{"as_of":"2026-08-09T02:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f512620f3656f7edd7c7cf1531629bd859ed954086840153519c92cb12538349","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T21:24:15.156337Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T23:26:23.265870Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-08-07T19:45:19.500437Z","title":"Heuristic-induced multimodal risk dis- tribution jailbreak attack for multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"reference_index":109,"source":"pdf_text","source_observed_at":"2026-08-07T19:45:19.500437Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2502.14881"},"observation_digest":"sha256:5986bb3aec5180c55ff1eedb9bf0461e97b444eb9b318f374e7a217b639376a7","observation_id":"a38f63e1-41c0-4de6-aab4-109842e97a38","resolution":{"observed_at":"2026-08-07T19:45:19.500437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":"2412.05934","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-07-01T23:26:23.265870Z","title":"arXiv preprint arXiv:2412.05934","venue":null,"work_id":"583229f8-890f-4cc0-916c-e75b4bea5c96","year":2024},"citing_paper":{"arxiv_id":"2505.11548","last_updated":"2026-04-09T01:58:59Z","snapshot_observed_at":"2026-07-06T21:25:13.481613Z","submitted_at":"2025-05-15T08:14:58Z","title":"One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T15:19:08.867224Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2505.11548"},"observation_digest":"sha256:f39e88ee13a615f2bc75c825997cb712dd40c64cdf9626676df621fb8ec6c7b1","observation_id":"c09f4343-99a4-42aa-8de5-770cbd3aad6d","resolution":{"observed_at":"2026-05-22T15:21:44.802650Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-08-07T15:03:38.346761Z","title":"Heuristic-induced multimodal risk distribution jailbreak attack for multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16446","last_updated":"2025-05-22T09:34:47Z","snapshot_observed_at":"2026-08-08T01:24:44.977675Z","submitted_at":"2025-05-22T09:34:47Z","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:03:38.346761Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2505.16446"},"observation_digest":"sha256:ad52b1f06142f0d10e227215f6e64a5937ffea3e66b10bd905d6e1a3596ff663","observation_id":"e3fd9f9a-7aec-4952-b92a-dbd4d4d3d37a","resolution":{"observed_at":"2026-08-07T15:03:38.346761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":"2412.05934","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-07-01T23:26:23.265870Z","title":"arXiv preprint arXiv:2412.05934","venue":null,"work_id":"583229f8-890f-4cc0-916c-e75b4bea5c96","year":2024},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:12cba5823f9724721ec078ab045c8871eeb8811fa9d174441a0be31e648c5852","observation_id":"f06a40f1-bc66-43f8-9c4f-23aaf2b920d8","resolution":{"observed_at":"2026-05-19T03:37:01.132128Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-08-05T20:29:06.769579Z","title":"Teng et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10955","last_updated":"2025-08-14T07:25:45Z","snapshot_observed_at":"2026-08-07T18:23:08.889281Z","submitted_at":"2025-08-14T07:25:45Z","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","version":1},"reference_index":234,"source":"arxiv_source","source_observed_at":"2026-08-05T20:29:06.769579Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2508.10955"},"observation_digest":"sha256:de65e81cd8a313dffc3fa0f06addc2e73589356cb5319c9de14097f9171d7680","observation_id":"95cc8f68-11a4-4063-8a7c-b7fa3b497971","resolution":{"observed_at":"2026-08-05T20:29:06.769579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-08-05T16:00:49.480414Z","title":"Heuristic-induced multimodal risk distribution jailbreak attack for multimodal large language models, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-08T05:25:02.825611Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:49.480414Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:9a7a784acdf37ae7fe4d3d9a88acf23e2aec2dc267112fb9e9facbeffb5e87a9","observation_id":"652c250d-2eba-43ba-9de3-631710da5eb0","resolution":{"observed_at":"2026-08-05T16:00:49.480414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":"2412.05934","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-07-01T23:26:23.265870Z","title":"arXiv preprint arXiv:2412.05934","venue":null,"work_id":"583229f8-890f-4cc0-916c-e75b4bea5c96","year":2024},"citing_paper":{"arxiv_id":"2606.01837","last_updated":"2026-06-01T07:49:12Z","snapshot_observed_at":"2026-07-06T23:42:21.252086Z","submitted_at":"2026-06-01T07:49:12Z","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-28T14:17:52.902183Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2606.01837"},"observation_digest":"sha256:fac110209139a088c1f7c706566fce7598656ffe293026002082c4aad54c63b2","observation_id":"298bb1d5-25da-4567-9993-45cbc454b8e3","resolution":{"observed_at":"2026-07-01T23:26:23.268030Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-08-07T00:14:50.080735Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-08T23:10:53.848778Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":149,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:50.080735Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e3b8e2136bb68b3421767b12554ee1ab0d0a7393dcc6d59e9b7c94be2793d7f1","observation_id":"dac094ae-79a3-4a53-9236-fdba1e8ec298","resolution":{"observed_at":"2026-08-07T00:14:50.080735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05934","snapshot_observed_at":"2026-08-07T21:24:15.156337Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05909","last_updated":"2026-08-06T11:39:08Z","snapshot_observed_at":"2026-08-09T02:12:36.957263Z","submitted_at":"2026-08-06T11:39:08Z","title":"MMAligner: Safeguarding Multimodal Large Language Models through Representation Calibration","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T21:24:15.156337Z"},"links":{"cited_paper":"/paper/2412.05934","citing_paper":"/paper/2608.05909"},"observation_digest":"sha256:27ec4ac9cec50f10b7055e7e2bda70c70e84b99d1219d9aa0f6178f036a45d05","observation_id":"4a5d8560-29a7-43d6-8bd5-fe8cd28c4032","resolution":{"observed_at":"2026-08-07T21:24:15.156337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2412.05934/citation-record","integrity":"/paper/2412.05934/integrity","json":"/paper/2412.05934/citation-record.json","paper":"/paper/2412.05934"},"outbound":[],"paper":{"arxiv_id":"2412.05934","last_updated":"2025-08-18T03:40:02Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T14:49:05.861775Z","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2412.05934."}