T15:51:43Z","snapshot_observed_at":"2026-07-06T19:59:06.645605Z","submitted_at":"2024-11-25T21:47:02Z","title":"DiffGuard: Text-Based Safety Checker for Diffusion Models","version":2},"cited_work":{"arxiv_id":"2412.00064","doi":"10.48550/arxiv.2412.00064","metadata_source":"pith","pith_arxiv_id":"2412.00064","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2024 , journal =","venue":"cs.CV","work_id":"4506df41-20ac-428d-ad14-7a3aa6e3d4fc","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2412.00064","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:c797a1a00a187c6f3416b42a82ccd7df205eae559ca82e3f99e44d03f55c4203","observation_id":"514ee859-8583-41e7-b4e0-6873828b50e5","resolution":{"observed_at":"2026-05-11T23:31:14.131010Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-05-20T21:54:56.191016+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-20T21:54:56.191016+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Boosting alignment for post- unlearning text-to-image generative models.Advances in Neural Information Pro- cessing Systems, 37:85131–85154","venue":null,"work_id":"c75d7aa8-046c-4dc8-a0d3-82e3c7ba6423","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:279f6198cd626618176c4ecb15e98dc7335fcb7ccc081f2ad32996470ab925d5","observation_id":"7ce1835a-4fbc-46d7-ad1e-1b71c352d291","resolution":{"observed_at":"2026-05-27T01:38:23.093037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"adbb3817-2fbd-44ad-af76-0de5511be623","year":1956},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:1f6b897c024e36ef83f19635adc531fe0b66b2ae10d25b465f27a8ab62e5ba18","observation_id":"3806b2fe-28f9-4afa-a47e-e95e0c2728fe","resolution":{"observed_at":"2026-05-27T01:38:23.078068Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.10960","last_updated":"2023-03-29T06:39:50Z","snapshot_observed_at":"2026-08-04T15:33:06.809585Z","submitted_at":"2022-10-20T02:07:23Z","title":"Diffusion Models already have a Semantic Latent Space","version":2},"cited_work":{"arxiv_id":"2210.10960","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.10960","snapshot_observed_at":"2026-07-10T09:16:59.486610Z","title":"Diffusion models already have a semantic latent space.arXiv preprint arXiv:2210.10960","venue":"cs.CV","work_id":"8d6090a5-d1fb-4124-a4e8-8831d5fbc0a7","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2210.10960","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:2de8773d74dba2bdf6c91e72d37fd00c2df6cc2a5190696fffb81cd935379913","observation_id":"41d2b503-2b44-4168-96e3-bba4c6c4c982","resolution":{"observed_at":"2026-05-11T23:31:14.156893Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Flux.https://github.com/black-forest-labs/flux","venue":null,"work_id":"a0f8c650-b499-4fc6-b3dd-67125ba9fb3a","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:a27b3fbe6649a33d45ba9d0a287dface7e775c308ab23ef89f9e34c3f786641c","observation_id":"2d65c1d5-b6a9-44c6-beae-1dd2add58a66","resolution":{"observed_at":"2026-05-27T01:38:23.148054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Holistic evaluation of text-to-image models.Advances in Neural Information Process- ing Systems, 36:69981–70011","venue":null,"work_id":"11bc6d07-595d-47db-9634-29690e8a6d7b","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:7b9d2b7f04e661410d0cfeeba1796c74632d8cc907d9e03725d0f0e6ef667fa0","observation_id":"a6e9037c-8f14-4f6a-97bf-b5210f07bbc4","resolution":{"observed_at":"2026-05-27T01:38:23.136892Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shake to leak: Fine- tuning diffusion models can amplify the generative privacy risk","venue":null,"work_id":"ef3051b1-250f-4dda-8a6b-0d0b6d72e3f3","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:cd05b4df579e485b966ddbffa31c72e4cad3417bf942b31b92e07b52f8262682","observation_id":"d840df1c-1b51-442f-8179-96435d15be17","resolution":{"observed_at":"2026-05-27T01:38:23.187590Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.24296","doi":"10.48550/arxiv.2509.24296","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2025 , journal =","venue":"arXiv (Cornell University)","work_id":"5e7bebb5-2e3b-4151-a1d9-d9cf7c2f1975","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:69542b7ee8406e01dac810305d382023848d63b0432488728cc2523ff83859aa","observation_id":"6d9c910c-00d4-4814-b210-6cb9a6f9fdbe","resolution":{"observed_at":"2026-05-11T23:31:14.182767Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-05-20T21:54:49.656843+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-20T21:54:49.656843+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":"f78d5eca-17f1-40ae-89a2-47e7dca5f376","year":2014},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:84b1ae97d7111abaf1085e7f8336d1f8b64d501c82ce1b535bcf9a09682b1292","observation_id":"3d92fa74-57ac-4b63-bd36-349595dbec59","resolution":{"observed_at":"2026-05-27T01:38:23.191564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2505.17013","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When are concepts erased from diffusion models?arXiv preprint arXiv:2505.17013","venue":null,"work_id":"fc86d282-8de0-4f97-abef-9662dcd26c6d","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:fed93295f2f4d5a64a86526cb0006ff78540d9252ff31c615065d652aa15a463","observation_id":"ec7cfdec-7128-4dec-b25b-f43df042cfd3","resolution":{"observed_at":"2026-05-11T23:31:14.201910Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mace: Mass concept erasure in diffusion models","venue":null,"work_id":"d8f85c08-8ba6-4fca-8b43-5f0872c4494c","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:1756f64a5234927eb57c5bad218ba221cdb83550ac78baf25d5cf9cfbf3abe35","observation_id":"5c84781e-4d72-42aa-a24e-b04431493832","resolution":{"observed_at":"2026-05-27T01:38:23.195203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Stable bias: Evaluating societal representations in diffusion models.Advances in Neural Information Processing Systems, 36:56338–56351","venue":null,"work_id":"7a670219-e60a-4e57-9ddd-3fd5c252cdde","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:8fd26032da50cc88f9193566677cdc974837c175cf68eca0938b47ebad1fcc96","observation_id":"6b52433e-4437-42c5-a664-d4058c6a37e4","resolution":{"observed_at":"2026-05-27T01:38:23.206253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/cvpr52733.2024.00402","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Vbench: Comprehensive benchmark suite for video generative models","venue":null,"work_id":"b373e1af-d64c-4f0f-8fa3-14816adf807a","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:a3ce529e5d695f4bab2d900fe933da9665e6ca09776913f91f7a0ed52eb44fbb","observation_id":"90b60a3a-9abc-4067-a2e8-21da0e48d595","resolution":{"observed_at":"2026-05-09T01:49:35.579736Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Jailbreaking prompt attack: A controllable adversarial attack against diffusion models","venue":null,"work_id":"6c005853-184c-45cb-be3a-5731f4da56c3","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:394a19b3b54ac1a8646dda0b4c9e907339940f974c9041213b857b69e96259dd","observation_id":"2c1ccad4-9e5c-4330-8fc5-6cfcdbac4e87","resolution":{"observed_at":"2026-05-27T01:38:23.179809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Object segmentation dataset.https://huggingface.co/dataset s/amaye15/object-segmentation","venue":null,"work_id":"18cb0dd8-a18a-4827-b24e-85c6818a4743","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:21981d457806b9bceaab4a47998ecd74705816df8ced8dc0b7a7b74920d96026","observation_id":"4e66dcc4-7cac-451b-bac0-f801d254fcc4","resolution":{"observed_at":"2026-05-27T01:38:23.202442Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Opennsfw: A dataset for nsfw image classification","venue":null,"work_id":"6e3db193-f838-4085-ac37-ba2ad0acfddb","year":2016},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:265e5b97d9f0f57e743b5a46133ae9e02635a1ce5a233f4866488b2637f62aa5","observation_id":"eb0f5a0e-dacc-4c6b-b2a9-0dcaf5b7f7fb","resolution":{"observed_at":"2026-05-27T01:38:23.214603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Danbooru2023.https://huggingface.co/datasets/nyanko7/danbooru 