{"as_of":"2026-08-12T21:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b8a102c907bd85ad30483a9ab8f677aa43e30a336ffff6ad66d512dc283bde5b","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T13:30:42.658810Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.10959/citation-record","integrity":"/paper/2608.10959/integrity","json":"/paper/2608.10959/citation-record.json","paper":"/paper/2608.10959"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.419777Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.419777Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:7b9796dcb0166ad349fe41c9941911e2f927915fd7e9ad08f34517cf854af3ff","observation_id":"554b489c-ae18-48d1-85e7-d5e0b011d2e7","resolution":{"observed_at":"2026-08-12T13:30:42.419777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.426967Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.426967Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:698cc66880a0227db69a5b4e9ccb695dbf582ad4841cf448eb9c1c92b3c9f4d4","observation_id":"7053a043-4d10-4572-a344-63d7a0e92ce1","resolution":{"observed_at":"2026-08-12T13:30:42.426967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.497055Z","title":"2023 , howpublished =","venue":null,"work_id":"0741db10-4977-4122-9d3d-7017121f012e","year":2023},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.431472Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:8794b1dc143079f5aee58334eacb49d9b7cca4f3f40561ea26b6dc8f5c1799f0","observation_id":"93ccb3ba-2175-410f-8890-6e75889f0062","resolution":{"observed_at":"2026-08-12T13:30:43.501235Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.435807Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.435807Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:3a5a3ce7c090bd386064e9680d3b886557d5ca182c65e76040fa5d19dfa40a8b","observation_id":"3f44c86d-d7b5-457a-af16-f7f7a3e76db3","resolution":{"observed_at":"2026-08-12T13:30:42.435807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.440247Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.440247Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:68728669048b167455ae06923ec40ecc5697e3f63d112cb7d0dd6e96248056b7","observation_id":"fc52403d-8bb5-4d5d-b476-adad42db2ec1","resolution":{"observed_at":"2026-08-12T13:30:42.440247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-12T13:30:42.445128Z","title":"arXiv preprint arXiv:2304.10592 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.445128Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:887af1ba221dedd7404d2c3bbfd1f9d91dd03ff3988f84e8233c608b0eedbb17","observation_id":"b1f69bb6-59a5-4782-96b9-5c2848e5d3d1","resolution":{"observed_at":"2026-08-12T13:30:42.445128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.449431Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.449431Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:ab2c6ec69ab90050c78d20107c0eb0b68974e2a781a5202e735a6018e2817c2b","observation_id":"6cf7906e-8736-4956-b579-4757c6d84432","resolution":{"observed_at":"2026-08-12T13:30:42.449431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T13:30:42.453459Z","title":"arXiv preprint arXiv:1708.06733 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.453459Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:d47c02252f3b97de12a9b0b7428c204173f450cb998822d13cc2066110b01f4d","observation_id":"bc8fdbfb-c157-4ec9-9443-e0f8e0485df9","resolution":{"observed_at":"2026-08-12T13:30:42.453459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.454773Z","title":"25th Annual Network And Distributed System Security Symposium (NDSS 2018) , year=","venue":null,"work_id":"23d191df-38d4-424d-af9c-52de087036d4","year":2018},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.458663Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:6ca575b3d147d7198cb86e55ef792c03b105644e58c1ab24956074d9b8d196d4","observation_id":"ebd253f1-f093-4cd3-b34a-89b5ff6bd20d","resolution":{"observed_at":"2026-08-12T13:30:43.459230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-10T18:11:31.253134Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-12T13:30:42.462917Z","title":"arXiv preprint arXiv:1912.02771 , year=","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.462917Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:bbfd737f7d30f8a520b659ab6b2bee9c37c51c8f5b7c2d173cdd8da9af5cc425","observation_id":"02b10a5c-b324-490f-ae48-037285668399","resolution":{"observed_at":"2026-08-12T13:30:42.462917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.440151Z","title":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security , pages=","venue":null,"work_id":"3e93570c-e869-4d11-8d1f-e6fb725b1b3c","year":2023},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.467973Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:f86c3dceb92481e66caf0c9b9b0ca0f865a50fe01649b35a18e5b823499031c4","observation_id":"547672c3-03f6-4a58-8c7a-73347b5454a5","resolution":{"observed_at":"2026-08-12T13:30:43.444838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.425718Z","title":"Proceedings