{"as_of":"2026-08-09T01:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a6d1fb51079b02c2cb7862421a3cf5aefe0ed1efe4094f5da3d687f843010e8c","coverage":[{"denominator":30,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":30,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T00:38:15.350920Z","state":"measured"},{"denominator":30,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":30,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05715/citation-record","integrity":"/paper/2608.05715/integrity","json":"/paper/2608.05715/citation-record.json","paper":"/paper/2608.05715"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2204.01691","last_updated":"2022-08-16T16:06:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-04T17:57:11Z","title":"Do As I Can, Not As I Say: Grounding Language in Robotic Affordances","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.01691","snapshot_observed_at":"2026-08-08T00:38:15.242695Z","title":"arXiv preprint arXiv:2204.01691 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.242695Z"},"links":{"cited_paper":"/paper/2204.01691","citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:3733334c760963bf5fa255df61a1c48135afdc349d22e6b45f9dce6cb781e34c","observation_id":"006eb5fa-4e51-43aa-ae45-c8d2592a33a1","resolution":{"observed_at":"2026-08-08T00:38:15.242695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.281730Z","title":"2023 IEEE International conference on robotics and automation (ICRA) , pages=","venue":null,"work_id":"c57faae9-6290-4ca0-afc4-958bed8b26ca","year":2023},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.247790Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:c0e456fdaf5e5c2f4eff5cf241e6406fa93eb24ff4c0e7db93778024293f27ec","observation_id":"d162ceb5-5c85-4b65-a620-558e4c0dfc88","resolution":{"observed_at":"2026-08-08T00:38:16.285987Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.253074Z","title":"Conference on Robot Learning , pages=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.253074Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:3d71c09a22acabb442307a76ec12ee172e7f4ce1ca14f0941b4b31139afe07c7","observation_id":"9f4da654-973a-4475-ac41-a25a2ce9e403","resolution":{"observed_at":"2026-08-08T00:38:15.253074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.256815Z","title":"Proceedings of the 40th International Conference on Machine Learning , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.256815Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:0f3ef13a379de9086569decd328fa82ccab9fefc373bbfed6da9971d0375c153","observation_id":"626cf0f1-a5ee-4354-837f-844f21fdcc15","resolution":{"observed_at":"2026-08-08T00:38:15.256815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.260568Z","title":"The International Journal of Robotics Research , volume=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.260568Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:78d52482edd5c1afef828d7501301678fd4c657c29c2cdc1a511fff418f31caa","observation_id":"e2f7c468-3002-4188-b6b0-c9c8e333d063","resolution":{"observed_at":"2026-08-08T00:38:15.260568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.264614Z","title":"arXiv preprint arXiv:2311.07226 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.264614Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:4e3737d022b9aa77d8534df6d7c9c32ecee22da297404d3631a2b12126c9d906","observation_id":"09931831-9a51-419e-bb18-f631c12cfb7c","resolution":{"observed_at":"2026-08-08T00:38:15.264614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.248480Z","title":"Advanced Robotics , volume=","venue":null,"work_id":"fe32f45a-7a3f-4ca6-9dd7-efc9aa42380b","year":2024},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.268028Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:d8cd6274ce6659855a16394d4b955e47b0c60799a834477ae84e64f6493220bc","observation_id":"15109d71-5184-4da8-a71e-5851b2761966","resolution":{"observed_at":"2026-08-08T00:38:16.251777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.271337Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.271337Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:6cf199f88818e28ed83195df4f1c91368b56501351b9925e2cd05aa53a1b9da9","observation_id":"f3c9ee67-0623-4c75-b944-66edb82c7658","resolution":{"observed_at":"2026-08-08T00:38:15.271337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.229780Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=","venue":null,"work_id":"fc162c41-31fe-40dc-986c-dd6003ba452a","year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.274453Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:b8933de8676954386b134f982c0e7f169566283cd26898e4491ceb9fdbddfcc7","observation_id":"b563de3e-8712-4b35-ad9e-9c39c09e7255","resolution":{"observed_at":"2026-08-08T00:38:16.233388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.215931Z","title":"Proceedings of the 40th International Conference