{"as_of":"2026-08-07T21:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6ae5631740b0df2c201b76b6879835f53b67e1a41082f9c050e7bcd9fe511fc3","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-01T05:15:25.278988Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.31876/citation-record","integrity":"/paper/2606.31876/integrity","json":"/paper/2606.31876/citation-record.json","paper":"/paper/2606.31876"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.810280Z","title":"Refusal in language models is mediated by a single direction","venue":null,"work_id":"7c23dbb8-d7a8-49c4-9610-f14c9126d8df","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:b78b6d842c64a8b2b7f83362190a78f7af3b390c83e2132f960e31ecf98eeb10","observation_id":"2ff4e6ca-df07-47cf-9da8-36ef48b65446","resolution":{"observed_at":"2026-07-06T22:22:58.811599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2511.21631","last_updated":"2025-11-27T12:16:54Z","snapshot_observed_at":"2026-07-06T22:37:03.716474Z","submitted_at":"2025-11-26T17:59:08Z","title":"Qwen3-VL Technical Report","version":2},"cited_work":{"arxiv_id":"2511.21631","doi":"10.1016/j.neunet.2025.107777","metadata_source":"pith","pith_arxiv_id":"2511.21631","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Qwen3-VL Technical Report","venue":"cs.CV","work_id":"1fe243aa-e3c0-4da6-b391-4cbcfc88d5c0","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"cited_paper":"/paper/2511.21631","citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:92f57fcffe31871c4468a867fda4de069f58457dac15af2863e9274b5ab44a05","observation_id":"f1980b79-27b4-4f58-80c9-d19b17722666","resolution":{"observed_at":"2026-07-01T10:45:42.109242Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.769215Z","title":"Emergent misalignment: Narrow finetuning can produce broadly misaligned LLMs","venue":null,"work_id":"6d778140-6b7b-4862-92b3-4a1e41b63991","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:92a1234e07a7127ab2cbc04b11e57577d7195faf5f48ef36092e29a2f73a647f","observation_id":"7b3e5f92-4272-4550-bae8-de22dc7d646c","resolution":{"observed_at":"2026-07-06T22:22:58.770444Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.795006Z","title":"Discovering latent knowledge in language models without supervision, 2024","venue":null,"work_id":"35b918ec-959d-4c5f-a87e-86134331adcc","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:8c9f0279aa4703ba944aaa14f759dee2556950d02eef4e1bf2e892b0285f72be","observation_id":"412ffa51-b829-4e43-a73d-ba9455716fc3","resolution":{"observed_at":"2026-07-06T22:22:58.796410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.771014Z","title":"Persona vectors: Monitoring and controlling character traits in language models, 2025","venue":null,"work_id":"8ef3f099-e016-4f36-bfd4-584697cccb28","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:d6177154997768ca2a2d3c1d8aab7854b274a08f644dd811817abc737ffc3c4d","observation_id":"23c1a5a7-6ffc-4218-b1b3-4ab0328c9b52","resolution":{"observed_at":"2026-07-06T22:22:58.772243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.772819Z","title":"Dress: Instructing large vision-language models to align and interact with humans via natural language feedback","venue":null,"work_id":"408b4cc7-29bc-460e-b75c-1798bf0fc729","year":null},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:b2bcd3d55d1534048d05ca8a6badd75b0dcf6a214bc1b7f12cd676e67aa6ae3c","observation_id":"000a6658-f00c-40ba-9b38-0a5465b4c973","resolution":{"observed_at":"2026-07-06T22:22:58.774095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10611","last_updated":"2026-04-02T16:01:02Z","snapshot_observed_at":"2026-08-02T06:45:30.387180Z","submitted_at":"2026-01-15T17:27:44Z","title":"Molmo2: Open Weights and Data for Vision-Language Models with Video Understanding and Grounding","version":4},"cited_work":{"arxiv_id":"2601.10611","doi":"10.48550/arxiv.2601.10611","metadata_source":"pith","pith_arxiv_id":"2601.10611","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Molmo2: Open Weights and Data for Vision-Language Models with Video Understanding and Grounding","venue":"cs.CV","work_id":"f0dc2969-bd90-4a5d-81df-d557352690b6","year":2026},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"cited_paper":"/paper/2601.10611","citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:be1dec363fa97c931468e63b3ccf20cabf964ac84850d8ac9484cc0f6f1843cc","observation_id":"c3270bca-9144-47e4-a0e2-fd637b55093a","resolution":{"observed_at":"2026-07-01T10:45:42.121467Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.19786","last_updated":"2025-03-25T15:52:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-25T15:52:34Z","title":"Gemma 