2023","venue":null,"work_id":"41a03fdf-77df-4f97-8239-ee7bb62fb053","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:e98dad2105c20aed76189edbfd6773ed8379fd021bdd22e5483588209fed94bb","observation_id":"954b5a12-c2d8-4c4e-8ab4-fc77a552ad08","resolution":{"observed_at":"2026-05-27T01:38:23.171601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Flickr30k entities: Collecting region-to-phrase corre- spondences for richer image-to-sentence models","venue":null,"work_id":"ff72f1e9-1f91-49b0-b342-da8ff44d4e0e","year":2015},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:b34c63ce0163000d15fab48dac99c375d94cd56814c4e0b9ee7cdfa5d624ec56","observation_id":"92e03b21-a188-444d-be96-c6c7c7cdb422","resolution":{"observed_at":"2026-05-27T01:38:23.159835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Unsafe diffusion: On the generation of unsafe images and hateful memes from text-to-image models","venue":null,"work_id":"9e9fb242-e9ce-410a-aee3-2ed5b9879599","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:a7bd79934d4d2fc383ddee2a4e86b6f0abfc67dd99c3b81fd412be638fbac168","observation_id":"56ae07e9-1ce2-4093-a9b1-1323d4924abe","resolution":{"observed_at":"2026-05-27T01:38:23.198977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":"2210.04610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-04T19:30:07.408628Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":"1b6a63ba-2fb7-4f9d-9974-9d2761fff3d7","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:bbed88e6aa91314b3c0ff85ca902a2919787300ee96f855d91452051d9ffcb8c","observation_id":"ba0a17e2-f99f-49b2-8b94-91b70afdf8fc","resolution":{"observed_at":"2026-05-11T23:31:14.149119Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Yale University Press","venue":null,"work_id":"33ee5837-66d8-41de-b9c9-83df25baa8e3","year":2019},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:0ed79c5efb6d8a8468e8be1af1957a83bbd3dbd015dd48b56cf31d4616898b6b","observation_id":"82dfcf83-494a-49d5-a140-34403134b45c","resolution":{"observed_at":"2026-05-27T01:38:23.156004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":"ff10ffd9-bcfd-46fc-846b-c9c2281529fd","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:b2e873c210e4242a4a5d9aa398bb3a268f0fc1309e852b17b6213eeaab8eede3","observation_id":"8dd8748b-6134-4678-a1dc-c62334bc661c","resolution":{"observed_at":"2026-05-27T01:38:23.163475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1505.00855","last_updated":"2015-05-05T01:25:26Z","snapshot_observed_at":"2026-07-06T04:16:54.272660Z","submitted_at":"2015-05-05T01:25:26Z","title":"Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Feature","version":1},"cited_work":{"arxiv_id":"1505.00855","doi":null,"metadata_source":"pith","pith_arxiv_id":"1505.00855","snapshot_observed_at":"2026-07-10T15:47:23.327780Z","title":"Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Feature","venue":"cs.CV","work_id":"6c4ab46a-341c-4ec0-a466-0ef53934ec11","year":2015},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/1505.00855","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:3d99b34248f02c696cd16a8d57c2772f7d8fdc6fd633470f56b78c9d33d17a07","observation_id":"3c1d478e-b2cf-4437-8125-cb9dd29d18a1","resolution":{"observed_at":"2026-05-11T23:31:14.171722Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Laion-5b: An open large-scale dataset for training next generation image-text models.Advances in neural information processing systems, 35:25278– 25294","venue":null,"work_id":"775f8d8b-5d64-4152-8a14-27341fed8529","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:2c3320960cb9c261b0904e7e27343544f5a3421c84c17f3cb0faf207d820de6f","observation_id":"ce2e941b-ab01-4bf5-b31c-4dca29ac0520","resolution":{"observed_at":"2026-05-27T01:38:23.167427Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Self-supervised rep- resentation learning on neural network weights for