{"as_of":"2026-08-02T23:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bb1066de0ac78cecf55510fe9d6eb1b11767988c9042324a005dce9ea38992e7","coverage":[{"denominator":77,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":77,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T09:23:52.602450Z","state":"measured"},{"denominator":77,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":77,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-02T06:30:47.504484+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.24897/citation-record","integrity":"/paper/2607.24897/integrity","json":"/paper/2607.24897/citation-record.json","paper":"/paper/2607.24897"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.291958Z","title":"T.; Kljun, M.; Quigley, A.; C opi c Pucihar, K.; Grubert, J.; Biener, V.; Leiva, L","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.291958Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a72c4c3e48742e897365f91715a2d2ba2b1d34882c13853f59ede74b72567436","observation_id":"6bdb8ee0-9e63-4cbc-8a81-1d562c3e68ff","resolution":{"observed_at":"2026-07-31T09:23:52.291958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.296831Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.296831Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:696b90ee59cbafbfe79eff919aebb776568ae5d68c2b477b8260187334383e6c","observation_id":"062a1f10-5598-4ad2-b7c2-bba7c84c63b6","resolution":{"observed_at":"2026-07-31T09:23:52.296831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.299633Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.299633Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:06bbe6ecbd994e330adee7c460ddc5ad3299db7203814a6241cb8fd469ebb24c","observation_id":"b7e5dd13-4546-4294-90b3-6fbd425f9573","resolution":{"observed_at":"2026-07-31T09:23:52.299633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.305914Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.305914Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:ea2b5159ed6e3e8cd227d8e0bc2bb066a0086d61a608f4e8eb847b37894db37d","observation_id":"00406c6c-4cf0-4baf-99ee-1af71f299088","resolution":{"observed_at":"2026-07-31T09:23:52.305914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.315074Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.315074Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:45d636b92df3e81c16ae49cdeec05daefbcf71a210d878a9b2dfb27dacfa852b","observation_id":"490d41d9-d398-415a-8ed7-5c240c2eb23d","resolution":{"observed_at":"2026-07-31T09:23:52.315074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.317843Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.317843Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:95737c19e6d2f2c5b7985f40c4bf8fb6a849d5d105b1d2adb6291c9f6ec0bbb1","observation_id":"132c6906-b87f-4c74-b16f-316bb64dde50","resolution":{"observed_at":"2026-07-31T09:23:52.317843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.320382Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.320382Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a9d6e416fbcad5110ce91eada214c0cf5dd6e40f45e6409211089be08789a1c9","observation_id":"210f1fc6-cb86-4e65-a127-776d3828209f","resolution":{"observed_at":"2026-07-31T09:23:52.320382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.323087Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.323087Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:4ae7a42d8037ab9f894473d1e46a3dd01526da0555d2c36fa3665d3dc565c83e","observation_id":"3d810318-82f6-4d5f-82ad-7d1dbad795a2","resolution":{"observed_at":"2026-07-31T09:23:52.323087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-07-31T09:23:52.325664Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.325664Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:41786769133bd29fbe618386590ba6e372246828242eec35126e7134d1b7410c","observation_id":"b848ca81-4652-4c11-a7bb-338079de0540","resolution":{"observed_at":"2026-07-31T09:23:52.325664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.328437Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.328437Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3424ea8a1cbc4973e9a7bbcd403dfdc84a5253d9525013489ddedc48da14fc7a","observation_id":"e70b42f4-a965-47af-a3cf-a958e3eb59dc","resolution":{"observed_at":"2026-07-31T09:23:52.328437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12893","last_updated":"2025-02-27T01:32:58Z","snapshot_observed_at":"2026-07-06T20:38:38.495334Z","submitted_at":"2025-02-18T14:29:12Z","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12893","snapshot_observed_at":"2026-07-31T09:23:52.331731Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.331731Z"},"links":{"cited_paper":"/paper/2502.12893","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a84adf6824cfa120aa3a3afa8045dd973902f08dc25122a