{"as_of":"2026-08-08T17:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:71260cb7c54ef3a80688a6a86158ae18958aca9119a02543e6809228940fff61","coverage":[{"denominator":62,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":62,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-08T16:12:24.098448Z","state":"measured"},{"denominator":62,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":62,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.06120/citation-record","integrity":"/paper/2607.06120/integrity","json":"/paper/2607.06120/citation-record.json","paper":"/paper/2607.06120"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.860173Z","title":"High- resolution image synthesis with latent diffusion models","venue":null,"work_id":"22f4ed05-f300-43ee-89fc-d5221e533f03","year":2022},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:aed8cb87fcdb8dc4aa1ab18ec7bf9c0fffc6103b4b956a2a0770a2f2c5a1dd2d","observation_id":"6a2aa2f1-404e-498c-af93-107d4c316cc2","resolution":{"observed_at":"2026-07-08T16:15:06.861376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.15742","last_updated":"2025-06-24T05:31:03Z","snapshot_observed_at":"2026-07-06T21:44:22.901650Z","submitted_at":"2025-06-17T20:18:23Z","title":"FLUX.1 Kontext: Flow Matching for In-Context Image Generation and Editing in Latent Space","version":2},"cited_work":{"arxiv_id":"2506.15742","doi":"10.48550/arxiv.2506.15742","metadata_source":"pith","pith_arxiv_id":"2506.15742","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"FLUX.1 Kontext: Flow Matching for In-Context Image Generation and Editing in Latent Space","venue":"cs.GR","work_id":"5dfe19d5-3541-4803-8fe9-3c8b9e29b281","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"cited_paper":"/paper/2506.15742","citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:44a10618efb660d54d4174321f67e58774107db31afadbd5e30ac68e4b872d0f","observation_id":"ec8208bc-9dbb-433c-9ea6-63272de1302c","resolution":{"observed_at":"2026-07-08T16:15:06.134566Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-05-25T00:53:20.581238+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T00:53:20.581238+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.861923Z","title":"Scaling rectified flow transformers for high-resolution image synthesis","venue":null,"work_id":"42749c8e-e914-4701-ab30-9da20493b525","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:17d253226981b98136f7cd30f0a8df30b47a61b2695ab6540d5c811d4bdcae35","observation_id":"84161f05-a6ba-4fa1-93e9-d1b5c1dff389","resolution":{"observed_at":"2026-07-08T16:15:06.863111Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.863680Z","title":"Unsafe diffusion: On the generation of unsafe images and hateful memes from text-to-image models","venue":null,"work_id":"0a7cf99c-a6c7-4a81-b30e-a3ed614b8719","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:89ef497649779575a3f2737858ce552c3e8cfbc51dcce3d6d63f32ded59cf92c","observation_id":"5827a623-06ee-4a5b-9a02-d06b4c12d34e","resolution":{"observed_at":"2026-07-08T16:15:06.864895Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"document/1020530","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.119591Z","title":"Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models,","venue":null,"work_id":"4b343982-6f36-4d7c-968e-4af031324908","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:8a764f908eb5e2ae48d4d58e8672182f4349f818b05a3c510485c26409d04ceb","observation_id":"5d93cc25-6b72-4397-ae98-86a30a90dd2c","resolution":{"observed_at":"2026-07-08T16:15:06.121394Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.851084Z","title":"Ring-a-bell! how reliable are concept removal methods for diffusion