of the 37th Annual Computer Security Applications Conference , pages=","venue":null,"work_id":"5006a091-42bc-4129-a54e-d060d5c0f09c","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.471940Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:2a1fc47855cb11aba6823ff9e1eee2b5bded01ece9a7b6523e544c95f751e9f7","observation_id":"d7ae921c-8b1e-4196-a084-b17168b37075","resolution":{"observed_at":"2026-08-12T13:30:43.430384Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.12400","last_updated":"2021-06-03T08:27:11Z","snapshot_observed_at":"2026-08-12T20:17:32.530556Z","submitted_at":"2021-05-26T08:54:19Z","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.12400","snapshot_observed_at":"2026-08-12T13:30:42.476776Z","title":"arXiv preprint arXiv:2105.12400 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.476776Z"},"links":{"cited_paper":"/paper/2105.12400","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:dc1370a1eb1be63a39e1c98fc12f2fc96499d9209f42f8e9a2dad98e3daacea4","observation_id":"299ca60b-e8a7-4607-a504-2ba657fcb376","resolution":{"observed_at":"2026-08-12T13:30:42.476776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.06361","last_updated":"2021-06-11T13:03:17Z","snapshot_observed_at":"2026-08-11T19:59:40.676807Z","submitted_at":"2021-06-11T13:03:17Z","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.06361","snapshot_observed_at":"2026-08-12T13:30:42.482375Z","title":"arXiv preprint arXiv:2106.06361 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.482375Z"},"links":{"cited_paper":"/paper/2106.06361","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:1d83731356518e9fa0651ce761c94760f29214c914f4b5a338dde04c29d25910","observation_id":"704da8ed-8af0-444b-a794-7b4473450774","resolution":{"observed_at":"2026-08-12T13:30:42.482375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.410809Z","title":"IEEE Access , volume=","venue":null,"work_id":"772a4a4c-8748-46d7-93a0-e5fac9d672e8","year":2019},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.487222Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:06cc57f1e39c126740c46aa8321811d94f9c1cbf3b86cdf813dadd67a2f9ac2e","observation_id":"68ded116-27da-43c4-a963-c1dc25b342f7","resolution":{"observed_at":"2026-08-12T13:30:43.415539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.394995Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=","venue":null,"work_id":"7324541d-19e8-4db7-8b20-e4dccd299cdb","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.491978Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:3172fdf057b6664defae8a3d0a6e63ccefede4f9d26089479dcea30c7dc322d6","observation_id":"324afe12-d240-4812-bb28-f04be4509168","resolution":{"observed_at":"2026-08-12T13:30:43.399843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.496855Z","title":"European Conference on Computer Vision , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.496855Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:be07139403660e83ec3019b6715bfbce7a437ebd0a4baa4d166eb65ccae7c4aa","observation_id":"79985251-2d9f-40e7-9103-fac6e8894327","resolution":{"observed_at":"2026-08-12T13:30:42.496855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.502051Z","title":"International Journal of Computer Vision , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.502051Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:79cf8c39a7bf1f72d38d0b3ff5392184e101f23a594b94db28327f03dc913df7","observation_id":"c205018d-df97-49fb-9706-a1443441a4d1","resolution":{"observed_at":"2026-08-12T13:30:42.502051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.506548Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.506548Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:07cc800b9b90458b72bc81cd7752bf3c941866cee52422d2422d9aa281bff796","observation_id":"902ccc4e-1efb-4677-894f-7397c227a1b2","resolution":{"observed_at":"2026-08-12T13:30:42.506548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.510991Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.510991Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:ca9bce58b541a820678e71a2fb882f805eb7d9d540a53181742ebdcc8516b188","observation_id":"1241b8b2-94f3-423f-a3d2-4ff4941cc377","resolution":{"observed_at":"2026-08-12T13:30:42.510991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01264","last_updated":"2025-02-28T00:47:54Z","snapshot_observed_at":"2026-08-09T18:21:02.301353Z","submitted_at":"2024-10-02T06:21:00Z","title":"Backdooring Vision-Language Models with Out-Of-Distribution Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01264","snapshot_observed_at":"2026-08-12T13:30:42.515830Z","title":"arXiv preprint arXiv:2410.01264 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.515830Z"},"links":{"cited_paper":"/paper/2410.01264","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:70826d6382b75b7a87cc67f7ed0063639d7f41260ccf8d0d4bbe2a6249573cef","observation_id":"81b8753d-9c0c-484e-8178-306721bf63b6","resolution":{"observed_at":"2026-08-12T13:30:42.515830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.341764Z","title":"Journal