model characteristic prediction","venue":null,"work_id":"b94c9bd7-9286-440b-aae7-7d2affd9299e","year":2021},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:46dc5f86a50ff26e8dd608a91faedda280dc7b5b9c2ed61a53177b4d0ae6bba4","observation_id":"7753c945-f3fb-44a9-a98c-3dd7f56b8e04","resolution":{"observed_at":"2026-05-27T01:38:23.217839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards scalable and versatile weight space learning","venue":null,"work_id":"2e5bb151-9895-416b-b470-d59d1c75ec09","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:ecc6d8d7f7b40af559c76e65c659fdfc940428bb65c3b11787137c25e92f092c","observation_id":"4277288b-8e50-420e-bfc1-c1d39565bc22","resolution":{"observed_at":"2026-05-27T01:38:23.144542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15324","last_updated":"2023-09-22T18:48:42Z","snapshot_observed_at":"2026-07-06T15:32:39.787935Z","submitted_at":"2023-05-24T16:38:43Z","title":"Model evaluation for extreme risks","version":2},"cited_work":{"arxiv_id":"2305.15324","doi":"10.48550/arxiv.2305.15324","metadata_source":"arxiv_reference","pith_arxiv_id":"2305.15324","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Model evaluation for extreme risks","venue":"arXiv (Cornell University)","work_id":"12dff4e7-a81d-4b95-aba7-885a457042c6","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2305.15324","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:d64a6874a93dbbf3f4fa4f3b45cf98d1b932741acb41579234a808780fd98043","observation_id":"fa8dc43b-6271-499b-9812-a4d0c020d8c0","resolution":{"observed_at":"2026-05-11T23:31:14.196298Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-05-21T07:52:16.870575+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-21T07:52:16.870575+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The psychological well-being of content moderators: the emotional labor of commercial moderation and avenues for improving support","venue":null,"work_id":"bcf858ba-249e-4aef-a23b-fb5fd61760fd","year":2021},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:5249853e1fe7fdac41f21ac6b5fd3663a8658d7328f242307aebd713c69087a7","observation_id":"1d679b68-47ee-42b8-8c43-2cda33ae1081","resolution":{"observed_at":"2026-05-27T01:38:23.128858Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Unstable unlearning: The hidden risk of concept resurgence in diffu- sion models","venue":null,"work_id":"8520e241-49ec-49ab-9bbd-8040d19b5714","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:52528ea37e50f3ff3471f4ba498277ef4cc5a0e899c8723d953486a5f90d8bb0","observation_id":"cf0aeec6-bd6e-4f62-87a1-3c2e0d0bed54","resolution":{"observed_at":"2026-05-27T01:38:23.132848Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Generative ml and csam: Im- plications and mitigations.Stanford Digital Repository","venue":null,"work_id":"a41f0959-2c7f-4836-a9f5-1aceb7f84404","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:8c220cc298bf4cec4c1d657e597f5d293e6742b814fbe255ab1916259fc1aec0","observation_id":"62c89a7d-c512-44a0-aa72-9be151fc6f9a","resolution":{"observed_at":"2026-05-27T01:38:23.152301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safety by design three-month progress report #3: November 2024 to january 2025.https://info.thorn.org/hubfs/Thorn-SafetybyDesign-ThreeMonthProgr essReport-3.pdf?","venue":null,"work_id":"3101a386-5186-491f-8af0-01e0750a6bb4","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:da6f329166fa5182df1cfee70745e6998a5117894421dacc0121749001c80904","observation_id":"8e43167d-abb5-41c6-a871-c98e5acc1cbf","resolution":{"observed_at":"2026-05-27T01:38:23.105569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safety by design for generative ai: Preventing child sexual abuse.https://info.thorn.org/hubfs/thorn-safety-by-design-for-g enerative-AI.pdf","venue":null,"work_id":"55cd2314-396b-47e0-8996-d341321ef8f9","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:33188c9cf5166d8fd9e55845f58e340762b91ecf9dc473a25e2886c24e82036f","observation_id":"36693a8e-2045-4008-9141-e2e632cbf68f","resolution":{"observed_at":"2026-05-27T01:38:23.089264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Attacks