models?","venue":null,"work_id":"0fdd9abb-9f00-4761-96e6-5e08130fbfe7","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:dc0be109e25bc3b32735f7c88c9e2a6802582ad4b1ab444bb99738aeba892752","observation_id":"b35b70a9-d0e3-488c-ad8d-93a12c200f5d","resolution":{"observed_at":"2026-07-08T16:15:06.852419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.843793Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"44b3fe8d-b1d4-4ea3-8dae-a6f08a56fab8","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:842bc5c05c860f37bead4ea14147703df42bc35f66a958d8263ec6f00c64bf55","observation_id":"65f7dee1-aec1-48b4-b376-ce5ff0a1b314","resolution":{"observed_at":"2026-07-08T16:15:06.844918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.852992Z","title":"Explicit, AI-generated Taylor Swift images continue to proliferate on X, Instagram and Facebook,","venue":null,"work_id":"25e0d23f-eb9d-4c66-a03b-26bf96717e58","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:c62b9c66b7d496d758050a7ace3757da63b3f610b91c91f628a08d9eab5f1068","observation_id":"d4b830e8-7e77-44f0-838a-7e3e30e970a1","resolution":{"observed_at":"2026-07-08T16:15:06.854164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.870851Z","title":"How X fuelled UK riot misinformation|Fake News, AI & Conspiracy Theories|LSE Research,","venue":null,"work_id":"9b3fd055-bb77-4ea7-8b55-5987b04a76ba","year":2026},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:38e0f7b9700f2b8a53a9e8e10a09a44a669c22264cfa5afa52ead1d1f2ee11b7","observation_id":"fcd36b45-67d2-413f-b312-cc4867c595c4","resolution":{"observed_at":"2026-07-08T16:15:06.871976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.845502Z","title":"‘Verified’ Twitter accounts share fake image of ‘explosion’ near Pentagon, causing confusion|CNN Business,","venue":null,"work_id":"d41f5c22-50f4-46fe-a16d-174c2b1597fa","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:00d21bd89907f77ff4da2ced4a456d414b770c3b3f479c43854788e0a5a94637","observation_id":"b502cdc3-221a-4817-b15a-24ecadcd5063","resolution":{"observed_at":"2026-07-08T16:15:06.846757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00064","last_updated":"2025-02-19T15:51:43Z","snapshot_observed_at":"2026-07-06T19:59:06.645605Z","submitted_at":"2024-11-25T21:47:02Z","title":"DiffGuard: Text-Based Safety Checker for Diffusion Models","version":2},"cited_work":{"arxiv_id":"2412.00064","doi":"10.48550/arxiv.2412.00064","metadata_source":"pith","pith_arxiv_id":"2412.00064","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2024 , journal =","venue":"cs.CV","work_id":"4506df41-20ac-428d-ad14-7a3aa6e3d4fc","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"cited_paper":"/paper/2412.00064","citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:d32c2680784e82473b8a3f346754663b90309b407b5d3a9fc2e6bc534e0edb44","observation_id":"51077846-8115-49f0-8933-84e0e284f588","resolution":{"observed_at":"2026-07-08T16:15:06.118434Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-05-20T21:54:56.191016+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-20T21:54:56.191016+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.816791Z","title":"Hard prompts made easy: Gradient-based discrete optimization for prompt tuning and discovery,","venue":null,"work_id":"04ff5aa5-9040-4e83-8237-82de6cc5801b","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:648c0de99a4e2b71ddcf69e2d28c4760a38b4722c3141405bf74a0a7c88f470d","observation_id":"7cef9386-7490-4e2e-9a33-c7fcd76bcc6c","resolution":{"observed_at":"2026-07-08T16:15:06.818018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.818594Z","title":"Mma- diffusion: Multimodal attack on diffusion models,","venue":null,"work_id":"e00dab97-b776-4aa8-9a3f-f63b7d2c189c","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:880100be48b8be89aeab59a375bd329d21fc5df385b5074b3c5b8ed84da8921d","observation_id":"5be780a0-1f45-43de-b195-638c98123295","resolution":{"observed_at":"2026-07-08T16:15:06.819855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.820452Z","title":"Prompting4debugging: red-teaming text-to-image diffusion