of Artificial Intelligence Research , volume=","venue":null,"work_id":"7e1e8047-feae-4695-a887-0e36fecb26ef","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.521814Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:99fbe6c25538f4db0876784eeaeedd053169be3c4587b61fa333b0ff2b363287","observation_id":"ebd51b3a-0c85-4a21-b1ea-0a5faaac5430","resolution":{"observed_at":"2026-08-12T13:30:43.346696Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.526888Z","title":"Transactions of the association for computational linguistics , volume=","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.526888Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:1bd683d43d8db3c769cc4751fddd6770e18c0af1dad569d2bde79165d263919a","observation_id":"d59a2ae8-b1f9-4617-8092-26b2b2fed029","resolution":{"observed_at":"2026-08-12T13:30:42.526888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.531559Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.531559Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:5146558a73d065f12e260607aba363d33ae93d6b6f0a79e023be016062fe46c9","observation_id":"98e6d868-670e-4960-b59e-a7a83ae6cec0","resolution":{"observed_at":"2026-08-12T13:30:42.531559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.536102Z","title":", author=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.536102Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:1832e95acabc793618fd0d67465d6d4f4463fc912e73a8099707092136a717c9","observation_id":"78a86828-5dd7-416a-b402-baa89382d55f","resolution":{"observed_at":"2026-08-12T13:30:42.536102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.540453Z","title":"2009 , publisher=","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.540453Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:058fc3ce3862888b8a0365ef00bd442dd9de62689f433dac7beb52936571a964","observation_id":"c25d8b2f-9eab-42dc-b129-42278dc8a776","resolution":{"observed_at":"2026-08-12T13:30:42.540453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.287049Z","title":null,"venue":null,"work_id":"747090fd-e656-4e0e-a235-eb7ef873d636","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.544788Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:aef1b585ef6fa70e3d892f3f1bad09ca762724ad5c9b1dca37febb990d823737","observation_id":"512507b4-d3a8-41cb-a011-1264b8dff2ae","resolution":{"observed_at":"2026-08-12T13:30:43.292078Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.549149Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.549149Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:88abd9e9d50995bb992ce48298337ab9a7255952dfbdd93dddbef80404c9951a","observation_id":"36f7eeb9-abe4-42d2-9122-89bb9cffe0cd","resolution":{"observed_at":"2026-08-12T13:30:42.549149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.262678Z","title":"The Thirty-ninth Annual Conference on Neural Information Processing Systems Datasets and Benchmarks Track , year=","venue":null,"work_id":"958d2f3e-c02a-439a-a0c6-c97f75d3847b","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.553380Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:cb0d5fc85e408c7fcb9b2d14036014d305f2ffdf1a1087e6ab044820c195a61f","observation_id":"463ba706-175e-4c91-9a09-c511f1e605f1","resolution":{"observed_at":"2026-08-12T13:30:43.267802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.557709Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.557709Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:e75383d46429a2d6609d8e2f7652608809f2c439409d76418035f5442e86ba0a","observation_id":"83f7dc83-1901-4638-854e-25ae0896bdb4","resolution":{"observed_at":"2026-08-12T13:30:42.557709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-12T13:30:42.561713Z","title":"arXiv preprint arXiv:2312.11805 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.561713Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:e049e4a97c37d4725d53dd14e9359dcb8e23ab116c1c930ce99b62cdc783a585","observation_id":"a250caf7-7c80-44a7-844a-7ab9ec092171","resolution":{"observed_at":"2026-08-12T13:30:42.561713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.565747Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.565747Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:844838e9a3a9103327f8b23e25466fdb818c1177e28f9ac9889300b3927537d8","observation_id":"7e9e77fe-bf52-498b-ad65-b32a38b9e97e","resolution":{"observed_at":"2026-08-12T13:30:42.565747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.569696Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.569696Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:19b55805edad93ba37c9579291c398339be08fa57ac9d518f63095c0f3fd249c","observation_id":"2033c4d0-c1ed-4af3-853c-2453340bef37","resolution":{"observed_at":"2026-08-12T13:30:42.569696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.573773Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.573773Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:c77b57c38436cfb9b6e8e2b34af3c63d0862abcce020bd4837ff2e5ff2d5b75e","observation_id":"6534bc38-0b9b-4845-80a6-7ce3041ab167","resolution":{"observed_at":"2026-08-12T13:30:42.573773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01952","last_updated":"2023-07-04T23:04:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-04T23:04:57Z","title":"SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01952","snapshot_observed_at":"2026-08-12T13:30:42.577994Z","title":"arXiv