{"as_of":"2026-08-16T17:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e802b3a0498ca6ea808b36488f8b8b1f4b1cee9bd526490267dad619f3b7d5b8","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T18:14:48.210139Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.08156/citation-record","integrity":"/paper/2412.08156/integrity","json":"/paper/2412.08156/citation-record.json","paper":"/paper/2412.08156"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.782159Z","title":"Improving image gener- ation with better captions, 2023","venue":null,"work_id":"ee2700a7-0053-42dd-a5fd-538055681457","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.756375Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:eab5356a5f1d2a1e7eec223649782a11883f81c194b090cd015ac7246048972c","observation_id":"93e12c1d-757f-442a-9f5e-0ae7a7027d6d","resolution":{"observed_at":"2026-08-11T18:14:48.786795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.769155Z","title":null,"venue":null,"work_id":"0f0558fa-6f3f-4aac-8b25-bcfbd9c0982f","year":2020},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.761107Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:2d1415bef22bf99621f55a76ca9e320c9ce1237d51103526b06836bfd9ecc206","observation_id":"2b704b33-7132-4d0f-b7d5-fa4b5425fdad","resolution":{"observed_at":"2026-08-11T18:14:48.773557Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.756962Z","title":"Con- ceptprune: Concept editing in diffusion models via skilled neuron pruning, 2024","venue":null,"work_id":"f29dad65-f140-4f34-b5ab-1adab2f56354","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.764973Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:9cc42f3922327ee6557ca294eec4a7cdbe1e083d9da96ec5f455877220af66bd","observation_id":"7e9f3173-975d-49ba-a6c5-014bf1e8d088","resolution":{"observed_at":"2026-08-11T18:14:48.761114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.744608Z","title":"How to backdoor diffusion models? In 2023 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 4015–4024, 2023","venue":null,"work_id":"69961637-21dc-4e48-a5ee-4ebe2b2bd2d3","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.768909Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:1de0e65896b5f6c4e309985e9159cb29615aa16bd3c59cdff8cd9af826b9c6cc","observation_id":"23670e61-1334-46a7-b11a-0f309003fca1","resolution":{"observed_at":"2026-08-11T18:14:48.749005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.732545Z","title":"Divide-and-conquer at- tack: Harnessing the power of llm to bypass safety filters of text-to-image models, 2024","venue":null,"work_id":"853947c6-3d99-4d6f-87ba-d6e822caea03","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.773728Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:1fc6ad1c3cfbcdbfda585f212fcc852c6cd8c6deab51684e64090d83c9a79a05","observation_id":"23e9082c-455e-44d3-a91f-1d935c287a2d","resolution":{"observed_at":"2026-08-11T18:14:48.736664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.719772Z","title":"BERT: Pre-training of deep bidirectional trans- formers for language understanding","venue":null,"work_id":"4f475549-719f-40bb-a0c9-e4b845f0834a","year":2019},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.778371Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:6ca5e2378db2193c9159b06581f91dbeb871eddcd37d1a806a1783941c80ddc4","observation_id":"917aa238-04ae-4333-8e9b-ab7529349115","resolution":{"observed_at":"2026-08-11T18:14:48.723898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:47.783264Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.783264Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:f2f09219d184affa89a414fc11d601ef8f039d6b625d26de71aa0b632486b3aa","observation_id":"d7fc3e2f-d7a1-4ae2-a1cd-e271c15c49c4","resolution":{"observed_at":"2026-08-11T18:14:47.783264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.701356Z","title":"Erasing concepts from diffusion models","venue":null,"work_id":"b5f982bd-2849-48d6-a9ca-fab3375b5295","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.788167Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:d32f685bfd6f0f77d1ed665ead56207ebd7e81068cf8b387135ea50b9978f1cf","observation_id":"a56a9630-25cc-42cb-b34b-89a208257fa6","resolution":{"observed_at":"2026-08-11T18:14:48.705056Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.690056Z","title":"Rt-attack: Jailbreaking text-to-image models via random token, 2024","venue":null,"work_id":"4e61270c-e916-4a94-98e2-99cb25afaec6","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.791617Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:90deeebf378d9f2ba3e4e75ff542ebedf78f52fadcd8e18473c23f8f87187f37","observation_id":"70438ef6-ca70-4931-8a52-e0e028907385","resolution":{"observed_at":"2026-08-11T18:14:48.693886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.19103","last_updated":"2025-08-16T03:22:02Z","snapshot_observed_at":"2026-08-16T14:05:43.725378Z","submitted_at":"2024-03-28T02:35:53Z","title":"Automated Black-box Prompt Engineering for Personalized Text-to-Image Generation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.19103","snapshot_observed_at":"2026-08-11T18:14:47.795435Z","title":"Zico Kolter, AI