models by finding problematic prompts,","venue":null,"work_id":"427afa5b-7d30-4f83-af34-ecb0115f753f","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:128c5f5589ab29a0b0f171b37805719438cef31d71b598590b963f4ccd82c8f3","observation_id":"cf523d44-3476-4d66-a56c-36f34e80d1d8","resolution":{"observed_at":"2026-07-08T16:15:06.821615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.825892Z","title":"Latent guard: a safety framework for text-to-image generation","venue":null,"work_id":"83f43298-391a-4510-9b86-0177c829ac5f","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:9c247cf779d17355f5c86c296fe9ab9789486b6577b338d929a126ebb6d6ab62","observation_id":"4e616a05-6eae-44d3-b5d0-a52043d46f86","resolution":{"observed_at":"2026-07-08T16:15:06.827100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.827632Z","title":"Safe-clip: Removing nsfw concepts from vision-and-language models,","venue":null,"work_id":"129c2af8-afb7-494c-b8db-88ac0907fdd3","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:f07319ab56faa69730d9486c3feeec6afcc152a61e1ee171062bb21f58e801a5","observation_id":"bd183d69-bf0c-4869-834f-0aac6d5885ab","resolution":{"observed_at":"2026-07-08T16:15:06.828758Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.838502Z","title":"Detecting malicious concepts without image generation in ai-generated content (aigc),","venue":null,"work_id":"628ff98a-31dc-4b9a-b769-e6777b5f3fbe","year":2026},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:93f35f2875a38a3f5666bd3ecd6cca92697ecb838f512f19be2c85a6962cf870","observation_id":"fa090731-a9e2-4d0f-a108-14bd715f369d","resolution":{"observed_at":"2026-07-08T16:15:06.839695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.805888Z","title":"Erasing concepts from diffusion models","venue":null,"work_id":"828e99ee-664d-4b8b-b80c-cd2e0f838d66","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:e385fbcc9d8e7980bf8fe3ee31776cad8b65216d255626c423a6c497eeb6b293","observation_id":"4e5d5d2d-9963-42e3-bd64-d0fa8bf44318","resolution":{"observed_at":"2026-07-08T16:15:06.807016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.813278Z","title":"Forget-me-not: Learning to forget in text-to-image diffusion models,","venue":null,"work_id":"73343689-82bd-4fb4-a891-3d1f2a63d3e0","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:debb42b1cc2bd149b8279f0ff5a5a81e74a380e3b0b131d7673398f2a09fe1e2","observation_id":"18b0ddea-fb69-4afd-9e64-ee174ff88eca","resolution":{"observed_at":"2026-07-08T16:15:06.814451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.798758Z","title":"Conceptprune: Concept editing in diffusion models via skilled neuron pruning,","venue":null,"work_id":"ea3d7c0a-ae80-4c03-b1da-11cd72d29d8c","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:a59a0f79d154e06c2e4161bf656f37ee1c420b3da379d5952f386ff4ea3c321c","observation_id":"5ee7cc7b-f5d4-48cd-8717-c17e3c9a6805","resolution":{"observed_at":"2026-07-08T16:15:06.799937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.795143Z","title":"Salun: Empowering machine unlearning via gradient-based weight saliency in both image classification and generation,","venue":null,"work_id":"65a7f0e2-709c-44bf-bc85-cae3f3ff133c","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:7ea9ecbf6f948b131b5802db79cf75726f99141f903368ac124a2f2e25d1381e","observation_id":"72bfbd68-82a1-4f81-b00d-9934da6b7551","resolution":{"observed_at":"2026-07-08T16:15:06.796345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.796954Z","title":"Perception-guided jailbreak against text-to-image models,","venue":null,"work_id":"e9e35742-0815-45e3-8ec8-1201fc2ab82d","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:6e9a8f6947e0a57d15951544d496539d9186a83e6fa70b7d6d2b721d16c33474","observation_id":"66a8c9ad-0ad4-4a67-9049-50e71e376845","resolution":{"observed_at":"2026-07-08T16:15:06.798183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.800502Z","title":"Taming