67012e4e56d71a431","observation_id":"307204e9-b59a-4356-95b2-3dfe24443d7e","resolution":{"observed_at":"2026-07-31T09:23:52.331731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.334641Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.334641Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:e964789456943644030a63d87b22d2d444c1d6285609c61292d9c12b79bb3838","observation_id":"5b777e41-7422-4d6e-9991-2f77395c7147","resolution":{"observed_at":"2026-07-31T09:23:52.334641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.337242Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.337242Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:bbb4b6f48bc743c369ba1986f4201cd600a3e90086782c7f6e60a8fbe20705db","observation_id":"f8cd89da-2c0e-40e3-b113-b041309d50bd","resolution":{"observed_at":"2026-07-31T09:23:52.337242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.340008Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.340008Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:8f10a21bd1430d7296afa9c46c765345087c76f0db82753e4d3c275ffd952619","observation_id":"d56beffd-b9e9-4717-b051-8a8d802e7017","resolution":{"observed_at":"2026-07-31T09:23:52.340008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.346056Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.346056Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:01d8b8ea0584da482cb43d0226c0472891f8ddb78857b6bfda1d8bd1abd711eb","observation_id":"96519aa2-bc85-490c-8d0b-4478ffe33297","resolution":{"observed_at":"2026-07-31T09:23:52.346056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.351680Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.351680Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:513a6e81a0890db89d276d8a7492edb120921c722bc2153b0afcb0a6fd2f5fe4","observation_id":"f5937774-b249-4a7a-8578-d8b5dfc10793","resolution":{"observed_at":"2026-07-31T09:23:52.351680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.354372Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.354372Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:5c3048ae2501b5da80b137ee77c22935bcec0c4e0ea91199ce620f7130440921","observation_id":"dbf2d95d-1d34-49d3-a800-7f2cbb890486","resolution":{"observed_at":"2026-07-31T09:23:52.354372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.357194Z","title":"W.; Hallacy, C.; Ramesh, A.; Goh, G.; Agarwal, S.; Sastry, G.; Askell, A.; Mishkin, P.; Clark, J.; Krueger, G.; and Sutskever, I","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.357194Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:22dc13ef980f00e01a4931d0a3e95758c21d3bfdaa12931d0987369be16ebc59","observation_id":"956be2b9-59b3-480b-8611-a99a35fa1d9f","resolution":{"observed_at":"2026-07-31T09:23:52.357194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.366327Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.366327Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:776832b7c55f77b86c6036401c9f3530b9a995d142179066a8aeca6762bd2995","observation_id":"f4478bc5-77a0-497d-9c20-6a3ee4f2b863","resolution":{"observed_at":"2026-07-31T09:23:52.366327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.371519Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.371519Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:76ae364336f35ed98b8f873f63b518547b10dfac62ebd7b6cc64ecda92fc8c04","observation_id":"ebd80c23-26ea-4cf3-9313-bdd772105148","resolution":{"observed_at":"2026-07-31T09:23:52.371519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.374077Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.374077Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:1b8f523deefa75ce5fe10c01e1b8795d11932e268ffa0fe1e5f9ef7d754fb442","observation_id":"abc75127-7f1e-4d8c-ae92-ee788edd7b89","resolution":{"observed_at":"2026-07-31T09:23:52.374077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.376553Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.376553Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:1c1441ff0513834a7b4ea10900c3d534d9883de84fce17afff6f5c525b41ea5b","observation_id":"43c79373-400b-4a74-9b4a-07dfc6bcd9c5","resolution":{"observed_at":"2026-07-31T09:23:52.376553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.381740Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.381740Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a3188c9b2eb22d933b249beef9f2ff0bcfeef637e19b4e764b446423f8bbe10d","observation_id":"f2399a24-82de-4832-883a-22ce6cfcbd3a","resolution":{"observed_at":"2026-07-31T09:23:52.381740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.386655Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.386655Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:afb96c0cc060f63565abb40c732dc0b33d1a2aef62a368041acf73fc11e7dd51","observation_id":"9400e564-f9ef-483c-bb77-3e96a062ed61","resolution":