{"as_of":"2026-08-04T07:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9475f8621b7eb4500da8e720660c436f89963336a697a9e115c5531a6fa529d4","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T10:01:14.412156Z","state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.03556/citation-record","integrity":"/paper/2606.03556/integrity","json":"/paper/2606.03556/citation-record.json","paper":"/paper/2606.03556"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Openvla: An open- source vision-language-action model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:59e6801fdbe6f1403545bce4e885e14d25f621d277cd5d160a3724eab16f36b8","observation_id":"e8687fc8-e3df-4bea-a976-22a564e9f69d","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"π0: A vision-language-action flow model for general robot control,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:d03d55ea8959f8018f4ea9261c59fc7edc37e7ce4acf5da31aa4c78bc39f75af","observation_id":"55891104-7203-42a4-9a21-d1682c6055cc","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.14734","last_updated":"2025-03-27T02:52:43Z","snapshot_observed_at":"2026-08-02T04:15:31.100670Z","submitted_at":"2025-03-18T21:06:21Z","title":"GR00T N1: An Open Foundation Model for Generalist Humanoid Robots","version":2},"cited_work":{"arxiv_id":"2503.14734","doi":"10.48550/arxiv.2503.14734","metadata_source":"pith","pith_arxiv_id":"2503.14734","snapshot_observed_at":"2026-07-10T23:07:47.672265Z","title":"GR00T N1: An Open Foundation Model for Generalist Humanoid Robots","venue":"cs.RO","work_id":"e2db69c7-ee8a-4cb7-a761-7b8de1dfcf97","year":2025},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"cited_paper":"/paper/2503.14734","citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:092f13e8ca8394e00b4a46ade7883a5c6ea350c64fe9bcccd0749c8226523fd2","observation_id":"1b66d00b-2493-464a-8d34-04ddb9221ac8","resolution":{"observed_at":"2026-07-02T03:26:29.665104Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-12T08:49:11.206777+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T08:49:11.206777+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Are we ready for service robots? the openloris- scene datasets for lifelong slam,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:20a341838ceea8679ee33adeaf40bebb44f9da7c25ac372b9eeb6ecd08dbe14d","observation_id":"16ea7cc5-137d-44a3-9231-7e1cfb82e5d4","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"A framework for end-user instruction of a robot assistant for manufacturing,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:d04a32dc6519ef5a31558cae662daf7f532f2ffa57baf03fe30940b464b88cd5","observation_id":"0ad95963-9390-4ac8-a29a-ac545b9d46ac","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:eb310b25703432f0e96215727aed9b67c0792f1bd1757bed41738d98e12c692b","observation_id":"7aa826fb-2ee5-40a2-ad32-4867f2eb9d47","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:329f4c6ffae87a8a0950f2f2587f8a6fefc3e4ee8320bf69205addfb17786402","observation_id":"aa48a298-a883-4567-a11d-c243881d09d3","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Exploring the adversarial vulnerabilities of vision- language-action models in robotics,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:fcbd599aad6823002c22c23c53c025f2db5e1b573a89d3982763d464be286ce0","observation_id":"8fb38875-458b-4600-87f9-b056ccab9ad5","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Robotics cyber security: Vulnerabilities, attacks, countermeasures, and recommen- dations,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:d122f7bd87c0b1e618a7c67aeec806edabc29e7f0f0201ab159c95880f562b03","observation_id":"a19069a7-2b9e-4e32-8828-7d82d24552a2","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"De- tection of cyber-attacks to indoor real time localization systems for autonomous robots,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:60b31d16cef65cd65bac43a9cc6b7cb624e82b29ee0e1231fd7338265e8bf490","observation_id":"88ec9fac-a0b5-4234-a638-d637a6c0f5c4","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Security for the robot operating system,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:704066df8076cf1d9593d69a7470c01fd2e771dcb78b65a3b5b5ef2e0fb0ecc1","observation_id":"b00fd93e-5435-4e88-a7ad-ba5935b516d8","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Tros: Protecting humanoids ros from privileged attackers,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:38107d95e5c88e9afd84e07da4f3e50e80f8e99514ce8c3e7fac71da5a048745","observation_id":"c38701ad-559e-4e5f-9757-98d45f077814","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Characterizing