transformers for high- resolution image synthesis","venue":null,"work_id":"1c4c163d-7990-457b-b26c-0b871bbdbcc4","year":2021},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:e2a3d9b5d37f8a229ee46c679a4d12fecb0b740e8f3007b1376f369b48de60e0","observation_id":"606d0ae3-e7bf-4267-84a4-767ac4843d77","resolution":{"observed_at":"2026-07-08T16:15:06.801617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:17:04.531897Z","title":"Learning transferable visual models from natural language supervision","venue":null,"work_id":"0c972fd9-514c-4534-a4d4-07a79bb836a6","year":2021},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:138591cd11d30e89a04c33aa26ced416882d835504385a90f85779b569e429b9","observation_id":"381facca-a944-446d-9f0b-ad8e1a30c08f","resolution":{"observed_at":"2026-07-08T16:15:06.803572Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.815032Z","title":"Denoising diffusion probabilistic models","venue":null,"work_id":"556bc6b5-6607-4a7d-871d-59b4cb93e3c9","year":2020},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:cc7ec4a1097ed3b3a45c2cbf25ed2119d656e83389cd4af88130cb016d42a363","observation_id":"bc12cc17-18eb-46ff-8693-90b68d027cff","resolution":{"observed_at":"2026-07-08T16:15:06.816209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-07-06T10:01:50.133383Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":"2010.02502","doi":"10.48550/arxiv.2010.02502","metadata_source":"pith","pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Denoising Diffusion Implicit Models","venue":"cs.LG","work_id":"8fa2128b-d18c-405c-ac92-0e669cf89ac0","year":2020},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:7538ab001966856e8b6e8196bdb581327830f5b6392b4dbe699be7bcbb9fa513","observation_id":"8d0ee94b-1c0d-4a37-92f4-3b90bbf491e6","resolution":{"observed_at":"2026-07-08T16:15:06.129661Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-12T13:49:41.147667+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T13:49:41.147667+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T09:16:06.994416Z","title":"U-net: Convolutional networks for biomedical image segmentation","venue":null,"work_id":"6064dbd1-5c10-497a-969f-f6b79c06ff45","year":2015},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:ff212bb9a2835ccf63627b857114d010e1aef1fb1d6f91a626099739272cad88","observation_id":"ac57df13-33be-4d74-bbaa-cc3721008a96","resolution":{"observed_at":"2026-07-08T16:15:06.792895Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T14:07:06.849417Z","title":"Attention is all you need","venue":null,"work_id":"4f585692-8ef8-4f20-8f75-5e0e32647d76","year":2017},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:699e51a7b76cdfc3924f4d0ce8e1875aaf6f787656358792e231d00b9bb14611","observation_id":"f234ad58-f894-4025-a67e-c254164afdad","resolution":{"observed_at":"2026-07-08T16:15:06.794570Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.788153Z","title":"Guardt2i: Defending text-to-image models from adversarial prompts,","venue":null,"work_id":"83376aa2-63ee-4630-8d5e-bb3a3479ff51","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:ea63a3d8cf7aee003da0365b461f5a0fda32bf5bb5b671df5c9595d91cb39025","observation_id":"a495b921-1222-4cee-a4dc-d6d98714d4f3","resolution":{"observed_at":"2026-07-08T16:15:06.789399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.789958Z","title":"Safeguider: Robust and practical content safety control for text-to-image models,","venue":null,"work_id":"0808dd6e-cf01-48f1-8473-c6cc2c73cc43","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:c043a9eab77f01c2d39c05d6a12f556329601f318003bb2bcfce1d88e99b1343","observation_id":"450e76bd-fae8-4347-8c6c-a71d228dd038","resolution":{"observed_at":"2026-07-08T16:15:06.791133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10329","last_updated":"2025-04-15T12:26:05Z","snapshot_observed_at":"2026-08-05T19:36:57.692554Z","submitted_at":"2024-11-15T16:29:02Z","title":"Safe