{"as_of":"2026-08-16T07:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6ea170ce016b360e12c3432e414bab1c560020f8102d11e1b1e874655e3422b9","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T04:34:05.794882Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.08641/citation-record","integrity":"/paper/2608.08641/integrity","json":"/paper/2608.08641/citation-record.json","paper":"/paper/2608.08641"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.582086Z","title":null,"venue":null,"work_id":"e9d3e351-ebec-449c-83b2-c1e7d298c628","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.626012Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:3e80ca7003d38cea5069f19bac374339f1682395164401e0131aa33fee2af48d","observation_id":"7d700aec-c21a-4259-af6d-544eb5f13106","resolution":{"observed_at":"2026-08-14T04:34:06.585678Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:05.632019Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.632019Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:04205f62740b71cb7db7a01f2122c7cf5d5677f0e719ab268bad656866958ac4","observation_id":"87b3bcc2-179d-449e-b1ce-c2cb7b5a3b52","resolution":{"observed_at":"2026-08-14T04:34:05.632019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.564046Z","title":null,"venue":null,"work_id":"22103732-290c-4b60-aa86-296766aec90f","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.636147Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:dc2930db566e3929bb35e213bffc9bc60e0d12722f27d876644ca15964cb4645","observation_id":"89919107-05a7-4ca4-b08d-b6e3a4034916","resolution":{"observed_at":"2026-08-14T04:34:06.567518Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11445","last_updated":"2024-11-05T08:46:01Z","snapshot_observed_at":"2026-08-15T04:53:52.603385Z","submitted_at":"2024-09-17T03:39:45Z","title":"Jailbreaking Large Language Models with Symbolic Mathematics","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11445","snapshot_observed_at":"2026-08-14T04:34:05.640222Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.640222Z"},"links":{"cited_paper":"/paper/2409.11445","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:ecba28aa97dbbb8655640acd902abdb17b65a481d56c2dd4b5ed56535f11501d","observation_id":"bb2030ca-1727-440d-93cc-ad5b633f10a0","resolution":{"observed_at":"2026-08-14T04:34:05.640222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06705","last_updated":"2019-02-20T17:38:32Z","snapshot_observed_at":"2026-08-14T17:14:47.799958Z","submitted_at":"2019-02-18T18:18:27Z","title":"On Evaluating Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06705","snapshot_observed_at":"2026-08-14T04:34:05.644759Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.644759Z"},"links":{"cited_paper":"/paper/1902.06705","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:2001e39773854148aa474cd3b1d0a4c17838555db7997a76b32ff5c48ae69a3f","observation_id":"7e27b860-2a1f-4d07-92db-820697c9a100","resolution":{"observed_at":"2026-08-14T04:34:05.644759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.554154Z","title":"J.; Tram\\` e r, F.; Hassani, H.; and Wong, E","venue":null,"work_id":"74e38daf-32bb-4950-9430-07dbe2746463","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.649880Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:dfc75e823239b57fe18c93537fe39d0a55ccfee0628b893decc16703259552d8","observation_id":"71e7d0ff-6a65-46da-8e1e-bbd9a111c347","resolution":{"observed_at":"2026-08-14T04:34:06.557880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.00420","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.242371Z","title":null,"venue":null,"work_id":"8e683be2-0210-410d-b13a-d6c99bbf2552","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.654163Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:392097c68f54cf482d1a832aec5530c6fd2e92a8b4db1364d1406c130498ad2c","observation_id":"65c1049b-66f8-4308-b3e5-5fc7bd2152c7","resolution":{"observed_at":"2026-08-14T04:34:06.247643Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.03594","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.182782Z","title":null,"venue":null,"work_id":"c07726ba-366a-4890-b380-dfee81213ea7","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.657924Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:046aa5f19a28ad39b8090cc86ae23141554b071e2296e1b2ebfe69c7b3c78199","observation_id":"9f6c117f-c6ea-44c9-b29c-3d2e71319e57","resolution":{"observed_at":"2026-08-14T04:34:06.189939Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10414","last_updated":"2024-11-15T18:34:07Z","snapshot_observed_at":"2026-08-12T19:36:09.487518Z","submitted_at":"2024-11-15T18:34:07Z","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.10414","snapshot_observed_at":"2026-08-14T04:34:05.661690Z","title":"D.; Upasani, K.; and