on Machine Learning , pages=","venue":null,"work_id":"eccfbc97-bb71-4397-a0e2-c8f57075645a","year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.277762Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:a016e75ee08941deebdc2e966eff43fbffd669f2c16803ed03af7e450a1fe93f","observation_id":"b629617b-7d66-4996-b21c-c12b30348c4f","resolution":{"observed_at":"2026-08-08T00:38:16.220380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.202674Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":"a1109edb-c946-47ae-986c-e384feedf0f9","year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.281180Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:4ace34eaa0916a5a39b2a55fc4e26e56e30f939cea441d17b4f186434323cc19","observation_id":"d5208101-31dc-40ec-86d5-c32248906376","resolution":{"observed_at":"2026-08-08T00:38:16.207079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.189631Z","title":"International Journal of Information Security , volume=","venue":null,"work_id":"7241e718-023f-4e38-9efb-70a59f261901","year":2022},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.284725Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:3dba819bef3fec602bdbfd1a1bec20a2908464de1ede99dc4e5768c49df7179b","observation_id":"7dfd1b6e-a78c-4c16-b92a-141ac9fd0f66","resolution":{"observed_at":"2026-08-08T00:38:16.194009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.175981Z","title":"2019 Third IEEE International Conference on Robotic Computing (IRC) , pages=","venue":null,"work_id":"aca50bb0-6b8a-4fd1-b855-2aa2d549dd74","year":2019},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.288274Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:5fbec3b01fc8fc99e5203d45709a0c5e43a53555467e7957fced9bcd23f5f657","observation_id":"1a61f9ec-eec4-4287-8a8c-e217964b9b7b","resolution":{"observed_at":"2026-08-08T00:38:16.180289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.163710Z","title":"Proceedings of the IEEE conference on computer vision and pattern recognition , pages=","venue":null,"work_id":"321e866a-dda4-4c16-9150-4b6cda92c753","year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.291825Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:f306fd568a503c2c431481499e9359a8da48ae613d46b0943b53bd4d079d1d42","observation_id":"7d410200-174c-44f5-a952-dc0557f538b7","resolution":{"observed_at":"2026-08-08T00:38:16.167512Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-08T00:38:15.295316Z","title":"arXiv preprint arXiv:1712.09665 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.295316Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:9f657f3c7f0ee2741e57f3e50614effa5f72afbb6f7c5bff95c0df3bd33efaf2","observation_id":"da5e652d-0cf8-49b8-8d6f-f07ed4e209f5","resolution":{"observed_at":"2026-08-08T00:38:15.295316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.299663Z","title":"Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.299663Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:60a7e648b0922a3f1569b072f97dbb64ab3325e6017e138a0bc2fb6a61a4c76d","observation_id":"040a6364-4205-45c1-86c5-335daa9de5de","resolution":{"observed_at":"2026-08-08T00:38:15.299663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.303462Z","title":"Distill , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.303462Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:2ef6f8b2e6ecef0432045b55bb28aaf534a37dbf56e2c6ec0dd0885d75e3a214","observation_id":"a64eabac-3f54-468b-999e-bf08a58c0a2d","resolution":{"observed_at":"2026-08-08T00:38:15.303462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.138446Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":"dc970ba1-c7d1-43ef-acc5-bbe14f43b27e","year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.307099Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:18c8ec2e51b1ed7899ded7d4cb8e558143548a54c899c9471691018130edd425","observation_id":"1e52c2b0-6b04-459f-bdac-4f05978e727b","resolution":{"observed_at":"2026-08-08T00:38:16.141884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.127594Z","title":"The Thirteenth International Conference on Learning Representations , year=","venue":null,"work_id":"55d7a60f-d966-42ac-9185-c44bcd51429e","year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.310962Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:03dee8604691a03056e777243e8fd4115b35ea6d56a784d171aaa01025328486","observation_id":"b813f62c-afd8-4793-a1d8-9a98debc7e61","resolution":{"observed_at":"2026-08-08T00:38:16.131374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:16.114014Z","title":"2025 IEEE International Conference on Robotics and Automation (ICRA) , pages=","venue":null,"work_id":"19080049-fa08-4bbe-be5a-5e520e0e3db1","year":2025},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.314586Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:4752d84c5a23dc0571471451dc2ba59279c50beff7a85f08e92094d8ea3541b7","observation_id":"b44e6f4c-d216-45db-bead-286a7b91b1c8","resolution":{"observed_at":"2026-08-08T00:38:16.119136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.318083Z","title":"arXiv