{"as_of":"2026-08-10T08:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8d714d8119d91b930f5f5c281cc0a3aeb431d2469b5c527dc9be519325f3d59a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T15:38:17.370563Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-09T12:56:14.842852Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-08-08T15:38:17.370563Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06390","last_updated":"2025-02-11T04:42:24Z","snapshot_observed_at":"2026-08-09T09:14:59.400822Z","submitted_at":"2025-02-10T12:20:08Z","title":"When Data Manipulation Meets Attack Goals: An In-depth Survey of Attacks for VLMs","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-08T15:38:17.370563Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2502.06390"},"observation_digest":"sha256:e25b3696e418e903222bf275dc4bec849123d4df2f8efd8721cba179edcaa208","observation_id":"e43542ff-2dbe-4099-94ca-8c6b8de0e925","resolution":{"observed_at":"2026-08-08T15:38:17.370563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-08-07T19:45:19.312482Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-07T19:45:19.312482Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2502.14881"},"observation_digest":"sha256:c277542b5a0cb9261616368473cb5ff500907202c18f123510bfc3c0e28a739d","observation_id":"b45362ca-7991-4124-bcab-7b76a3acb5e4","resolution":{"observed_at":"2026-08-07T19:45:19.312482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-08-06T18:40:54.618030Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07709","last_updated":"2025-07-10T12:40:34Z","snapshot_observed_at":"2026-08-09T23:36:10.854532Z","submitted_at":"2025-07-10T12:40:34Z","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T18:40:54.618030Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2507.07709"},"observation_digest":"sha256:f0883f9c1bc3abec94d10a8137a5fd517f6c67251fb279295142d08c6c1fe0ea","observation_id":"37e12be3-0ec8-48d6-967f-f8e319d40979","resolution":{"observed_at":"2026-08-06T18:40:54.618030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-08-05T16:00:48.734340Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-08T05:25:02.825611Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:48.734340Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:cff579824c89279f72ef568ee0bd7ed8b49d61c947377dac7bc639d6403a1c9f","observation_id":"c99af47d-ff18-4cfe-93cf-7592dcb47e9c","resolution":{"observed_at":"2026-08-05T16:00:48.734340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":"2403.09766","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-07-09T12:56:14.842852Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models","venue":"cs.CV","work_id":"8cd3c295-112c-42bc-bfa9-bb85d2e9609f","year":2024},"citing_paper":{"arxiv_id":"2604.24082","last_updated":"2026-04-27T06:12:43Z","snapshot_observed_at":"2026-07-06T23:10:12.016186Z","submitted_at":"2026-04-27T06:12:43Z","title":"Jailbreaking Frontier Foundation Models Through Intention Deception","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T03:17:51.039062Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2604.24082"},"observation_digest":"sha256:c473fc6233188dd92d59b58c0e55a111ede7f3d2a63304eabaa69c18b1867e17","observation_id":"1d016811-84fe-4a79-ab44-e7ac00b487d1","resolution":{"observed_at":"2026-05-11T22:11:13.983178Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":"2403.09766","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-07-09T12:56:14.842852Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models","venue":"cs.CV","work_id":"8cd3c295-112c-42bc-bfa9-bb85d2e9609f","year":2024},"citing_paper":{"arxiv_id":"2605.16090","last_updated":"2026-05-15T15:47:41Z","snapshot_observed_at":"2026-08-08T23:04:25.950675Z","submitted_at":"2026-05-15T15:47:41Z","title":"A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-20T17:20:54.445007Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2605.16090"},"observation_digest":"sha256:064fc68009874f1de118f3e0b87cb38e17748ff5b6a64e3c151a780e077db145","observation_id":"2c1449a6-031b-4863-a898-cb8ebfe694a2","resolution":{"observed_at":"2026-05-20T17:23:36.813954Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":"2403.09766","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-07-09T12:56:14.842852Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models","venue":"cs.CV","work_id":"8cd3c295-112c-42bc-bfa9-bb85d2e9609f","year":2024},"citing_paper":{"arxiv_id":"2605.28609","last_updated":"2026-05-27T15:24:31Z","snapshot_observed_at":"2026-08-03T19:09:23.628613Z","submitted_at":"2026-05-27T15:24:31Z","title":"JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-29T13:18:46.414179Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2605.28609"},"observation_digest":"sha256:e792808b850b913a719707160b48fccbb9e1b65f33dc3712f39a29ee1dd7d0b1","observation_id":"88153bfa-467f-4f3f-a148-4ec3afaa9904","resolution":{"observed_at":"2026-06-29T13:23:28.093125Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":"2403.09766","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-07-09T12:56:14.842852Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models","venue":"cs.CV","work_id":"8cd3c295-112c-42bc-bfa9-bb85d2e9609f","year":2024},"citing_paper":{"arxiv_id":"2606.10571","last_updated":"2026-06-09T08:34:01Z","snapshot_observed_at":"2026-08-02T23:16:13.992416Z","submitted_at":"2026-06-09T08:34:01Z","title":"Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T13:46:06.519188Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2606.10571"},"observation_digest":"sha256:e4ce198e1caff34ec44af58348a9af35a4362f13b0732d29fc9d7a8131e541b3","observation_id":"7285edf7-345d-4d10-b77b-38357ef2d75c","resolution":{"observed_at":"2026-07-03T04:37:37.258447Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","version":1},"cited_work":{"arxiv_id":"2403.09766","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.09766","snapshot_observed_at":"2026-07-09T12:56:14.842852Z","title":"An image is worth 1000 lies: Adversarial transferability across prompts on vision-language models","venue":"cs.CV","work_id":"8cd3c295-112c-42bc-bfa9-bb85d2e9609f","year":2024},"citing_paper":{"arxiv_id":"2607.07375","last_updated":"2026-07-08T13:06:20Z","snapshot_observed_at":"2026-08-03T20:22:35.302558Z","submitted_at":"2026-07-08T13:06:20Z","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-09T12:55:34.631248Z"},"links":{"cited_paper":"/paper/2403.09766","citing_paper":"/paper/2607.07375"},"observation_digest":"sha256:81570f1499ae55b71db279bcba2ee517d59de2b66874f7506d65722a9fc2e981","observation_id":"6460664e-a09a-4c5a-a2e2-c88e571c3d3e","resolution":{"observed_at":"2026-07-09T12:56:14.845099Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2403.09766/citation-record","integrity":"/paper/2403.09766/integrity","json":"/paper/2403.09766/citation-record.json","paper":"/paper/2403.09766"},"outbound":[],"paper":{"arxiv_id":"2403.09766","last_updated":"2024-03-14T17:59:35Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-06T02:47:52.285574Z","submitted_at":"2024-03-14T17:59:35Z","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2403.09766."}