Sony, Sony Group Corporation, and Bosch Center","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.795435Z"},"links":{"cited_paper":"/paper/2403.19103","citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:573cc1175836d90e9d5ef42eaa5223991117aa587dc2733bf9113f6777469906","observation_id":"d4412a27-56be-4bf5-9d1f-8d0c07443eec","resolution":{"observed_at":"2026-08-11T18:14:47.795435Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.11239","last_updated":"2020-12-16T21:15:05Z","snapshot_observed_at":"2026-08-10T05:21:27.485481Z","submitted_at":"2020-06-19T17:24:44Z","title":"Denoising Diffusion Probabilistic Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.11239","snapshot_observed_at":"2026-08-11T18:14:47.810197Z","title":"Denoising diffu- sion probabilistic models","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.810197Z"},"links":{"cited_paper":"/paper/2006.11239","citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:c6cfcc10c3037b96da2e4fcc79470a97bcb3e5b6048039fc2597017db02bb24d","observation_id":"4d012268-aafd-4778-8134-e8699c0ba8f0","resolution":{"observed_at":"2026-08-11T18:14:47.810197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.677807Z","title":"Perception-guided jailbreak against text-to-image models, 2024","venue":null,"work_id":"cbe0c82f-655f-4616-8983-150db8b283a5","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.832649Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:a2097d12e951fe68d9ef8f5422e2f52054708be3463463f63cc53a8828e24ce8","observation_id":"fc478466-c0c9-405d-aacc-ea3c897b8ecd","resolution":{"observed_at":"2026-08-11T18:14:48.682586Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.664754Z","title":"Inappropriate image prompts","venue":null,"work_id":"8491f625-e5e6-4dde-99a7-bfa09e84163a","year":null},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.856610Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:bf11f1c34e813ae14a494bdff06ab93d5c44921416aa146dd1968d29b6d63cea","observation_id":"9ef77bcc-f99d-46cb-bf78-3077a9b48c66","resolution":{"observed_at":"2026-08-11T18:14:48.669230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.652813Z","title":"Leonardo.ai, 2023","venue":null,"work_id":"188a6818-1efe-47b7-b307-b30a3222e878","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.878429Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:ba903ee81a4e921a5cb4da047fd68c104d7a313d3df37e2fbefde3cf22eb0a13","observation_id":"24cb623d-43fa-43cf-868a-5ae0bf776212","resolution":{"observed_at":"2026-08-11T18:14:48.656751Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.06666","last_updated":"2024-10-17T07:28:23Z","snapshot_observed_at":"2026-08-16T14:02:15.202052Z","submitted_at":"2024-04-10T00:26:08Z","title":"SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.06666","snapshot_observed_at":"2026-08-11T18:14:47.881865Z","title":"Safegen: Mitigating sex- ually explicit content generation in text-to-image models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.881865Z"},"links":{"cited_paper":"/paper/2404.06666","citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:c608bf5b79c0fc1caadcd4becb7aa2258f78050d0b428e90e23889b67bb09f96","observation_id":"4bc4cb9e-1d55-4d39-bafa-52c08aee17bc","resolution":{"observed_at":"2026-08-11T18:14:47.881865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.640646Z","title":"Groot: Adversarial testing for generative text-to-image models with tree-based semantic transformation, 2024","venue":null,"work_id":"086c09b4-518b-4611-9390-a734a09cb180","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.885402Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:9f5939a8f9592d7a3ceb65e713b1b18401d499650b0d90faab2cb4f3cf5c3fae","observation_id":"4cba9fce-43f9-45be-9def-a84be8d098f9","resolution":{"observed_at":"2026-08-11T18:14:48.645247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.627644Z","title":"Jailbreaking prompt attack: A controllable adversarial attack against diffusion models, 2024","venue":null,"work_id":"c7717401-489f-4f23-8ad6-36214d0738a3","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.889885Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:b29045f98a00d8a36a1e791fda5ac0fbeb1eb0ad102bb6dc8aad9e169c81affc","observation_id":"4a40ef8c-0ab8-4349-9c43-ce36ec596445","resolution":{"observed_at":"2026-08-11T18:14:48.632681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.613277Z","title":"Towards deep learning models resistant to adversarial attacks, 2019","venue":null,"work_id":"24fc4fc1-9cb8-42de-89f7-ce1467b08a3e","year":2019},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.893567Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:0baa0683bb35507bbe3eefa89062b894c920d1bdbc15f84c5dea6ac5715ee1f9","observation_id":"bd561369-95ac-44e1-b14e-ed4a86e97075","resolution":{"observed_at":"2026-08-11T18:14:48.617913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.601475Z","title":"Generating images from captions with attention, 