{"as_of":"2026-08-09T14:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cd41540fb88106d2ef0d7700ffd99c2547198c9533a4abcb64391165bb21ee10","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:26:01.236234Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T01:37:30.924252Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T14:26:01.236234Z","title":"Divide-and-Conquer Attack: Harnessing the Power of LLM to Bypass Safety Filters of Text-to-Image Models, March 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18979","last_updated":"2026-05-23T07:45:54Z","snapshot_observed_at":"2026-08-07T14:20:18.070444Z","submitted_at":"2025-05-25T05:13:06Z","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:26:01.236234Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2505.18979"},"observation_digest":"sha256:766036db73bee9cc7f91a0e0610e5a21a9a8345c48faec8f62a86110c816902c","observation_id":"09b1064f-b7a6-44c5-ba4d-98966ebe83d0","resolution":{"observed_at":"2026-08-07T14:26:01.236234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T13:46:18.229670Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model.arXiv preprint arXiv:2312.07130, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21074","last_updated":"2025-05-27T12:00:19Z","snapshot_observed_at":"2026-08-09T06:08:33.321110Z","submitted_at":"2025-05-27T12:00:19Z","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:46:18.229670Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2505.21074"},"observation_digest":"sha256:78d84a1dc246af67326774975ff20069b26ddac699817fe010b6fb61abc9e44f","observation_id":"e67544bf-ce66-444a-bb28-aef262b2cd78","resolution":{"observed_at":"2026-08-07T13:46:18.229670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T12:25:30.761175Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model.arXiv preprint arXiv:2312.07130, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24539","last_updated":"2026-07-28T16:02:36Z","snapshot_observed_at":"2026-08-07T14:30:36.260777Z","submitted_at":"2025-05-30T12:46:44Z","title":"Localizing Persona Representations in LLMs","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:25:30.761175Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2505.24539"},"observation_digest":"sha256:22caf13e44e600a0ed9e5d2fc5addc7384a2cd3d20d7ba45a5b799598ea138d4","observation_id":"7cbacef2-0873-40c4-b0e7-318c830dd4f3","resolution":{"observed_at":"2026-08-07T12:25:30.761175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T11:02:04.729201Z","title":"Divide-and-Conquer Attack: Harnessing the Power of LLM to Bypass the Censorship of Text-to-Image Generation Model.arXiv2023, arXiv:2312.07130v1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03683","last_updated":"2025-06-04T08:13:53Z","snapshot_observed_at":"2026-08-09T12:43:57.511561Z","submitted_at":"2025-06-04T08:13:53Z","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:02:04.729201Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2506.03683"},"observation_digest":"sha256:1222ef30307bc91d75f3d78c015b40bd94591280e44aab567969051e6a9b2e73","observation_id":"0bd67f19-757b-4812-a191-9dc6fb7a20b7","resolution":{"observed_at":"2026-08-07T11:02:04.729201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-07T04:52:17.658739Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass safety filters of text-to-image models.arXiv preprint arXiv:2312.07130, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.10047","last_updated":"2025-06-11T09:09:12Z","snapshot_observed_at":"2026-08-09T06:09:10.228296Z","submitted_at":"2025-06-11T09:09:12Z","title":"GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T04:52:17.658739Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2506.10047"},"observation_digest":"sha256:9de8ec4f67005166abda0ea24c4c8c49b54bab2d8675bb59bf5da04c4434198e","observation_id":"c043d22d-33ad-42b4-af50-2e85c8abd877","resolution":{"observed_at":"2026-08-07T04:52:17.658739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-05T20:31:42.811235Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass safety filters of text-to-image models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":106,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:42.811235Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:1a637f67f2fb49f20dfa434e8105a65e180398c9c5c9c891229ff43a844231f3","observation_id":"dd7cf4ac-fed9-4686-a71f-b72d7d97adb3","resolution":{"observed_at":"2026-08-05T20:31:42.811235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-03T11:47:40.843593Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.05150","last_updated":"2026-05-29T00:04:54Z","snapshot_observed_at":"2026-08-03T11:47:39.412842Z","submitted_at":"2026-01-08T17:40:50Z","title":"$PC^2$: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T11:47:40.843593Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2601.05150"},"observation_digest":"sha256:f9b1084825eceac463c16ee17d41d9783ca0c78c04dc818173639d74c934e7aa","observation_id":"0d94cf66-b3c6-4cbd-8922-44ae15260d29","resolution":{"observed_at":"2026-08-03T11:47:40.843593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2605.01113","last_updated":"2026-05-01T21:33:06Z","snapshot_observed_at":"2026-08-08T22:01:38.242789Z","submitted_at":"2026-05-01T21:33:06Z","title":"Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-09T19:03:00.734760Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2605.01113"},"observation_digest":"sha256:a5727198a990c9de6fb6c704973491ff343e79d78249f608daa7057f2d5f153a","observation_id":"eed65d44-6bbd-44ab-91e2-30b0763c4dd3","resolution":{"observed_at":"2026-05-11T15:56:27.437056Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2605.01761","last_updated":"2026-05-03T07:49:51Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:49:51Z","title":"TrajShield: Trajectory-Level Safety Mediation for Defending