Pasupuleti, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.661690Z"},"links":{"cited_paper":"/paper/2411.10414","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:28df90e719bad5f9550b5a45d07941d42ee64d8166d5091b6189d90c92a1a476","observation_id":"b1c98a0a-cdef-483a-947a-b337ca954661","resolution":{"observed_at":"2026-08-14T04:34:05.661690Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.543177Z","title":null,"venue":null,"work_id":"5e58e7fb-6455-4435-9d02-0ae95550c141","year":2020},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.666033Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:eaa92a07e197b83bbf1aa61761aa59031906f9a9fb6db0432e458d2172491af9","observation_id":"8df09ed2-fecc-439d-8447-65d49fa82a43","resolution":{"observed_at":"2026-08-14T04:34:06.546923Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.532228Z","title":null,"venue":null,"work_id":"161bde03-f6a7-4dc5-a13f-f07b1c116d1d","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.669626Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:87202004a52b1c1bebd2253744762a7de8266a948cbd3000eb186410e5381398","observation_id":"e1b539eb-bb2f-48e4-8664-7cc801b90f9b","resolution":{"observed_at":"2026-08-14T04:34:06.536326Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.520114Z","title":"S.; Chakraborty, S.; Singh, V.; Guan, T.; Wang, M.; Beirami, A.; Huang, F.; Velasquez, A.; Manocha, D.; and Bedi, A","venue":null,"work_id":"671da32a-43bc-456d-bc88-54277f0fc655","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.673201Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:04f9f6cb7790b2a59474af5a85f01f80f63c7ce2e0aebb6868f7489086939186","observation_id":"9605bee4-01e1-44f9-af44-c48d671129c1","resolution":{"observed_at":"2026-08-14T04:34:06.524307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.508040Z","title":null,"venue":null,"work_id":"b8941ede-6300-4b8a-8bf8-c3519be52dd0","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.676882Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:10ec826a33d0e554b0be2fc904ae30862268d10ab2419568256b5589eb1998a4","observation_id":"ef76b099-cfce-4ce9-b9e2-902d34fc73be","resolution":{"observed_at":"2026-08-14T04:34:06.511925Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.496848Z","title":"T.; and Zhang, Y","venue":null,"work_id":"fdfa9f99-0bbe-4599-87d3-d55b4c7d72d0","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.679825Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:e90dd5806a0cfa83d7c00a2eec7d4d0760fa4edf5755b37aa360b7f623815b21","observation_id":"9d7d7a36-f810-4fe5-980b-2daaf6154e63","resolution":{"observed_at":"2026-08-14T04:34:06.500508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.485570Z","title":null,"venue":null,"work_id":"7d63185a-e10a-4065-9d39-98b3c8acd0ea","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.682858Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:288d201f05172a9f2c4c5633de964ac6fc62797c0f5e20f4547fdd0984dcca80","observation_id":"112b9ca7-a605-4853-bcf5-1d512909b5da","resolution":{"observed_at":"2026-08-14T04:34:06.489433Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.474348Z","title":null,"venue":null,"work_id":"e4c02e1b-e697-4f9c-8a9d-4cd2daefaf06","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.686034Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:5c76c084fd14fd5b2223b872b29bce460d3c08fc5b04e00ca1a3498fe6cae34d","observation_id":"e796b481-5d51-4aed-a3f9-1f1b7f71ce12","resolution":{"observed_at":"2026-08-14T04:34:06.478577Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:05.689269Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.689269Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:0bb9bca1bc3ea2170f6a3c2ea6587b6ca6e7afdfa86811937263d5c2ac265b77","observation_id":"68f86154-4358-4f3a-8e8b-d04858100138","resolution":{"observed_at":"2026-08-14T04:34:05.689269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.462854Z","title":null,"venue":null,"work_id":"c7e36dd9-7cc3-4247-9052-cb7f645f54fc","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.693394Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:d3e5dec0a85e188e97d05a65ff88b1bc35690f0db0bc3e55f8cb385a5e508682","observation_id":"e190abb4-6fd9-4997-a922-d006eee36a5d","resolution":{"observed_at":"2026-08-14T04:34:06.466751Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.451556Z","title":"X.; and Wen, J.