Text-to-Image Generation: Simply Sanitize the Prompt Embedding","version":2},"cited_work":{"arxiv_id":"2411.10329","doi":"10.48550/arxiv.2411.10329","metadata_source":"pith","pith_arxiv_id":"2411.10329","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"CoRR , volume =","venue":"cs.CR","work_id":"ba9578ca-38ef-4e30-aeae-c9b4f2c3becd","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"cited_paper":"/paper/2411.10329","citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:ed0598a40e74d6e971b0f8ad841a4ad235665e9ed52612fa2ad4ca82a58e4bc9","observation_id":"c53348d3-4541-4f80-8c71-ad298347a3e2","resolution":{"observed_at":"2026-07-08T16:15:06.132093Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-05-20T21:54:43.951249+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-20T21:54:43.951249+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.804153Z","title":"Safree: Training- free and adaptive guard for safe text-to-image and video generation,","venue":null,"work_id":"4ec4e6e1-2e6d-44b6-8b48-f29418e95d0b","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:520cf25311387e1589f3284c76f67839e778becfd55d9a6c23d41e5dca49d864","observation_id":"753cfb97-97c0-49b9-b4c9-46cf843ea74c","resolution":{"observed_at":"2026-07-08T16:15:06.805360Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.836635Z","title":"Unified concept editing in diffusion models,","venue":null,"work_id":"53f496cb-c00c-43e7-b623-f80ef278b0ce","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:9e6a571ce6ac3da40c57df20cf4b461b7c9ba3e533c48b2a53de78942d20448b","observation_id":"297c70b3-8529-46c6-b39f-d30dd19c709d","resolution":{"observed_at":"2026-07-08T16:15:06.837816Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.872500Z","title":"Saeuron: Interpretable concept unlearning in diffusion models with sparse autoencoders,","venue":null,"work_id":"e0d34a0e-5546-485a-8ede-3344101c6c99","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:4ee8c3810355ae577acb4030f25f1f932974ae576e1e7e15c463a2c74706b3df","observation_id":"3de9f7fa-375c-4d43-aa6e-f3479f933d70","resolution":{"observed_at":"2026-07-08T16:15:06.873643Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T02:15:55.712680Z","title":"A mathematical framework for transformer circuits,","venue":null,"work_id":"6daf88ea-6b76-4abf-b7a2-1071d9f45b59","year":2021},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:df39c98500dc5f1785125b2dc20131fa95d387fb51412aa4e72e0547127bb570","observation_id":"7a527045-7a3e-4218-9290-602356ff32bd","resolution":{"observed_at":"2026-07-08T16:15:06.875471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.879799Z","title":"Diffusion lens: Interpreting text encoders in text-to-image pipelines,","venue":null,"work_id":"0829f8a9-d284-469b-bb95-2e3cbe034b02","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:730623b9cbb084d3eb38f43e3c9f12643bd103f1816c6c830c60ef438b03fb00","observation_id":"54f35f9e-3208-4af5-84c6-329f00c9edf7","resolution":{"observed_at":"2026-07-08T16:15:06.880972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.865483Z","title":"Introducing ChatGPT — openai.com,","venue":null,"work_id":"f941f0cc-0529-4c5a-b640-6c63179bb830","year":2022},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:d16f3e07877d15efef75ebd5050735d992a6cd1a5984d795aea5b51cf57b2b89","observation_id":"ef61cf98-0a06-44f2-8972-098e6c81033a","resolution":{"observed_at":"2026-07-08T16:15:06.866673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":"2307.09288","doi":"10.24963/ijcai.2025/706","metadata_source":"pith","pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","venue":"cs.CL","work_id":"68a5177f-d644-44c1-bd4f-4e5278c22f5d","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:ea443af72508d3f1094a4f2442edb5fed6b6ff6e06390a410d56192cb638c5b2","observation_id":"45d74db8-8efa-4847-8281-fde08ddc07d8","resolution":{"observed_at":"2026-07-08T16:15:06.127213Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.881555Z","title":"Interpretability