preprint arXiv:2411.11683 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.318083Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:80a1f680864f6e066d05c7545389b6afe75a36baac18a1a58ad410afc382193d","observation_id":"bd22adfc-e5a8-467f-b94a-e7cf9a425d29","resolution":{"observed_at":"2026-08-08T00:38:15.318083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.321568Z","title":"arXiv preprint arXiv:2510.00181 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.321568Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:f961860c6c5ca5893af2a4860c327e0f26fa5ae38864fad5b83de7aeccf8decf","observation_id":"26f6de05-16d4-4143-8d37-952afb82a29f","resolution":{"observed_at":"2026-08-08T00:38:15.321568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-08T00:38:15.324935Z","title":"arXiv preprint arXiv:2211.09527 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.324935Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:52d1d1cfe80dd6a11de5ba9689d1092748d3cd2fb1a294f0ead51f82474e5e9e","observation_id":"59f4e7db-bfa1-4f0a-a55a-e96351c5bf71","resolution":{"observed_at":"2026-08-08T00:38:15.324935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-09T00:38:29.639641Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.03350","snapshot_observed_at":"2026-08-08T00:38:15.328733Z","title":"arXiv preprint arXiv:2506.03350 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.328733Z"},"links":{"cited_paper":"/paper/2506.03350","citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:86d052b77ef0f371ab1be96944cbe9d49d0c3f10e8a7d939bdd6a0eb3dcba943","observation_id":"3eb7074b-c81e-4cc4-b498-e7acc5d3c737","resolution":{"observed_at":"2026-08-08T00:38:15.328733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.332556Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.332556Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:a7edc56e17ab89f62cffdf8b03700f5117ad60dc1aa65c684a29248bc172c71f","observation_id":"7b4f3968-ddf9-4695-adef-974be7941a9f","resolution":{"observed_at":"2026-08-08T00:38:15.332556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.336279Z","title":"33rd USENIX Security Symposium (USENIX Security 24) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.336279Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:f19d58360e92586f9ea3f61fff37e4afabc31152817b34d5c1e22b2559ef09b8","observation_id":"725d221e-1022-4958-a520-7d528924d702","resolution":{"observed_at":"2026-08-08T00:38:15.336279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-08T00:38:15.339780Z","title":"arXiv preprint arXiv:2403.14720 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.339780Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:6ac14687f02b715e35311ef35d9f177124e2d6d68e10d432d412509ac23522a2","observation_id":"72bacd52-3b75-405a-be21-cbccfb898db6","resolution":{"observed_at":"2026-08-08T00:38:15.339780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.343599Z","title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.343599Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:eb3225aa9530ee9289f90ac758b9f702e2430f42a7bb11a714daa476a6331dbe","observation_id":"7fd5f827-18e2-4179-8bae-0d71a4ff3d48","resolution":{"observed_at":"2026-08-08T00:38:15.343599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-08T22:08:37.768137Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-08T00:38:15.346908Z","title":"arXiv preprint arXiv:2307.10490 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.346908Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:52724fd4da82dafffe617987d3b8c853a3fe350dcba5dcd529945b81664d8274","observation_id":"6e5903d9-8340-4ce3-87d2-e302054779fd","resolution":{"observed_at":"2026-08-08T00:38:15.346908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:38:15.350920Z","title":"European Conference on Computer Vision , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T00:38:15.350920Z"},"links":{"citing_paper":"/paper/2608.05715"},"observation_digest":"sha256:ed9e5ea72b832cd0901dbb94d93e907a5d5d7e1b569f32dd8ff24b8a9d9fb914","observation_id":"762abbcc-0f6d-488e-95dd-11de784837d4","resolution":{"observed_at":"2026-08-08T00:38:15.350920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.05715","last_updated":"2026-08-06T07:52:55Z","latest_version":1,"primary_category":"cs.RO","snapshot_observed_at":"2026-08-09T00:11:04.336570Z","submitted_at":"2026-08-06T07:52:55Z","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots"},"reference_resolution":{"displayed":30,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":19,"verified_exact":0,"verified_fuzzy":11},"total_outbound_references":30},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 30 of 30 outbound references and 0 inbound Pith citation observations for arXiv:2608.05715."}