physical adversarial attacks on robot motion planners,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:9599075b977c3421804e7c275cbb00ddd0d67118156527c8d32bc025c71a2563","observation_id":"ccfac8e4-54de-477d-a7e3-3156734fbdaf","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Physical and digital adversarial attacks on grasp quality networks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:fdf61d1f4471c5d8ca0483e0c310d3f9a5f8df41e537584476b1dfc07062c306","observation_id":"a7ad6164-8d27-418f-8546-2674e4b67086","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Adversarial grasp objects,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:6691ba8346d2d062ac84550460f8764c143c5101fc8a2ac7d57fd3a42d70ceb9","observation_id":"f9eac846-5c2f-4b5e-8959-90b331864dde","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Advgrasp: Adversarial attacks on robotic grasping from a physical perspective,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:182adc8e1fc8d7428632d47abad975736eb5f86ad3c358b4d41bb44ac8faf223","observation_id":"7ee1d2ef-0d4b-4a32-9a53-98b95d9e09bb","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Adversary is on the road: Attacks on visual SLAM using unnoticeable adversarial patch,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:afd86fc18db0bd4479e22c03622de4166fd2265773750f84c3f4ee59fc8f0811","observation_id":"285a9226-33aa-4a73-84d3-f8c770bb2983","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Adversarial attacks on robotic vision language action models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:b2f33072678bcf7cc1d883545656570997ad6da6bcfbd488b3eaf408be4dff74","observation_id":"4debd6be-2ab0-42c1-a8ef-ec4d8f0d4042","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Badrobot: Jailbreaking embodied llm agents in the physical world,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:e832f8fc62397fa349999c0e4a27f8e266f3b033637134100a4bb26480208fcd","observation_id":"e3bbb2e8-a0ab-4173-98d2-9d48a6540c1e","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Exploring the robustness of decision-level through adversarial attacks on llm-based embodied models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:0b8acb263851c987f0bc80c17c5f88d84bbea2726b39a4034576a296d320d606","observation_id":"4d255c98-b76d-4744-960c-ba403b73b44d","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Badvla: To- wards backdoor attacks on vision-language-action models via objective- decoupled optimization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:6cd5c676169f2cddcd4dcef7bef25c0f77f10435070131dba7e8a0e4d784eb7a","observation_id":"9fa59069-e303-44d3-988a-4133b8aaaede","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:6517f56615acc15e87e668a71f2cf6341eab971432bf886306b8b6ffe13579a1","observation_id":"ac3c4f25-6d7c-41c3-a0cf-d9b08bf10e2f","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"The coordination of arm movements: An exper- imentally confirmed mathematical model,","venue":null,"work_id":null,"year":1985},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:30ac4760a48c3ac71bf00a9fe80e585c0ad3a73f277e6494a822ba730a09b586","observation_id":"c7b4fe75-f0d1-4c0d-9831-afbd2e2f6395","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"A technique for time-jerk optimal planning of robot trajectories,","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:5f340a7964eea9b4d51ca4bbbf7c7e892344d3d5845f634214a1c97bc5d0c0d4","observation_id":"e89e31ae-bb3c-444b-ab78-ee34125e7a69","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Libero: Benchmarking knowledge transfer for lifelong robot learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:54ed7e35c39531f0c75658636738a0c2b9ca05d4f8348e607df9edef33716369","observation_id":"0801c8f5-18cb-4538-b6c4-3a40fc755e78","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:01:14.412156Z","title":"Hume: Introducing system-2 thinking in visual-language-action model,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-28T10:01:14.412156Z"},"links":{"citing_paper":"/paper/2606.03556"},"observation_digest":"sha256:b2bb367bf59db35fc4531323bc5cb9401ad2fef072f692f0a56e6a8abd726c00","observation_id":"fbe292cc-e716-47ff-96dc-3dad62b00294","resolution":{"observed_at":"2026-06-28T10:01:14.412156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.03556","last_updated":"2026-06-02T12:19:28Z","latest_version":1,"primary_category":"cs.RO","snapshot_observed_at":"2026-07-06T23:43:46.458792Z","submitted_at":"2026-06-02T12:19:28Z","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":25,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2606.03556."}