and defenses for gen- erative diffusion models: A comprehensive survey.ACM Computing Surveys, 57(8): 1–44","venue":null,"work_id":"c29f2b41-e88e-4508-9874-0c14c368a06a","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:99aece155141487c1cafbff25d63b7b737c65cee5c554572766d2ce080e6e839","observation_id":"641a3a7b-d641-4c17-8d35-251c87ab6af6","resolution":{"observed_at":"2026-05-27T01:38:23.069871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Unsplash lite dataset.https://github.com/unsplash/datasets","venue":null,"work_id":"7d6b35ba-8e16-4ccb-946e-e9d60c410b05","year":2017},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:75b6ec818f196e04e8b68c7176ac80b1e48e433a0b15523751456610a3f4dda7","observation_id":"335050df-0747-430e-be81-4a958ebfab29","resolution":{"observed_at":"2026-05-27T01:38:23.081593Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.11448","last_updated":"2021-04-09T10:38:15Z","snapshot_observed_at":"2026-07-06T09:00:15.310896Z","submitted_at":"2020-02-26T13:06:14Z","title":"Predicting Neural Network Accuracy from Weights","version":4},"cited_work":{"arxiv_id":"2002.11448","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2002.11448","snapshot_observed_at":"2026-07-03T20:58:57.267130Z","title":"arXiv preprint arXiv:2002.11448 , year=","venue":null,"work_id":"4c672574-1151-4b37-8766-f622bc3d6f7c","year":2002},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2002.11448","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:8451fe3c2c5e4b3b3573e5fbd051571fdfdd474bfaaf3211b2266ec215226f13","observation_id":"9cfb9652-0ddc-4e6a-9562-490df2b42006","resolution":{"observed_at":"2026-05-11T23:31:14.080649Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diffusers: State-of-the-art diffusion models","venue":null,"work_id":"882b8d9b-de2f-400a-8e18-192205613eea","year":2022},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:42f51b701cd7385833e8dd0f67ae745fc389cc18d1a1cf98c149819d3f439101","observation_id":"fdb797c7-b1c1-457b-998e-ba4fa7b730cc","resolution":{"observed_at":"2026-05-27T01:38:23.085880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.20314","last_updated":"2025-04-19T02:22:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-26T08:25:43Z","title":"Wan: Open and Advanced Large-Scale Video Generative Models","version":2},"cited_work":{"arxiv_id":"2503.20314","doi":"10.1109/19.492748","metadata_source":"pith","pith_arxiv_id":"2503.20314","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wan: Open and Advanced Large-Scale Video Generative Models","venue":"cs.CV","work_id":"ad3ebc3b-4224-46c9-b61d-bcf135da0a7c","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2503.20314","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:4e4471355d21def3ba1e1815adbbac20332a17d643e3f57033367458f7bfeb7d","observation_id":"e7fd97ca-e2e5-446d-9075-a237c125171f","resolution":{"observed_at":"2026-05-11T23:31:14.073558Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Jailbroken: How does llm safety training fail?Advances in neural information processing systems, 36:80079– 80110","venue":null,"work_id":"0ce0ff19-b317-4a72-a318-7b7d841ba321","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:8c60c14312a8f3424a0ac2c3544509add8873066f145516c619ca2eadf20b660","observation_id":"8700bf4e-f6bf-4464-a6fc-b26414f9b4f9","resolution":{"observed_at":"2026-05-27T01:38:23.124448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T06:14:38.906977Z","title":"Scissorhands: Scrub data influence via connection sensitivity in networks","venue":null,"work_id":"7628dd01-cb45-43c5-8b8c-6230a4967f77","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:177776f49ace5be4714b60e069a8b28c4dad470d2220cb7e26e270c849039bc7","observation_id":"bb754bdf-f284-41dd-aef9-ccb8030a6250","resolution":{"observed_at":"2026-05-27T01:38:23.140963Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05779","last_updated":"2024-11-20T09:31:15Z","snapshot_observed_at":"2026-08-03T00:33:47.016786Z","submitted_at":"2024-01-11T09:30:36Z","title":"Erasing