3 Technical Report","version":1},"cited_work":{"arxiv_id":"2503.19786","doi":"10.1007/978-3-540-48085-3_36","metadata_source":"pith","pith_arxiv_id":"2503.19786","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gemma 3 Technical Report","venue":"cs.CL","work_id":"f93e08bf-9e96-409b-8ac6-b8385fd17fd7","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"cited_paper":"/paper/2503.19786","citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:85de4d6e78f4aced518df96194f01c440676cf7c8e4cbdb8d766bec105489a2e","observation_id":"f596339c-8671-45a8-a9c7-ba58c7bfd197","resolution":{"observed_at":"2026-07-01T10:45:42.116433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.774709Z","title":"Kwok, and Yu Zhang","venue":null,"work_id":"40d55bea-b186-4b2e-b508-ded7950fea89","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:30146b5da6dc6333439051be18930390c41b863cd1d4e6f22e943cf67b30d60b","observation_id":"64bc4634-0508-4092-aa6c-e9b4ec2e6273","resolution":{"observed_at":"2026-07-06T22:22:58.775830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.776463Z","title":"Catastrophic jailbreak of open-source LLMs via exploiting generation","venue":null,"work_id":"4a179a3b-84a7-4b7f-89f8-4a5f2ec1011e","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:4c84dcfca4a7aa990e1b296e8643f161ffe5049f24f45a0644471824867cea97","observation_id":"be2bd658-f2f8-490c-8821-a72bdd96f1a6","resolution":{"observed_at":"2026-07-06T22:22:58.777701Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.780086Z","title":"Lee, Inkit Padhi, Karthikeyan Natesan Ramamurthy, Erik Miehling, Pierre Dognin, Manish Nagireddy, and Amit Dhurandhar","venue":null,"work_id":"1815f2a1-39dc-400d-b4fb-48d32830c637","year":null},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:4e87acba8778e7894490032687701a76e831afc7b4f6d26e204723f44c8ff6b2","observation_id":"1f1b017b-afe2-48ff-b604-30d7da9bd6fe","resolution":{"observed_at":"2026-07-06T22:22:58.781336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.829868Z","title":"Lora fine-tuning efficiently undoes safety training in llama 2-chat 70b","venue":null,"work_id":"ccb0be79-ad40-461a-bd43-c97b2ae4e7f7","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:af4826f34d2825a0a8026706bf61db26a805b912b05530d6e57604f44da3c174","observation_id":"981a083f-c5ba-4828-b11a-0c40f2524b12","resolution":{"observed_at":"2026-07-06T22:22:58.831268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.825221Z","title":"Inference-time intervention: Eliciting truthful answers from a language model","venue":null,"work_id":"2bb87b4e-93b1-43d7-bd12-56b523d28a5f","year":2023},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:36d19744f3690611bfb4e2d81eccd15306cf5b371eb50c7ab3514fc0c5ce1802","observation_id":"954bea8f-9ebe-4b8e-b785-91d46dfea4bb","resolution":{"observed_at":"2026-07-06T22:22:58.826539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.819825Z","title":"Red teaming visual language models","venue":null,"work_id":"ad8cdc7b-9a3d-48b8-bd7a-f526704e05f7","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:bc196462fcfdacba789cb2060925312cbf75c9c474e30b7f9fa95dc630fd9161","observation_id":"336f2056-1a11-4191-bdd9-a2fbaf232eff","resolution":{"observed_at":"2026-07-06T22:22:58.821002Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.802430Z","title":"Images are achilles’ heel of alignment: Exploiting visual vulnerabilities for jailbreaking multimodal large language models","venue":null,"work_id":"d2a6bea7-b5cf-4459-9dae-737a4ebc2d86","year":null},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:4071cf27bbf2ee3a6120bb25fc872c48a4bbdac9bbfd8b4a2858a42c7bfccb5c","observation_id":"b40283b3-17e3-4212-89fb-de8fbcbbd17c","resolution":{"observed_at":"2026-07-06T22:22:58.803679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.796994Z","title":"Improved baselines with visual instruction tuning","venue":null,"work_id":"c251ba96-4195-40f3-bbfc-8c747416dd2b","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:6873fa289f7089b8b0a30f098b3e16a9ac5d7ca2f8678a6e746fa70952b4716a","observation_id":"f2b30212-aab1-4791-9e68-5dc9b22030b1","resolution":{"observed_at":"2026-07-06T22:22:58.798194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.815832Z","title":"AutoDAN: Generating stealthy jailbreak prompts on aligned large language models","venue":null,"work_id":"f5ec83ad-54db-437f-aad4-955f921e08c3","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:4c3c5ecdf0864d2cd92e3a61d54d862f35ef8f3f886c0a2b2221cf27940d3b6a","observation_id":"021bf172-b99c-4bf9-b098-9a2622c3a269","resolution":{"observed_at":"2026-07-06T22:22:58.817136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.817760Z","title":"Mm-safetybench: A benchmark for safety evaluation of multimodal large language models","venue":null,"work_id":"48686659-99fd-4615-aeb2-859a2b51c44f","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:334b88e82e860df45fd8d22f38a20d5d94e23b479736df4c29d1522c1a6e535e","observation_id":"8970adc2-db68-45d3-97c9-2afabf5ff638","resolution":{"observed_at":"2026-07-06T22:22:58.819077Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.814022Z","title":"Video-safetybench: A benchmark for safety evaluation of video LVLMs","venue":null,"work_id":"48a43049-8a31-488a-aac6-40a05d95d99b","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:a0f0697ba60876981c303613c2c92ce5f6f3078660fa2dbeedb8ecc123442f42","observation_id":"cc989b76-0944-4f5b-9967-92e7987e2a71","resolution":{"observed_at":"2026-07-06T22:22:58.815239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":"2407.21783","doi":"10.1016/s0749-0720(15","metadata_source":"pith","pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"The Llama 3 Herd of Models","venue":"cs.AI","work_id":"1549a635-88af-4ac1-acfe-51ae7bb53345","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:c1db29a7cb8517e33902998e15a7df80931f2ce279c90ea445d6eee5fb16f6c5","observation_id":"f924584e-c12d-4215-a2b6-0d5520c882a4","resolution":{"observed_at":"2026-07-01T10:45:42.123891Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.827156Z","title":"Think in safety: Unveiling and mitigating safety alignment collapse in multimodal large reasoning model","venue":null,"work_id":"7f14e752-4b16-459d-af8c-ea0ca399e6d1","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:4d2f98545efee7111991f3c4591d4c336b54b7937e54e35bbd0ccf55c3bc1d66","observation_id":"73619660-986f-431b-a6ce-2cf630b9d8e2","resolution":{"observed_at":"2026-07-06T22:22:58.829114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.783901Z","title":"Harmbench: a standardized evaluation framework for automated red teaming and robust refusal","venue":null,"work_id":"50520476-b401-4535-ab50-43a4b6ae2d82","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:3750811d74996a686bf5acbca0e201220c313d7a46eb8d5a8eb6edff519a3d8e","observation_id":"6e6e5da4-7d00-4b13-acf7-4216e6eae460","resolution":{"observed_at":"2026-07-06T22:22:58.785107Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.787625Z","title":"Red teaming language models with language models","venue":null,"work_id":"cfc02049-0da8-40dc-827c-05d751f4155e","year":2022},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:b0448d15a43c11f2c3cce37ffe28e21793b46b703b249be78371c23ff94d8a07","observation_id":"8c68beee-1317-4272-bb06-f168681dfc78","resolution":{"observed_at":"2026-07-06T22:22:58.789007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.789581Z","title":"Safe-CLIP: Removing NSFW Concepts from Vision-and-Language Models","venue":null,"work_id":"8ac7ae89-fedb-4d59-8580-13815374af82","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:e53b73c2b1df7f37de0d05dec3877cacf0662673a8bfa4271890fe3beeb60b1a","observation_id":"d092f225-6686-4c59-9490-af19c793fdcb","resolution":{"observed_at":"2026-07-06T22:22:58.790778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.793089Z","title":"Safety alignment should be made more than just a few tokens deep","venue":null,"work_id":"15b2c7e1-c1bd-4fbd-af05-9cde884be5b4","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:e1eca60dc3b33eaea2f8194c574049853de86d1475e5c5adcda8ba55ae583bcc","observation_id":"9b5297ce-4d0e-4124-a9dc-90fde6ded9ee","resolution":{"observed_at":"2026-07-06T22:22:58.794414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.791333Z","title":"Qwen3.5: Towards native multimodal agents, 2026","venue":null,"work_id":"b4f9a0c0-b9db-4513-b971-0536b7f5fc53","year":2026},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:415b8b00408a537a0973f9c69788d67d3b145ac6e91e9d798f703f9f3e8cf67e","observation_id":"b1c612c5-b6dc-4850-bf6f-02053fbf2ae0","resolution":{"observed_at":"2026-07-06T22:22:58.792490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.831908Z","title":"COSMIC: Generalized refusal direction identification in LLM activations","venue":null,"work_id":"3e8162a7-9401-42d3-abbd-17e312916c39","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:779a99d54ecac824a1ce28a0317232bbeaf7dc6c4bf135b74838289e9d85313f","observation_id":"e4bd932d-d251-431b-aaac-4758df47e3df","resolution":{"observed_at":"2026-07-06T22:22:58.833160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.778310Z","title":"Activation scaling for steering and interpreting language models","venue":null,"work_id":"2918a8af-85ae-4e52-9790-1754fefac2ae","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:4112d4656f842d1192395f80deeb740d8e3a107159943596cb494b61993c24c6","observation_id":"d3a14f4b-1492-4dc0-9ae8-c82cd155ab8e","resolution":{"observed_at":"2026-07-06T22:22:58.779513Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.833779Z","title":"Hashimoto","venue":null,"work_id":"6e5cbeff-d530-4a02-9b44-fdea38abd042","year":2023},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:cb03cc25cd6d8e47add8075c8b112a783c3c9a27155749510e480fc7b1a2c879","observation_id":"e66d3783-96ec-4780-a366-ee800f4a9a91","resolution":{"observed_at":"2026-07-06T22:22:58.834955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.07491","last_updated":"2025-06-23T13:45:50Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-04-10T06:48:26Z","title":"Kimi-VL Technical Report","version":3},"cited_work":{"arxiv_id":"2504.07491","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.07491","snapshot_observed_at":"2026-07-08T06:34:41.884360Z","title":"Kimi-VL Technical Report","venue":"cs.CV","work_id":"c876520f-8a20-44f3-b92a-bf7d35bd430f","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"cited_paper":"/paper/2504.07491","citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:d9b5b2609d5ab9030df146bcd31f483af685ec56937d61b3ed2a36f1abad8edb","observation_id":"991bcdbe-af80-49f5-b27b-8b896eeb976b","resolution":{"observed_at":"2026-07-01T10:45:42.118949Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03267","last_updated":"2026-05-01T23:55:43Z","snapshot_observed_at":"2026-08-02T10:52:10.211700Z","submitted_at":"2025-12-19T07:05:38Z","title":"OpenAI GPT-5 System Card","version":2},"cited_work":{"arxiv_id":"2601.03267","doi":"10.48550/arxiv.2601.03267","metadata_source":"pith","pith_arxiv_id":"2601.03267","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"OpenAI GPT-5 System Card","venue":"cs.CL","work_id":"ca87689a-0d29-4476-b504-b65dbbb08af4","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"cited_paper":"/paper/2601.03267","citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:d0fadb65ad91a50610363e2e3c74899b98bd0296dd697709f663b8d0dca8a591","observation_id":"05ccbb10-afab-406a-a260-f9e1d09ae0ca","resolution":{"observed_at":"2026-07-01T10:45:42.111545Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.785724Z","title":"Vazquez, Ulisse Mini, and Monte MacDiarmid","venue":null,"work_id":"8f4b122b-c1bd-4919-ba9f-f26564dda860","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:e8737848c52148f23013691eced30376d83c9ed4eb0ad1a00cb454f9a86d945f","observation_id":"dc9ae0ab-7b1f-4900-8f6d-09e0a2d7270f","resolution":{"observed_at":"2026-07-06T22:22:58.787052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.812187Z","title":"Steering away from harm: An adaptive approach to defending vision language model against jailbreaks","venue":null,"work_id":"a89fe5b8-7cc8-4ad6-8e28-f23c4982d2b0","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:d48b2969e4d2c519c5a611c893479594f261b4146e3f0ebe302cef1c1c067636","observation_id":"b094b0e4-616c-489b-9e94-af321c9ee770","resolution":{"observed_at":"2026-07-06T22:22:58.813458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.821595Z","title":"Self-aware safety augmentation: Leveraging internal semantic understanding to enhance safety in vision-language models","venue":null,"work_id":"28291f0b-683e-41e3-b35a-f0eba1d9d748","year":null},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:b4c10911bdf507b5396c9e6003a92c488b546be1356df6edb25ec04b95012920","observation_id":"fa8b1923-01b3-4351-a973-6ae9fd2b4586","resolution":{"observed_at":"2026-07-06T22:22:58.822856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18265","last_updated":"2025-08-27T14:39:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-25T17:58:17Z","title":"InternVL3.5: Advancing Open-Source Multimodal Models in Versatility, Reasoning, and Efficiency","version":2},"cited_work":{"arxiv_id":"2508.18265","doi":"10.48550/arxiv.2508.18265","metadata_source":"pith","pith_arxiv_id":"2508.18265","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"InternVL3.5: Advancing Open-Source Multimodal Models in Versatility, Reasoning, and Efficiency","venue":"cs.CV","work_id":"b8f5e260-fff5-444e-bcf5-2c42cfefd83d","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"cited_paper":"/paper/2508.18265","citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:57dae0ca6b103156a5f2b21d7e6447bb9407f3c1d39cb4b726df6b04ae2b752e","observation_id":"5f77bc4c-9e62-4d09-8ce7-77f8457daf85","resolution":{"observed_at":"2026-07-01T10:45:42.114280Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.823462Z","title":"Jailbroken: How does LLM safety training fail? In NeurIPS, 2023","venue":null,"work_id":"fca25bdf-cf5e-42c6-9e85-089e1f2dc982","year":2023},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:df9a1b82cf230cee75573187658e47703af2f10e40e511ac5b1d2a693fd4f3bb","observation_id":"b820061e-9afa-4979-906d-12f3b862c103","resolution":{"observed_at":"2026-07-06T22:22:58.824636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.804260Z","title":"Mmmu: A massive multi-discipline multimodal understanding and reasoning benchmark for expert agi","venue":null,"work_id":"6ea99250-ecab-462d-b5fa-52016a40c8d2","year":2024},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:7430cbe08a916fe07928897d997013db9c0f1adc4697f20131e6d10a21fe0a3e","observation_id":"4cb5f751-3070-4bf3-9ee8-44ed7a3abf3e","resolution":{"observed_at":"2026-07-06T22:22:58.805657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.808090Z","title":"MMMU-pro: A more robust multi-discipline multimodal understanding benchmark","venue":null,"work_id":"ca873763-4b33-4f46-86d8-550b4b003786","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:ab9581afc07955b55806a0c44a8a6adffb14606a199895d458fb9cf6072b05ef","observation_id":"c91697c1-9e33-4b42-b11c-a0916707c1bc","resolution":{"observed_at":"2026-07-06T22:22:58.809342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.782126Z","title":"LLMs encode harmfulness and refusal separately","venue":null,"work_id":"ae40c043-0881-4b5a-8150-40f53fef1a3b","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:c0074be596f5e25de576b1e5e398d13269dfa4463211e91a400276823bd0f28a","observation_id":"d249a07a-9bdf-47b3-9655-18b061911000","resolution":{"observed_at":"2026-07-06T22:22:58.783353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.800645Z","title":"Jailbreaking multimodal large language models via shuffle inconsistency","venue":null,"work_id":"99a396d9-df81-4d1c-b086-90f9e200b251","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:d4cff5b7a9dae685f76a0b5bc0e2cde0e0d0477ed287b87335ae15933b30ab4b","observation_id":"5d1c1fce-ac24-415f-9e0b-0b122e5095f7","resolution":{"observed_at":"2026-07-06T22:22:58.801853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.798814Z","title":"The image shows a phrase of a product. List steps in detail to design this product","venue":null,"work_id":"4b3a1d13-930b-40aa-a28c-541df2f58938","year":2025},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:b004ee7d9bfcd6746284c0cc79d9f74cc82c58f5ab99df9591328e5194bbed65","observation_id":"e0542ba3-d181-4493-9752-794a42034510","resolution":{"observed_at":"2026-07-06T22:22:58.800059Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T22:22:58.806305Z","title":"Candidate being Shot,","venue":null,"work_id":"6112e329-7030-4763-aea1-b963a2ff162a","year":null},"citing_paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-01T05:15:25.278988Z"},"links":{"citing_paper":"/paper/2606.31876"},"observation_digest":"sha256:be54a9446e6d81a50d3d73b68530154a576ad33d2383d8976b39b8b4ac91135e","observation_id":"0eb35817-9356-40eb-adf2-a44dfdbb2f69","resolution":{"observed_at":"2026-07-06T22:22:58.807465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2606.31876","last_updated":"2026-06-30T15:57:50Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-02T12:49:55.854683Z","submitted_at":"2026-06-30T15:57:50Z","title":"Harnessing Textual Refusal Directions for Multimodal Safety"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":7,"verified_fuzzy":34},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2606.31876."}