-R","venue":null,"work_id":"14cc95c9-aecf-410c-a55e-14720955bcc1","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.697138Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:aedb223cdfa018706173ec50d23e7d3a004bfeb7154cb20adf56700fa55ec834","observation_id":"28b5954b-e625-4cc6-9c40-868a55ec5fb0","resolution":{"observed_at":"2026-08-14T04:34:06.455377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.440904Z","title":null,"venue":null,"work_id":"4069c61d-54f0-435e-85e6-f9024335230b","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.700819Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:28df1a9a37c69327fa0460779ea9e34973f05e9f7e1985ae53aab07118b26ffe","observation_id":"2ad1bfe1-0fbc-4a19-a3d4-6b748cc9801c","resolution":{"observed_at":"2026-08-14T04:34:06.444561Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.428172Z","title":null,"venue":null,"work_id":"8cbb1d46-251c-4ffa-8600-b9b90c427c05","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.704739Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:95e0b06cb0839906bd86f898eb7d3f4ef2b9167ee186d4bbdf7c51f3dcf8f1b6","observation_id":"d0a49cd5-28b7-4c1a-8dd3-f827e2aaea84","resolution":{"observed_at":"2026-08-14T04:34:06.432655Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.416185Z","title":null,"venue":null,"work_id":"d7805169-d073-4ddf-bd21-7e29006483c6","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.708405Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:3a6a2ff5e4ee16df3e63d25c7aff41ea908af926fdba02a5a112ebdc847bd723","observation_id":"5406cb80-7385-4281-b593-fe17fda5472a","resolution":{"observed_at":"2026-08-14T04:34:06.420453Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-15T07:47:42.680001Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-14T04:34:05.712159Z","title":"V.; Hayes, J.; Ilie, M.; Pluto, J.; Song, S.; Chaudhari, H.; Shumailov, I.; Thakurta, A.; Xiao, K","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.712159Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:3cfe524a9c7b46c0f58f6c8303c2f01b5d446f6418d53bcadddf97ce6bcb4631","observation_id":"0e09b350-d1a2-40c0-9321-479612c7e50a","resolution":{"observed_at":"2026-08-14T04:34:05.712159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.01703","last_updated":"2025-01-31T16:47:16Z","snapshot_observed_at":"2026-08-12T22:08:43.512027Z","submitted_at":"2024-11-03T22:19:20Z","title":"UniGuard: Towards Universal Safety Guardrails for Jailbreak Attacks on Multimodal Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.01703","snapshot_observed_at":"2026-08-14T04:34:05.716475Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.716475Z"},"links":{"cited_paper":"/paper/2411.01703","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:37bf68c21ce29d8bab76b18efaffd0b0ba7673b92ee035be0aa13adab4a02ed0","observation_id":"c9ebf16d-3d7d-4ca7-a22a-07226d0345bc","resolution":{"observed_at":"2026-08-14T04:34:05.716475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.404985Z","title":null,"venue":null,"work_id":"da9b4a2e-1f46-4c58-a648-cdf76b9bfa39","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.720892Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:74b6e15ced08b65949466f83fc55642bed4eb13883f02cf9793211195e2239d1","observation_id":"834c8dd1-7582-4850-b1b4-983b9371f611","resolution":{"observed_at":"2026-08-14T04:34:06.408746Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-08-13T10:47:14.572503Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-14T04:34:05.725212Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.725212Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:77d350958ae19a54bd7b9c4f35d58e2ad1b089c303d26ad87e355887ddd6f2c0","observation_id":"8b0577c6-866b-41e9-aab1-afc0a4645554","resolution":{"observed_at":"2026-08-14T04:34:05.725212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.392791Z","title":null,"venue":null,"work_id":"b7c95147-9a11-4b11-88de-6b2f3bf52a8a","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.730027Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:44b873336bab52f3b904c3610ae81