Undesirable Influence in Diffusion Models","version":4},"cited_work":{"arxiv_id":"2401.05779","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.05779","snapshot_observed_at":"2026-07-10T15:47:23.224274Z","title":"Erasediff: Erasing data influence in diffusion models","venue":"cs.CV","work_id":"bce8d7e0-48c4-423d-87f3-275dcd11b5e9","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2401.05779","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:e7348ed946b31788948f66f24ff606a9c262dc0e0744daddaae6cc4953c834ed","observation_id":"51e55722-925b-47bb-97cc-bb28970833d8","resolution":{"observed_at":"2026-05-11T23:31:14.104465Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diffusion models: A comprehensive survey of methods and applications.ACM computing surveys, 56(4):1–39","venue":null,"work_id":"f8e60bf6-8e2d-4da4-8d3d-48def2540823","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:0398488cc1ef015e267f9c892bde3a8cc705dbc63c10595098dec792012288d4","observation_id":"13c85078-68bd-4593-ae2f-711b401fc183","resolution":{"observed_at":"2026-05-27T01:38:23.221723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"1b0754b1-b1df-40d6-9442-afee247fdc41","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:26f25efb53055ae7d4d148a11667a65c84541b977fa942e4ad6fae6b5a1ef2f7","observation_id":"c259b0f3-9819-4e75-bb25-124ec5c2fe3b","resolution":{"observed_at":"2026-05-27T01:38:23.211068Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"What lurks within? concept auditing for shared diffusion models at scale","venue":null,"work_id":"0b012f84-ae0d-42c0-a245-31d3f108cd20","year":2025},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:99b2027c0383f9adda927b5bc224e76a12c9cb82f6645857f1dc1dca146f3346","observation_id":"cee9e3d5-e8cd-4e9e-9abc-217c82e428b4","resolution":{"observed_at":"2026-05-27T01:38:23.183525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15234","last_updated":"2024-10-09T16:12:40Z","snapshot_observed_at":"2026-08-01T19:30:59.597503Z","submitted_at":"2024-05-24T05:47:23Z","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","version":3},"cited_work":{"arxiv_id":"2405.15234","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.15234","snapshot_observed_at":"2026-07-10T15:47:23.259518Z","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","venue":"cs.CV","work_id":"885ce5e7-5642-40da-8b6b-5cb241a04aa0","year":2024},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"cited_paper":"/paper/2405.15234","citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:04ce9da676481de51ed8a663cf02d1c322911bd8866f9e79c48cab82dd35a9cc","observation_id":"f138e170-a6c5-4a04-b5fc-3890bd7ee43d","resolution":{"observed_at":"2026-05-11T23:31:14.114516Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding and im- proving adversarial attacks on latent diffusion model","venue":null,"work_id":"aec8a95b-7dd8-4142-a459-698e316c090c","year":2023},"citing_paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-07T16:55:19.775120Z"},"links":{"citing_paper":"/paper/2604.25119"},"observation_digest":"sha256:2979f33ec46c9a33203f1b5f8e1d2a6eec2f5c441ccab9897c30a5629a894c90","observation_id":"7c4de133-5b1d-47ef-9bd0-ab1b0c66a6a5","resolution":{"observed_at":"2026-05-27T01:38:23.175569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.25119","last_updated":"2026-04-28T01:54:25Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:54:25Z","title":"Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM"},"reference_resolution":{"displayed":68,"state_counts":{"malformed_identifier":0,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":2,"verified_exact":14,"verified_fuzzy":48},"total_outbound_references":68},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 68 of 68 outbound references and 0 inbound Pith citation observations for arXiv:2604.25119."}