Text-to-Video Models Against Jailbreak Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T19:27:00.278658Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2605.01761"},"observation_digest":"sha256:637ed9cb1ff6b747ace1a8b73a948f9fad4cfc9483a2da1ba371b3f40d522169","observation_id":"bca2c67e-5de6-454f-817d-2b6e390170d5","resolution":{"observed_at":"2026-05-09T05:55:29.254214Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2605.26332","last_updated":"2026-05-25T21:11:59Z","snapshot_observed_at":"2026-08-06T04:03:58.549335Z","submitted_at":"2026-05-25T21:11:59Z","title":"Erased but Exploitable: Black-box Embedding-Aware Prompting Against Unlearned Text-to-Image Diffusion Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T22:14:36.290982Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2605.26332"},"observation_digest":"sha256:b40eb152994a5b9445e67b1ffc08f8399fddd1bea0e0b31ec74aeb6dcea9d18a","observation_id":"ad79dc95-b43c-4002-9c83-bfc3ebc1b66e","resolution":{"observed_at":"2026-06-29T22:34:02.812686Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2606.01481","last_updated":"2026-05-31T22:46:35Z","snapshot_observed_at":"2026-08-06T16:16:18.407347Z","submitted_at":"2026-05-31T22:46:35Z","title":"SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T17:05:57.685728Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2606.01481"},"observation_digest":"sha256:c4b9087945cca089e4a8aef40abfa1e15d6316aaf84a81c80b34fe9f2754444b","observation_id":"a9013330-d9f2-4af4-a357-6cb40bc19edf","resolution":{"observed_at":"2026-06-28T17:12:25.188871Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2606.01837","last_updated":"2026-06-01T07:49:12Z","snapshot_observed_at":"2026-08-09T06:01:25.866428Z","submitted_at":"2026-06-01T07:49:12Z","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T14:17:52.902183Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2606.01837"},"observation_digest":"sha256:e9b7472226b2be73faf392d06e29ef1344c14db05398ce9278e6f7488111f702","observation_id":"90de7b73-3379-47dd-adb4-6ee12d030ada","resolution":{"observed_at":"2026-07-01T23:26:23.278766Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":"2312.07130","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-03T01:37:30.924252Z","title":"Divide-and-conquer attack: Harnessing the power of llm to bypass the censorship of text-to-image generation model","venue":null,"work_id":"695774d1-b817-4f8f-bb61-8d266009384e","year":2023},"citing_paper":{"arxiv_id":"2606.09151","last_updated":"2026-06-08T07:45:17Z","snapshot_observed_at":"2026-07-06T23:48:35.190418Z","submitted_at":"2026-06-08T07:45:17Z","title":"Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-27T16:25:37.031986Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2606.09151"},"observation_digest":"sha256:8b08edd5b787fc7ce7783f81c8023375771854acc06adf488dad49b5d3da2a91","observation_id":"dc56d335-f8d4-4124-a253-9018c9e9eef6","resolution":{"observed_at":"2026-07-03T01:37:30.925780Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-01T18:33:03.605809Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17279","last_updated":"2026-07-19T14:52:31Z","snapshot_observed_at":"2026-08-07T10:51:42.469511Z","submitted_at":"2026-07-19T14:52:31Z","title":"Between Safe Boundaries: Exploiting Temporal Consistency for Jailbreaking Text-To-Video Generation Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T18:33:03.605809Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.17279"},"observation_digest":"sha256:12cc79ac16c15b3668db134c372edc21d1d3e4064cc1ed8c8814bb86d74f9e4d","observation_id":"b025757d-228c-4f1b-ade2-c0fd4303e0fb","resolution":{"observed_at":"2026-08-01T18:33:03.605809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-01T17:07:54.195408Z","title":"arXiv preprint arXiv:2312.07130 , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17779","last_updated":"2026-07-20T10:09:30Z","snapshot_observed_at":"2026-08-06T08:52:24.582710Z","submitted_at":"2026-07-20T10:09:30Z","title":"Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-01T17:07:54.195408Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.17779"},"observation_digest":"sha256:32ab4db25a7d4b52a5adde4aa082d98a48e3176c363c121e867cca40b184e42d","observation_id":"2e97e4cf-5b05-412d-958c-e64cc40a4987","resolution":{"observed_at":"2026-08-01T17:07:54.195408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-31T09:23:52.445668Z","title":"arXiv preprint arXiv:2312.07130 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.445668Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3262e1e92cabbfbdcfd004d33609b19473e8c0107ce292c726875809b7c06992","observation_id":"8ad9c1c4-8664-475a-ac66-fda8934a1792","resolution":{"observed_at":"2026-07-31T09:23:52.445668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-08-06T00:43:01.557307Z","title":"arXiv preprint arXiv:2312.07130 , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.00973","last_updated":"2026-08-02T03:53:30Z","snapshot_observed_at":"2026-08-08T23:16:04.618277Z","submitted_at":"2026-08-02T03:53:30Z","title":"Mind the Gap: Zero-Query Jailbreaks via Filter-Generator Discrepancy in Text-to-Image Systems","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-06T00:43:01.557307Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2608.00973"},"observation_digest":"sha256:0c6ef620c8c57e54d0deb5a5d3985fcb0c4e79b1cee0703b7d4cd203a42c23ab","observation_id":"4e80bfb8-179d-471a-ab7e-bd77cf2396ce","resolution":{"observed_at":"2026-08-06T00:43:01.557307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2312.07130/citation-record","integrity":"/paper/2312.07130/integrity","json":"/paper/2312.07130/citation-record.json","paper":"/paper/2312.07130"},"outbound":[],"paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","latest_version":4,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2312.07130."}