cfc0791f3722cd8901937cb949359c88cb5","observation_id":"90d75936-fa26-458a-aa62-008ee44ee530","resolution":{"observed_at":"2026-08-14T04:34:06.397119Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.380619Z","title":null,"venue":null,"work_id":"5011e330-3a6b-437b-a1d4-141d8ce3b896","year":2020},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.733831Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:821e57ceaec6289695bb648af6c74b161fd102b11ed810bd7aa07a4e7cd15f62","observation_id":"3ffbfde2-ff9b-4cbc-a8c2-f5f4f020f91a","resolution":{"observed_at":"2026-08-14T04:34:06.384451Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.369050Z","title":null,"venue":null,"work_id":"6ee4a944-d789-45d9-901d-182a64fb5176","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.737831Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:ea0f099a2a97fbacb94d79994c4cd5aecfc34583249b5fb1664f00c96934344e","observation_id":"be23aff3-f7d3-4569-bbc5-f367cb94a1c3","resolution":{"observed_at":"2026-08-14T04:34:06.372680Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.358157Z","title":null,"venue":null,"work_id":"5101711a-91a5-4838-b464-34b3273ff7c2","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.741942Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:786a3cd9d326da9e85598c3707f154b6819cf9a6ea37baaac3111f4b40a3a01b","observation_id":"63b1e6da-8d8c-4dd9-9e76-7e7a8ce48084","resolution":{"observed_at":"2026-08-14T04:34:06.361576Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16446","last_updated":"2025-05-22T09:34:47Z","snapshot_observed_at":"2026-08-13T20:07:08.640609Z","submitted_at":"2025-05-22T09:34:47Z","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16446","snapshot_observed_at":"2026-08-14T04:34:05.746174Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.746174Z"},"links":{"cited_paper":"/paper/2505.16446","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:f3fb8906c5a5c93add065182df05b2fac7e682be4d7125067ccf9e5d597e23fb","observation_id":"9b59172d-a4ef-4023-bb5b-1d6bbac8076a","resolution":{"observed_at":"2026-08-14T04:34:05.746174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.17372","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.013256Z","title":null,"venue":null,"work_id":"0c13ba31-1466-4ec6-ba8b-1928fda063f1","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.750128Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:337aef33001b7851893694f12a4767a5ef936ba16faa16d9420a2af750528af2","observation_id":"ceea122d-b0e2-4f39-bad4-815874465842","resolution":{"observed_at":"2026-08-14T04:34:06.020143Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.346012Z","title":null,"venue":null,"work_id":"a46094c9-9d92-45f5-b10d-7debdf87acf4","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.754195Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:673e2eb1d7c67f8da8acbea1f66889f0c1e03687b5dce9db4a8d5dea316cbc11","observation_id":"7c5cb7c9-ac5b-4f9f-a570-3bdcbb53c0d8","resolution":{"observed_at":"2026-08-14T04:34:06.350111Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06302","last_updated":"2024-07-03T00:51:21Z","snapshot_observed_at":"2026-08-15T04:13:31.869882Z","submitted_at":"2024-06-10T14:18:56Z","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06302","snapshot_observed_at":"2026-08-14T04:34:05.759434Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.759434Z"},"links":{"cited_paper":"/paper/2406.06302","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:c5c80b896dade6d0d8a18705a7de88206d92d294ebb501e754be1ebab5956970","observation_id":"01b6f241-1ae7-4868-9adb-68bad58a3ada","resolution":{"observed_at":"2026-08-14T04:34:05.759434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.26574","last_updated":"2026-08-09T11:04:41Z","snapshot_observed_at":"2026-08-15T23:30:29.523512Z","submitted_at":"2026-07-29T07:53:35Z","title":"Attack Ensembles Expose a Safety-Utility Trade-off in Black-Box Guard Defenses Against Encoded VLM Jailbreaks","version":2},"cited_work":{"arxiv_id":"2607.26574","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.26574","snapshot_observed_at":"2026-08-14T04:34:05.939955Z","title":"Attack Ensembles Expose a Safety-Utility Trade-off in Black-Box Guard Defenses Against Encoded VLM