{"observed_at":"2026-07-31T09:23:52.386655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.394158Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.394158Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:590ef2b9c096f92908187ba010f0dfdb52ca0c0bc4ebda51947e66a66859ceff","observation_id":"96aade7f-2b7b-4e30-8532-39006d5cff41","resolution":{"observed_at":"2026-07-31T09:23:52.394158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.401816Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.401816Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:adef440c1c927e60a298fb762c94c5414443d2dda2acb634e921dac63a262ef8","observation_id":"4352852c-6dcb-445c-99f6-b69badb963bb","resolution":{"observed_at":"2026-07-31T09:23:52.401816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.409372Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.409372Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:2a0f7635f887484638dc25ab313b57be4c6120431dc3a0bf3afbf6519313b8a9","observation_id":"519b8494-94ec-45bf-9685-e3e44a8c5816","resolution":{"observed_at":"2026-07-31T09:23:52.409372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.412930Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.412930Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:75bcc2bdacd586d69b4c627c364c14a2d042f9e30d9e290a672fc1f33396d07a","observation_id":"e67760ea-e28e-4f1c-a38c-695a67ba8da0","resolution":{"observed_at":"2026-07-31T09:23:52.412930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.10730","last_updated":"2026-05-11T15:34:56Z","snapshot_observed_at":"2026-07-06T23:22:37.355450Z","submitted_at":"2026-05-11T15:34:56Z","title":"Qwen-Image-2.0 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.10730","snapshot_observed_at":"2026-07-31T09:23:52.417153Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.417153Z"},"links":{"cited_paper":"/paper/2605.10730","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:b64c8be13640979f340aa113ef74584111ccab55f175a125554cbc330e6712ce","observation_id":"e2764c7d-a22c-4174-87af-8ed6138d3c28","resolution":{"observed_at":"2026-07-31T09:23:52.417153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.428868Z","title":"2026 , howpublished =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.428868Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:401a177d53178b6e8311a2b2ea77e104c86c38056d1499945acce48a6c1a3cf6","observation_id":"56d4908e-7ca1-438f-868f-da57938fdc7c","resolution":{"observed_at":"2026-07-31T09:23:52.428868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-07-31T09:23:52.432497Z","title":"arXiv preprint arXiv:2307.15043 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.432497Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:dee9a7116e9acd5f09b0791742a1d6a32854d6296ab8090de2ba3915d2149e62","observation_id":"45058d56-6155-42ca-9f3f-002cc223dd47","resolution":{"observed_at":"2026-07-31T09:23:52.432497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.437124Z","title":"Proceedings of the 38th International Conference on Neural Information Processing Systems (NeurIPS'24) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.437124Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:5360da8086ef5fa3e57f35711792098299a5ec5d27801105205fabab28eb2c1d","observation_id":"9745f57c-b453-410b-bc09-0f0d7a7b64af","resolution":{"observed_at":"2026-07-31T09:23:52.437124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.441696Z","title":"2025 IEEE Symposium on Security and Privacy (S&P'25) , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.441696Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:0c461c885df98064a25eaa656d5f61711672c81a89fed30413c57bd3685bcf11","observation_id":"e1a566b3-effe-4284-b24d-d996b6ad03b4","resolution":{"observed_at":"2026-07-31T09:23:52.441696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-31T09:23:52.445668Z","title":"arXiv preprint arXiv:2312.07130 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.445668Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:2ff1c1c0c644d416ec3927a89bebb9533467e636f8f05be5cee88b286dd69288","observation_id":"8ad9c1c4-8664-475a-ac66-fda8934a1792","resolution":{"observed_at":"2026-07-31T09:23:52.445668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.449411Z","title":"2024 IEEE symposium on security and privacy (S&P'24) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.449411Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:8eece87c47e399741474dd941c04bc950afc729558216886fb015340a982d836","observation_id":"ca8a2a74-3f32-40d1-a2d7-4238227ede7d","resolution":{"observed_at":"2026-07-31T09:23:52.449411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.453067Z","title":"Knowledge-Based Systems , volume=","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.453067Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c3eac604f234cff0f799d5f2717048956867d68d65520928f6f1d71d60ce4be7","observation_id":"09ff4305-1809-4505-a764-1e2dc6cfc6f1","resolution":{"observed_at":"2026-07-31T09:23:52.453067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.457027Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.457027Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:5177cbfeb934bb138a8dbcec1d550cb692cfdcdb980f1bf456cb975125126563","observation_id":"e9700e31-b891-4a6c-b70d-3e7bc64eaaa0","resolution":{"observed_at":"2026-07-31T09:23:52.457027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.461584Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'22) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.461584Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c1a5bf44376c7ba0b07580dfae3e992c28a76244babd982944c75e781c469793","observation_id":"209746ca-f33f-47c1-962a-340c1676b516","resolution":{"observed_at":"2026-07-31T09:23:52.461584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06125","last_updated":"2022-04-13T01:10:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-13T01:10:33Z","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.06125","snapshot_observed_at":"2026-07-31T09:23:52.465758Z","title":"arXiv preprint arXiv:2204.06125 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.465758Z"},"links":{"cited_paper":"/paper/2204.06125","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3b115f9bea3744bb4853095e784d6fd872ff1c75ec51baa65f383ace7abaa40e","observation_id":"c32b76d9-33fd-43bc-891e-4470d8a8725b","resolution":{"observed_at":"2026-07-31T09:23:52.465758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.11487","last_updated":"2022-05-23T17:42:53Z","snapshot_observed_at":"2026-07-06T13:12:59.688989Z","submitted_at":"2022-05-23T17:42:53Z","title":"Photorealistic Text-to-Image Diffusion Models with Deep Language Understanding","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.11487","snapshot_observed_at":"2026-07-31T09:23:52.469975Z","title":"arXiv preprint arXiv:2205.11487 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.469975Z"},"links":{"cited_paper":"/paper/2205.11487","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:9ac5a5fbc306d10289092c90d48e2568142d6deae12bf775008931cbbe3eb6a2","observation_id":"51bb5ece-cf6d-4077-ae22-a996def1b350","resolution":{"observed_at":"2026-07-31T09:23:52.469975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.473756Z","title":"Advances in Neural Information Processing Systems (NeurIPS'23) , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.473756Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:fa654a50762f2c2ba583d88a830ba11aa75a908c0c362e251a181589cb773aaf","observation_id":"16bb53dd-f52e-4777-8577-aae0260e8e01","resolution":{"observed_at":"2026-07-31T09:23:52.473756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15245","last_updated":"2024-11-22T03:31:56Z","snapshot_observed_at":"2026-07-06T19:55:42.238611Z","submitted_at":"2024-11-22T03:31:56Z","title":"AnyText2: Visual Text Generation and Editing With Customizable Attributes","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15245","snapshot_observed_at":"2026-07-31T09:23:52.477918Z","title":"arXiv preprint arXiv:2411.15245 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.477918Z"},"links":{"cited_paper":"/paper/2411.15245","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:24b1c8f7e986707f2713c9706183f143c42fe07e16b609e7d8aed8f1911af1d9","observation_id":"6bd279e6-6444-4b2a-85b5-81d7aafdc2b9","resolution":{"observed_at":"2026-07-31T09:23:52.477918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18979","last_updated":"2026-05-23T07:45:54Z","snapshot_observed_at":"2026-07-06T21:30:00.261435Z","submitted_at":"2025-05-25T05:13:06Z","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18979","snapshot_observed_at":"2026-07-31T09:23:52.481380Z","title":"arXiv preprint arXiv:2505.18979 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.481380Z"},"links":{"cited_paper":"/paper/2505.18979","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:192899880ce96c5b4f00755a07160285385938f7dc3bbe5494d443de8c2d7a35","observation_id":"7812e5d9-539d-45bd-8353-6ed3a23385ed","resolution":{"observed_at":"2026-07-31T09:23:52.481380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.17870","last_updated":"2023-05-23T04:07:00Z","snapshot_observed_at":"2026-07-06T15:10:26.549542Z","submitted_at":"2023-03-31T08:06:33Z","title":"GlyphDraw: Seamlessly Rendering Text with Intricate Spatial Structures in Text-to-Image Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.17870","snapshot_observed_at":"2026-07-31T09:23:52.484829Z","title":"arXiv preprint arXiv:2303.17870 