preprint arXiv:2307.01952 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.577994Z"},"links":{"cited_paper":"/paper/2307.01952","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:2d948b72353277eeeb62ddb130cef0104f36db0a41040e799ab028e3ce06bc53","observation_id":"af7e367b-604b-48ff-a033-7ce83adf71cf","resolution":{"observed_at":"2026-08-12T13:30:42.577994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09667","last_updated":"2022-03-28T17:24:23Z","snapshot_observed_at":"2026-08-09T17:46:25.469878Z","submitted_at":"2021-06-17T17:20:45Z","title":"Poisoning and Backdooring Contrastive Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09667","snapshot_observed_at":"2026-08-12T13:30:42.582232Z","title":"arXiv preprint arXiv:2106.09667 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.582232Z"},"links":{"cited_paper":"/paper/2106.09667","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:03cd0b1b7954895207c37319b591cdde2c29a11bf241c6e22424ea6d84998251","observation_id":"80e2d0b9-4618-42fe-a54d-b8bc2845d1d9","resolution":{"observed_at":"2026-08-12T13:30:42.582232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.197892Z","title":"2022 IEEE Symposium on Security and Privacy (SP) , pages=","venue":null,"work_id":"06818fce-fbee-4b78-b813-31cc5d56a683","year":2022},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.586439Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:83a83e46b7e7bb77f3475bf4a928fe9cad839a07c485339eded696a0f2d686e4","observation_id":"002c11d4-3c19-4d24-a9e3-0a75b735830a","resolution":{"observed_at":"2026-08-12T13:30:43.209879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.590589Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.590589Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:d3ad26043ca35d259240a7858830133e3223d22c2ff7fca7a973703bc2b282fc","observation_id":"1cae4c8f-a49d-401e-b044-4624c8a3e5a5","resolution":{"observed_at":"2026-08-12T13:30:42.590589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.594791Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.594791Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:0a5c2c503fb3a22f2020fdf54e6b1012a025c7eda3d18485f49744ce97226d28","observation_id":"c54ac235-9d27-4c08-916c-682a518f073f","resolution":{"observed_at":"2026-08-12T13:30:42.594791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.09478","last_updated":"2023-11-07T18:25:48Z","snapshot_observed_at":"2026-08-06T12:38:03.720232Z","submitted_at":"2023-10-14T03:22:07Z","title":"MiniGPT-v2: large language model as a unified interface for vision-language multi-task learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.09478","snapshot_observed_at":"2026-08-12T13:30:42.599072Z","title":"arXiv preprint arXiv:2310.09478 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.599072Z"},"links":{"cited_paper":"/paper/2310.09478","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:7c00b618d66b9c5c9eb8932e03be86d7a856a4fedc59e4025fa767f70bbbd8f0","observation_id":"1ae54888-a3e2-4244-b78c-34fce7eeb8b1","resolution":{"observed_at":"2026-08-12T13:30:42.599072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-12T13:30:42.604091Z","title":"arXiv preprint arXiv:2104.02361 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.604091Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:6b4fd4b102f88ebe1e3272a9ea44665cb8e35a02dee56130c2178d5200cc2fb7","observation_id":"58705ef3-142e-4935-b6b2-c7f85d873995","resolution":{"observed_at":"2026-08-12T13:30:42.604091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03251","last_updated":"2023-02-19T01:32:21Z","snapshot_observed_at":"2026-07-06T14:49:07.867567Z","submitted_at":"2023-02-07T04:33:41Z","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03251","snapshot_observed_at":"2026-08-12T13:30:42.608796Z","title":"arXiv preprint arXiv:2302.03251 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.608796Z"},"links":{"cited_paper":"/paper/2302.03251","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:a486c0ee5c9112b75c9a1689d9ec0cad3b0eeadc5fc186b64a3f6e3c78eb5962","observation_id":"10a21a32-9730-48f5-8ec9-53a559f4158f","resolution":{"observed_at":"2026-08-12T13:30:42.608796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.613262Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.613262Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:9ae6c6c31ec167f2e2057a1ffab8b5a9b66476f72092fdbce6642368edd66ad1","observation_id":"1a1824c3-b26b-4f81-83fb-d10806479713","resolution":{"observed_at":"2026-08-12T13:30:42.613262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:42.617365Z","title":"2019 