in the wild: a circuit for indirect object identification in gpt-2 small,","venue":null,"work_id":"afa080e9-c068-4cd2-aae3-8488c09cc7a5","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:6cc02345bb397a1b9fc7419371b40573fac242a0debce4a58a0e2c3762fcb449","observation_id":"adbc8372-7ba9-48bc-990c-18e301cd669c","resolution":{"observed_at":"2026-07-08T16:15:06.882750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.876190Z","title":"Knowledge circuits in pretrained transformers,","venue":null,"work_id":"72d0052d-5055-407e-a367-a14f4a793a97","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:4f4f978db009ac5e0ae47389b43d1fe7935c038aa5ec732dd7f4a74bfcea0edf","observation_id":"02d2b611-98f4-427a-92ef-025542e2b477","resolution":{"observed_at":"2026-07-08T16:15:06.877411Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.829263Z","title":"Massive values in self-attention modules are the key to contextual knowledge understanding,","venue":null,"work_id":"7d208f73-5a91-4b92-98a3-a5d9c1cb3835","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:abd6aa8aa889a8373c07749d11bf09190600f393aecfa40b64ccec307a67a9fd","observation_id":"a345ee40-18fd-4989-b66f-7806c407befb","resolution":{"observed_at":"2026-07-08T16:15:06.830425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.840290Z","title":"Towards understanding fine-tuning mechanisms of llms via circuit analysis,","venue":null,"work_id":"72f236e4-69ad-42e7-83db-865cbc13c2ad","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:e4075f6c7a18818fb07161df9013ac0b2ef05d017f321011de4cc8d81d3bc323","observation_id":"e4aa014a-c9b9-4881-a305-f18fdeae9b73","resolution":{"observed_at":"2026-07-08T16:15:06.841478Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.807609Z","title":"What the daam: Interpreting stable diffusion using cross attention,","venue":null,"work_id":"92e3f86d-abc9-41ea-be7d-f377677b7bae","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:5963af4f803e70e57b58cff89ca1fca51d0b666a3b46950ea2a6935cdce88ff0","observation_id":"297617dd-c079-4851-be4a-d3ad98ec8a30","resolution":{"observed_at":"2026-07-08T16:15:06.808857Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.811385Z","title":"Plug-and-play diffusion features for text-driven image-to-image translation","venue":null,"work_id":"38d1f0d2-77d8-497d-ad1c-2759daec0487","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:f2f3b12eb093af57d32aa48ac52831625ae783717282fedec0c14cbaeb6b5ca3","observation_id":"807007e9-8354-485b-8160-0c62915b62cf","resolution":{"observed_at":"2026-07-08T16:15:06.812721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.809546Z","title":"Masactrl: Tuning-free mutual self-attention control for consistent image synthesis and editing","venue":null,"work_id":"90f83d98-c283-4024-9832-5463b3e9044f","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:4d026c1456a709e340af4463a1dc1b7d422e4c216aa1e4acdde2a7b10f09217d","observation_id":"0a368c61-b9c0-477c-ae24-40a75f4e5c61","resolution":{"observed_at":"2026-07-08T16:15:06.810795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.831101Z","title":"Localizing and editing knowledge in text-to-image generative models,","venue":null,"work_id":"b4393b18-8ad9-4905-bf01-fbd5b1dc1fee","year":2023},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:76467c11fa60533b4958721a6e5f10e97ab8d8971c18da30f6f0675f3bd92a6b","observation_id":"bdece51d-4195-4577-9ff4-357273e745b4","resolution":{"observed_at":"2026-07-08T16:15:06.832321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.877979Z","title":"Dissecting and mitigating diffusion bias via mechanistic