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.484829Z"},"links":{"cited_paper":"/paper/2303.17870","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:7eea4eaf27f0ba249a47f444e3dce07c6f50904a6af22863010854d38fd9147e","observation_id":"78485eab-73b9-4794-840a-b74f8cb90123","resolution":{"observed_at":"2026-07-31T09:23:52.484829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.489499Z","title":"arXiv preprint arXiv:2504.20376 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.489499Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:5718f89f178686a1e8d5877915fcadc382e53152159e9efa0a8ba9083d2c3b32","observation_id":"c0377ada-5677-462e-9597-e0af00be30fa","resolution":{"observed_at":"2026-07-31T09:23:52.489499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-31T09:23:52.492793Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.492793Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:03a47e01c898967d97694695daedfe57c2f1f894dbaeae3e6c4682ab26a54f5c","observation_id":"d1e860ea-16ee-43f7-bec3-4b0c4c30aa4a","resolution":{"observed_at":"2026-07-31T09:23:52.492793Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.495922Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'23) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.495922Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:ad1dbb63b47eaf061b43ef730ae1fd34d28ed427a39e60aa8b19b0d19d5edac9","observation_id":"14d6aa7b-5315-457e-9a4d-e4dbf474f626","resolution":{"observed_at":"2026-07-31T09:23:52.495922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.499507Z","title":"Computer Vision -- ECCV 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.499507Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:7fe964baf5c4d1829be0ac434eda30891617fd7ace79c41ae2fe2248a3aee3e2","observation_id":"953d3b1b-e820-4a79-abc3-0c821791cab4","resolution":{"observed_at":"2026-07-31T09:23:52.499507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.503135Z","title":"arXiv preprint arXiv:2503.17987 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.503135Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:b940cadd6833019f4ce53023213fd4977a78508f8d0d387c4353b45af657bdc1","observation_id":"b2da54af-552a-46ef-a499-ed48f3fa4e44","resolution":{"observed_at":"2026-07-31T09:23:52.503135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-07-31T09:23:52.506268Z","title":"arXiv preprint arXiv:2310.08419 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.506268Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:ddb56de083b66b18f123f5655d2c3e07b353d1bb5a677031ab1eaf11dd9f2ca0","observation_id":"b5bfedd4-da29-41ae-9b32-d7cf3b2306d4","resolution":{"observed_at":"2026-07-31T09:23:52.506268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-07-31T09:23:52.509403Z","title":"arXiv preprint arXiv:2312.02119 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.509403Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f292dd46e093c16e765f06728a55f9812320040dbe9bd90cd3175b9ae8f43bf0","observation_id":"dfef2595-b7b2-444e-9fcd-9f672a9e48f9","resolution":{"observed_at":"2026-07-31T09:23:52.509403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-07-06T19:29:14.335016Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-07-31T09:23:52.512490Z","title":"arXiv preprint arXiv:2410.05295 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.512490Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:374de24c7030b392f8125a775f936670308f0b75327cf5ba08e5903b6399ff36","observation_id":"f68d1564-7e93-463c-a149-57ccdd4cd73f","resolution":{"observed_at":"2026-07-31T09:23:52.512490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.515521Z","title":"Proceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency , pages =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.515521Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:88c5cf8c3faa697a9d766ac7defa369d069925022b96858d1f9eb822ff8b8f42","observation_id":"621ac1fe-2323-40ac-b96e-57388b455268","resolution":{"observed_at":"2026-07-31T09:23:52.515521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-07-31T09:23:52.519313Z","title":"arXiv preprint arXiv:2309.10253 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.519313Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:7e3656918ffbda777e18b620487a174e3330fd7e2dc687463206bc8117f8e3f8","observation_id":"a0659be3-8d15-460a-9b39-e79d3ae145cc","resolution":{"observed_at":"2026-07-31T09:23:52.519313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.522359Z","title":"International Conference on Learning Representations (ICLR'24) , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.522359Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:d28eec9afae2efe16be84a1ab826c2c50a393c3f3f96ecc543083c8b3f8b7fe3","observation_id":"b5fe98e0-0159-48b3-b712-9bbead0b5b89","resolution":{"observed_at":"2026-07-31T09:23:52.522359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.526083Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.526083Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:8c7f91f71164d1f1d2d50a25c6aec9ebdc05aeffe3cb3bfe1c7d7f8163718046","observation_id":"33245419-4a00-4707-8c8b-84a1de732e52","resolution":{"observed_at":"2026-07-31T09:23:52.526083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.530223Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.530223Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:67cd477b2f4033fc9585668597f394f36a113fdb370b2ecc9e40a9f31a7f7609","observation_id":"124913a1-5ca9-4a95-9832-64132f74e958","resolution":{"observed_at":"2026-07-31T09:23:52.530223Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.534087Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.534087Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:4c7ff94f697a951a0b832e2dc94ac8e1127887e15f112513e9ec7f9320645b76","observation_id":"b2986a47-134c-4daf-8390-27e3d71492a0","resolution":{"observed_at":"2026-07-31T09:23:52.534087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.537731Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.537731Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f2f0e4311b58f61403d5c2f93c669bf45b7e6ab00e081edc3826532e8efd2d62","observation_id":"640aaff7-d3ac-4a81-9555-a0cf21c164ec","resolution":{"observed_at":"2026-07-31T09:23:52.537731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.541288Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.541288Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:313359d9e4eb1a7e7c492465ccec6fffa7d918a9655c4cdcef78f144a5de0217","observation_id":"7f614e66-756d-49a8-9411-e67157124dc1","resolution":{"observed_at":"2026-07-31T09:23:52.541288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02527","last_updated":"2025-05-05T10:08:31Z","snapshot_observed_at":"2026-07-06T21:19:00.235271Z","submitted_at":"2025-05-05T10:08:31Z","title":"Text to Image Generation and Editing: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02527","snapshot_observed_at":"2026-07-31T09:23:52.544901Z","title":"arXiv preprint arXiv:2505.02527 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.544901Z"},"links":{"cited_paper":"/paper/2505.02527","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f9d375aff6b84e73a44c63f4d0201006e6af29a94b58ab7a31d982a1d6ac6a4b","observation_id":"c50f1462-d9a1-4287-8136-762a9e967822","resolution":{"observed_at":"2026-07-31T09:23:52.544901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.548416Z","title":"Proceedings of the 30th International Conference on Intelligent User Interfaces (IUI'25) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.548416Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:70332c9c2157a8aeeb91f6e1f5be22a9f954a18a328a3aa66feba01102ecd4d3","observation_id":"87c33e6a-8d1a-45c9-96a9-54d96d5c30c3","resolution":{"observed_at":"2026-07-31T09:23:52.548416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.552052Z","title":"Proceedings of the 2022 CHI conference on human factors in computing systems , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.552052Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3448dd9847aa246b533a918c01c7135586dc393294f11cca4f2731201951345d","observation_id":"6356859c-070e-46e2-8e64-cd90c90f3539","resolution":{"observed_at":"2026-07-31T09:23:52.552052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.555613Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (ACL'25) (Volume 1: Long Papers) , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.555613Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:d04607285d5ddf6f7599d2d709c3af830e2462d1bdc973eea8e564b4a823a301","observation_id":"1a13540b-7deb-4b52-86dc-95b34b72dbaa","resolution":{"observed_at":"2026-07-31T09:23:52.555613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.559535Z","title":"Proceedings of the 42nd International Conference on Machine Learning (ICML'25) , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.559535Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f2585c98a7971c78941370b64d8ee1a5d8559e793ed2e7f69e1412fdec06c274","observation_id":"370cd00e-4b3f-48a5-b9b5-5e7247385edd","resolution":{"observed_at":"2026-07-31T09:23:52.559535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.563320Z","title":"Proceedings of the 38th International Conference on Machine Learning (ICML'21) , pages =","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.563320Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a49731c0e81d2eea496821a228646bd9a6afe2f671b24e3f9693f2ccfc7530ee","observation_id":"f0f4cffe-a288-4d4c-9aa7-972689cba8a8","resolution":{"observed_at":"2026-07-31T09:23:52.563320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.567297Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.567297Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:78a986fee8c3eff0d99979d105c8588bdf6a95e12fd7424402b07b59ae951474","observation_id":"bcffcbf5-397b-458d-a2e1-7338d0f9696d","resolution":{"observed_at":"2026-07-31T09:23:52.567297Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.570901Z","title":"2025 , doi =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.570901Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:4f1b7a7f5af4d5036f0dbe9725e4453b44a774e399f4e7aae668625c9b45c9b0","observation_id":"202c6a93-7f9e-4f3b-907e-f5a95b4b3f0d","resolution":{"observed_at":"2026-07-31T09:23:52.570901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.574488Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.574488Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f74e54a4fe7a2543a087a765dc874cb5a83f17b37d220c08eff99964c9e6c9a9","observation_id":"13b79b83-824e-4ce6-950c-5cba9122b9f0","resolution":{"observed_at":"2026-07-31T09:23:52.574488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.578170Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.578170Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:8051072a166568fdbea27efdcb95274ce7d798ca6c09804267627dd6d7f9c842","observation_id":"ccbf26b3-887b-43a4-b90f-82fdc9cd57d2","resolution":{"observed_at":"2026-07-31T09:23:52.578170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.581531Z","title":"Applied Mathematics and Computation , volume=","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.581531Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:bc73ef8dd911400e752990e0e30585a5db32bcc6fae3f57810af6a7169b51296","observation_id":"0e60a442-00f2-4a4d-ad51-fac42d8d425c","resolution":{"observed_at":"2026-07-31T09:23:52.581531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.584952Z","title":"Proceedings of the Ninth International Conference on Document Analysis and Recognition (ICDAR'07) , volume =","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.584952Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f0e8079b951ca45346a34f05b3326f0012160d7d9861f5d530340c9ca4354826","observation_id":"aedf8940-9da7-4c37-987a-187ebc416f46","resolution":{"observed_at":"2026-07-31T09:23:52.584952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.588720Z","title":"arXiv preprint arXiv:2606.19348 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.588720Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:ac6468a9ba6aa8717dbcd01ec51fd9278bf408f9a4988ca5e3b359791396cf6d","observation_id":"755d5c12-522e-486c-b364-a1b4b4f3052f","resolution":{"observed_at":"2026-07-31T09:23:52.588720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.592018Z","title":"35th USENIX Security Symposium (USENIX Security 26) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.592018Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:374432bc18b792c1f9e14a4466208962a2025fe48aed76d88fe6078cd8a22b13","observation_id":"d701c809-0911-43e6-b219-2d808d7080bc","resolution":{"observed_at":"2026-07-31T09:23:52.592018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.595864Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.595864Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:d301a7bf646585c1d6fc22b24e937397d51fe587de52bc935edd96bbf7202c7c","observation_id":"ed434098-05cc-474a-a556-0fd37779f3fc","resolution":{"observed_at":"2026-07-31T09:23:52.595864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.599475Z","title":"arXiv preprint arXiv:2411.11683 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.599475Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:1ac7400fcfa7dfc490d1d25813eb8d49870c43b98db034da3c24d6a8212d05dc","observation_id":"645ee5b6-15dc-400a-a28b-467228f04adf","resolution":{"observed_at":"2026-07-31T09:23:52.599475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.602450Z","title":"Proceedings of the Thirteenth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.602450Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:fc7a4e8352fb735af6cd4f8a69cbb704310cca5207cd1bfc5e5ca32eac4dd07a","observation_id":"13e8f177-ad24-4d22-9ff7-11500e01abc2","resolution":{"observed_at":"2026-07-31T09:23:52.602450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T16:30:11.942468Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models"},"reference_resolution":{"displayed":77,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":75,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":77},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-02T06:30:47.504484+00:00","source":"crossref"},{"observed_at":"2026-08-02T06:30:44.765945+00:00","source":"retraction_watch"}],"thesis":"As of 2 August 2026, this Paper Citation Record lists 77 of 77 outbound references and 0 inbound Pith citation observations for arXiv:2607.24897."}