Jailbreaks","venue":"cs.CR","work_id":"6fbad14d-a989-422b-a572-4080aeb44d0a","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.763288Z"},"links":{"cited_paper":"/paper/2607.26574","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:7f1aa031761ab1ec32dc9f0c0a708cd1faaed3469cfcf70ce584abc62774a064","observation_id":"fc758ee4-53a5-4692-991b-616c7246b4af","resolution":{"observed_at":"2026-08-14T04:34:05.945115Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03441","last_updated":"2026-05-05T07:25:33Z","snapshot_observed_at":"2026-08-10T21:29:00.284608Z","submitted_at":"2026-05-05T07:25:33Z","title":"Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03441","snapshot_observed_at":"2026-08-14T04:34:05.766813Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.766813Z"},"links":{"cited_paper":"/paper/2605.03441","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:7ddb1273af4e5ceb510f84dff55b3e6b51a552f281463955833f7554cec789cf","observation_id":"c52a508a-c01e-4915-97ec-43ac3e382613","resolution":{"observed_at":"2026-08-14T04:34:05.766813Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.333123Z","title":null,"venue":null,"work_id":"d444f128-d5d8-4c4f-9713-5d92530a713d","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.770562Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:456864cb4d7c4a75da437fb0b7b5cb18e12cedc7377addbeaf89da1e09a74056","observation_id":"b3ca0353-594f-4e80-aad7-d9fe34ba6d2b","resolution":{"observed_at":"2026-08-14T04:34:06.337775Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2506.09353","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:05.911152Z","title":null,"venue":null,"work_id":"69ed94c9-5a19-4478-bacb-ac34394d8eee","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.774038Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:e8b118b85230351ee631cd053f95f05093ba58d4408a0834093845c6e679a462","observation_id":"7020e03c-2d0c-481d-b4a1-daa23f58ca5a","resolution":{"observed_at":"2026-08-14T04:34:05.917621Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.318143Z","title":null,"venue":null,"work_id":"b5fef55e-677d-4ca4-9d9c-9bfaf6393c22","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.778495Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:820009de9f33a722ed3d6e63337adf9aef111a1de477d093ac7fa5fe1af74aa9","observation_id":"b1b9a787-c100-4644-9582-962c6e82c417","resolution":{"observed_at":"2026-08-14T04:34:06.323577Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.305093Z","title":null,"venue":null,"work_id":"88c7b6a6-db48-4fc9-a5a7-201042035662","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.782374Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:9053b25910a0ddcb77c54ba631029d64a2242795e87ea9a18ad93b904a28d367","observation_id":"7146c729-75f1-4ca5-92e0-3b41ffea95ad","resolution":{"observed_at":"2026-08-14T04:34:06.309383Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.291761Z","title":"S.; and Guo, Q","venue":null,"work_id":"569c85ee-a4e9-4d4a-b9f8-33aa5803e3c6","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.786184Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:10f8757626fdd9e3a1bf5addf14d570ca992c755b37d8a8be299855f8a4d08e5","observation_id":"82ecfd6b-b055-4c76-9fbb-56f046b79fea","resolution":{"observed_at":"2026-08-14T04:34:06.296388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02207","last_updated":"2024-06-17T22:26:32Z","snapshot_observed_at":"2026-08-13T04:27:42.124177Z","submitted_at":"2024-02-03T16:43:42Z","title":"Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02207","snapshot_observed_at":"2026-08-14T04:34:05.790457Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.790457Z"},"links":{"cited_paper":"/paper/2402.02207","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:92de37c4d157470a6e547929ffc5fa55d44a2713e1137162c6118c22e7537a0a","observation_id":"29c3bfb9-7b12-4ec8-9597-dd868610c2fe","resolution":{"observed_at":"2026-08-14T04:34:05.790457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.278767Z","title":null,"venue":null,"work_id":"70323a21-b96e-4cc5-9989-1f21b73359e9","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.794882Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:f6e483b0aefdb09dbdc61525059a2f6aa37b647da9d2c8d31b7602e06e849574","observation_id":"ccf65291-32e2-4399-9d22-a18e180a6a7a","resolution":{"observed_at":"2026-08-14T04:34:06.282864Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T07:01:51.014783Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":5,"verified_fuzzy":5},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2608.08641."}