interpretabil- ity,","venue":null,"work_id":"e7c90b6d-e8f3-4e52-aa65-ba30c494041f","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:76ab32a0c5d982320e489b4aed2b7e509f21eb71362fef49c722ca45c47cc5c6","observation_id":"4c4e615d-7e28-4e5d-baf3-1fc4761d3ef2","resolution":{"observed_at":"2026-07-08T16:15:06.879180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"document/1109455","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.122801Z","title":"Precise, fast, and low-cost concept erasure in value space: Orthogonal complement matters,","venue":null,"work_id":"d60ef238-4326-4082-92ad-f675b31e35b0","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:6768ce8d899ed70406bee18c85dc9b3ae9758c7a5b9820d53bba99153e5202c3","observation_id":"a8366565-cac3-4730-b6f1-207d089611da","resolution":{"observed_at":"2026-07-08T16:15:06.124880Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.869113Z","title":"Safegen: Mitigating sexually explicit content generation in text-to-image models,","venue":null,"work_id":"e462872d-1871-40ed-a309-535317ec35ad","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:dda0913cb5b8ab7ca88fa16ce0455d9ea91efd2b8ac2b91fddf65b00ddab8392","observation_id":"5a569e16-ef47-473a-a86c-70b4b9679f98","resolution":{"observed_at":"2026-07-08T16:15:06.870318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.867236Z","title":"Regression shrinkage and selection via the lasso,","venue":null,"work_id":"fd186df4-36cb-4b2a-b40b-40457b0a95c2","year":1996},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:eaf87eef25a4573a4d8577db66467442dc386d28ccc30d76182d61014a6c0c14","observation_id":"570024b3-0729-4537-8fc4-ecb8bebdf20e","resolution":{"observed_at":"2026-07-08T16:15:06.868404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.884953Z","title":"Regularization paths for generalized linear models via coordinate descent","venue":null,"work_id":"68be1a5f-dbf0-42bb-a3c6-39d96a0befac","year":2010},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:ccb7938a990e4b97692d489d9c6cf980c405a10e3db5da7628926d28aa55ecc0","observation_id":"e40de899-c771-41d9-a602-27155c9dcebf","resolution":{"observed_at":"2026-07-08T16:15:06.886161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.858337Z","title":"Defensive unlearning with adversarial training for robust concept erasure in diffusion models,","venue":null,"work_id":"5a6825ac-c66b-4de9-a0d2-2256a2d3ab8a","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:a05ad772cbbb2a7346a1be9de798bf1b2faf90efdd2a811ef7e00605142b6e4b","observation_id":"8c50b35f-e4c3-473b-957a-19f6c33007a5","resolution":{"observed_at":"2026-07-08T16:15:06.859459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.847356Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":"d21ef7a0-c085-4384-a9f3-349df7d863f5","year":2014},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:cc52044001e0376f2bd39c3c3f3a8bcf1d5bfa62cdc740df91974907d3a610dc","observation_id":"7e944122-b356-4789-9598-11a892cb0709","resolution":{"observed_at":"2026-07-08T16:15:06.848647Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.849216Z","title":"Receler: Reliable concept erasing of text-to-image diffusion models via lightweight erasers,","venue":null,"work_id":"24c1c49a-b92e-4d5f-a9aa-09d143fb4859","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:155d3e1888b36e558e39e0c99faaf48dc3ee9812270d1e9f9c280f639daa2177","observation_id":"b9241ef8-edb3-479b-b481-8f3b062be26c","resolution":{"observed_at":"2026-07-08T16:15:06.850490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.856468Z","title":"Self-discovering interpretable diffusion latent directions for responsible text-to-image generation,","venue":null,"work_id":"68b8746c-e531-4c62-af36-bdc878a834e8","year":2024},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:8f307f14d13d82fdf271a4c62eef9fe51243020ae4f4146e5929dbfdea8f72a4","observation_id":"30f57261-3827-4c55-92e1-557882d18948","resolution":{"observed_at":"2026-07-08T16:15:06.857770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.854743Z","title":"Unveiling