IEEE symposium on security and privacy (SP) , pages=","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.617365Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:0441d5cdf59ffda83c9c2a0be02e1f7325dc9deab282a9b8c8b312b1164a2e9f","observation_id":"3a4ae954-0546-4b76-9535-18e5c0ea8f5d","resolution":{"observed_at":"2026-08-12T13:30:42.617365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-07-06T05:17:56.287788Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-12T13:30:42.621423Z","title":"arXiv preprint arXiv:1611.02770 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.621423Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:a30b9670a28dc8d5e0b59f284132eed9eabb93402d51b394d39edc7da1150184","observation_id":"fa63ad01-de3f-4799-ab25-c772f0e31795","resolution":{"observed_at":"2026-08-12T13:30:42.621423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.131925Z","title":"IEEE Transactions on Dependable and Secure Computing , volume =","venue":null,"work_id":"f0a1c60a-0fc4-49dd-b541-2c9381749201","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.625717Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:04412b7e9973be6c882f1d86b9a5625d3ae6fa3b5c52f478abad8647ba0907be","observation_id":"e3bf092b-c11d-4d3b-aeaa-42061dfc1a54","resolution":{"observed_at":"2026-08-12T13:30:43.137002Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.117217Z","title":"IEEE Transactions on Circuits and Systems for Video Technology , volume =","venue":null,"work_id":"5e0355a2-ab1a-490a-a90b-65040df4e418","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.630137Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:a12697c2cb2e1148201e63b130eb2c95c9775ca897702271cccb9fdaab541b1e","observation_id":"656ce5a5-1b65-4e54-b075-b5f018e8ec94","resolution":{"observed_at":"2026-08-12T13:30:43.121488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.098873Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":"ecf8a2f6-d0a6-42d8-bc94-b2518ebbd4c4","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.634632Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:e58a5dfb38002f2cc82250fa7dc9d1e292642bd76c9ed88bdfed7ab55f2de459","observation_id":"4b0f6086-4027-4bb6-a367-81c61c9e7676","resolution":{"observed_at":"2026-08-12T13:30:43.104968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.081928Z","title":"Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence , pages =","venue":null,"work_id":"729e1e72-5573-4a55-ba0b-bc7c6e38154e","year":2024},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.639839Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:f65afaf444a95cd57140240740108ee9aef502c23d616a6f34908710da1b4709","observation_id":"143b5013-5fb5-40ed-a9a9-e8842b41da41","resolution":{"observed_at":"2026-08-12T13:30:43.087518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.065632Z","title":null,"venue":null,"work_id":"c07eb7eb-ffcf-4d24-ae0d-83b9fc7583af","year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.645245Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:7df16692c8f1d38f590699da140413f8a26e61ec5c9ade537c9f95ef67bffba1","observation_id":"c6769c9a-d007-45da-ad20-3f0c1496799d","resolution":{"observed_at":"2026-08-12T13:30:43.071039Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.051030Z","title":"2026 , doi =","venue":null,"work_id":"c6c5c290-13c4-484c-a615-42d0c6c008ba","year":2026},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.649835Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:e8a16863f133ad7dc1555154898eb10a29723a3fff064d1ebc674d89e3f8cf6d","observation_id":"211c2623-5397-4784-981d-a97ebee664b7","resolution":{"observed_at":"2026-08-12T13:30:43.055153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.036725Z","title":"2026 , eprint=","venue":null,"work_id":"798cf245-45f8-4a05-91b1-f5a62f75b626","year":2026},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.654547Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:94082738bf25b4dc2c8ae5916710c4eaf6abad5be62d20d48fe1b5e8d8dced7d","observation_id":"1db61a1f-e410-4690-908c-2cd728225e65","resolution":{"observed_at":"2026-08-12T13:30:43.041015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:30:43.021586Z","title":"2021 , eprint=","venue":null,"work_id":"2fcbb961-3d11-4a58-bf70-8b4dd5f711ab","year":2021},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.658810Z"},"links":{"citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:30320cd56786b155cecb4edfeb8ac76e5bbdba44fd82a532c5019d0169d3f532","observation_id":"5b6ee6f1-1ab9-43dd-b21a-973691b110ed","resolution":{"observed_at":"2026-08-12T13:30:43.026584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T20:24:45.434218Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":37,"verified_exact":0,"verified_fuzzy":16},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 0 inbound Pith citation observations for arXiv:2608.10959."}