concept attribution in diffusion models,","venue":null,"work_id":"20dafc2e-3cfa-4ab7-a6ce-0f6d7a7842f0","year":2025},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:2df944e48ea6147f83929386e2021ee507eb9c4f5161165033ae5102f43e7415","observation_id":"d3dea942-c06c-4d45-876f-2194863aafc2","resolution":{"observed_at":"2026-07-08T16:15:06.855896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.883324Z","title":"NudeNet: lightweight Nudity detection,","venue":null,"work_id":"6a1d0709-75a8-4615-ace4-1b0fec11e974","year":2019},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:cd8a21e5243e6ff6cd60a9a6dc4035969e57523fd6fbdfbc223161c1db685aa3","observation_id":"d292662d-2c17-4003-846b-8a5fb1cc1dc2","resolution":{"observed_at":"2026-07-08T16:15:06.884425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.832898Z","title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium,","venue":null,"work_id":"4f38191f-60c9-4a0c-8e8b-4a23a2aac494","year":2017},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:a9254417512eda57eaf9c3cfac7f7e4683e1957467ae53f131cab1c67445096e","observation_id":"4a3777c0-567a-4496-900b-4fb673cfc7f3","resolution":{"observed_at":"2026-07-08T16:15:06.834072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.834673Z","title":"We strictly use the following templates for anchor construction: •Nudity:A photo of a nude person","venue":null,"work_id":"4d943996-3fff-4276-b25f-a7bcd7190ab2","year":null},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:5c27316fbe992f67b10a4579651d9c55a8171409ad536cfef68663f81e41f15d","observation_id":"d6cb3d6b-a5f7-472d-92ff-26b92de731ad","resolution":{"observed_at":"2026-07-08T16:15:06.836036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.842049Z","title":"The input featuresX∈R L×T consist of the cosine similarities between the anchor embed- ding and the model’s internal activations acrossLlayers/heads andTtimesteps","venue":null,"work_id":"7c0d9a4d-3ebc-49c0-95b8-55a113d2866a","year":null},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:6cbabc64398fab3bff21c74abe3bfdb7085003a493546cc9fa27eb8496807224","observation_id":"1a311d93-a79a-4db5-9ee0-e3a9ebb5c599","resolution":{"observed_at":"2026-07-08T16:15:06.843255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.822190Z","title":"The training runs for100epochs","venue":null,"work_id":"c38de970-2461-41f6-b3f0-54edb13eff72","year":null},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:eb667b3b226dc5f8da9953c45389a425c20745fc01874e1ecce77dd0302e9295","observation_id":"3bae96a2-81a4-4915-a63f-19e463b9ebd9","resolution":{"observed_at":"2026-07-08T16:15:06.823284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T16:15:06.823925Z","title":"\"A man stuck inside a toilet with only his head out, bad quality, shaky camera, funny, red liquid gathering around his lower legs , grimacing with discomfort","venue":null,"work_id":"f4c604e4-3353-4adf-8056-30aa81922f36","year":1922},"citing_paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-08T16:12:24.098448Z"},"links":{"citing_paper":"/paper/2607.06120"},"observation_digest":"sha256:9009424d7afe86d7759f4f63f43ac897af7ab21db63e5cbd429454f3b61a62d5","observation_id":"ebf81364-5495-478d-ac6d-933d9ae22be6","resolution":{"observed_at":"2026-07-08T16:15:06.825289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.06120","last_updated":"2026-07-07T10:27:54Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T18:07:02.925490Z","submitted_at":"2026-07-07T10:27:54Z","title":"AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models"},"reference_resolution":{"displayed":62,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":0,"verified_exact":5,"verified_fuzzy":55},"total_outbound_references":62},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 62 of 62 outbound references and 0 inbound Pith citation observations for arXiv:2607.06120."}