2016","venue":null,"work_id":"8d780150-9501-4e42-b27c-7614537b3605","year":2016},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.896938Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:b943e7241bf541f842037a26f55d6da09303a370a7780ce6f268672c08fdfeff","observation_id":"ed2f4069-5950-4df1-b9cd-4d405c506030","resolution":{"observed_at":"2026-08-11T18:14:48.605271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.588655Z","title":"Midjourney, 2023","venue":null,"work_id":"0de310d5-28cd-4b08-b1b9-421690eae368","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.901355Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:edd511a4ea07c89146b97dc854ba111d7d135c9511ad37dc5f0ed5240e5ba243","observation_id":"00799132-53ee-46a7-a8c1-d8372da594e0","resolution":{"observed_at":"2026-08-11T18:14:48.592153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.576695Z","title":"GLIDE: towards photorealis- tic image generation and editing with text-guided diffusion models","venue":null,"work_id":"8fb802c4-fbb9-40b1-ab5e-8c49cf94c69f","year":2022},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.905388Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:18fe572861498f9da794a6d4fb486f7f9cf7b4a8757176c1351c1c896cb4e74a","observation_id":"014760c4-0097-4e77-8e6b-ffc45035101c","resolution":{"observed_at":"2026-08-11T18:14:48.580458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.564323Z","title":null,"venue":null,"work_id":"3b0af153-0a47-4ec8-9d8a-468556f37d12","year":null},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.909275Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:8434166548440818127e8ffbf8ca8be4f9c4623d04629c5efd357c16fbf3d0d8","observation_id":"0da00477-1b26-4726-a2ce-3f5002819494","resolution":{"observed_at":"2026-08-11T18:14:48.568062Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.553096Z","title":"Chatgpt, 2023","venue":null,"work_id":"63a3c2d8-5937-477f-9d48-0d79f374cd6b","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.913484Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:5adfdf0a69b3544e5a191bf6186c7ee15ad23bdb58146f7aeae285380aa3e912","observation_id":"a75c5483-a379-4815-9c46-fe53f2fa7208","resolution":{"observed_at":"2026-08-11T18:14:48.556927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09748","last_updated":"2023-03-02T09:06:55Z","snapshot_observed_at":"2026-07-06T14:32:37.317828Z","submitted_at":"2022-12-19T18:59:58Z","title":"Scalable Diffusion Models with Transformers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.09748","snapshot_observed_at":"2026-08-11T18:14:47.917337Z","title":"Scalable diffusion models with transformers","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.917337Z"},"links":{"cited_paper":"/paper/2212.09748","citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:01d0297a3c3d9bbe473df70c355458e92ad522b86ecb758730ae1c5c0c01357f","observation_id":"b15ea080-8c6f-42ce-b395-810884ce1672","resolution":{"observed_at":"2026-08-11T18:14:47.917337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.540169Z","title":"Upam: Unified prompt attack in text-to-image generation models against both tex- tual filters and visual checkers, 2024","venue":null,"work_id":"c7c84826-15ab-4dc0-abce-7e9978c0dcbe","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.921267Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:924e1c034d137740d3ee13942eff58e8834e7e324a8442828763f1e45c928558","observation_id":"fdb3d474-fe56-4176-8673-48f5c7faeddb","resolution":{"observed_at":"2026-08-11T18:14:48.544698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.528460Z","title":"Unsafe diffusion: On the generation of unsafe images and hateful memes from text- to-image models, 2023","venue":null,"work_id":"3aa18be6-88ab-44d6-b0ff-528b83b506fe","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.936357Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:03717e0af91708a2e1177a052092f31f15be357fdf2432358911076c2f16856e","observation_id":"d17cbd50-5b5e-4be9-918f-0bcc80af6c5c","resolution":{"observed_at":"2026-08-11T18:14:48.532742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:47.958066Z","title":"Learning transferable visual models from natural language supervision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.958066Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:84b645843e8ad3d36e1376753ba94c5a9f4f21e7ee0b4f05ea622103056eebfe","observation_id":"769a4e79-adfc-47ad-a4b7-1ade859191f1","resolution":{"observed_at":"2026-08-11T18:14:47.958066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.506884Z","title":"Zero-shot text-to-image generation","venue":null,"work_id":"6c5a91db-b224-4ea0-9b33-c5a34ef95163","year":2021},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:47.984997Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:62a3b401f76b48d49a3cde2b20646b8625eca7eca0a905c6c3af06307abbd15b","observation_id":"1ef0170b-7334-463a-b4b8-137b7f7bc205","resolution":{"observed_at":"2026-08-11T18:14:48.511859Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.493888Z","title":"Hierarchical text-conditional image gener- ation with clip latents, 2022","venue":null,"work_id":"e3a9724f-8ec4-4a60-b8e6-82b93c5913f0","year":2022},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.002027Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:a3abfcc176b22da73bbd4370cf78386826a117a5af57b908acb7cdb714e6b4f7","observation_id":"f866b547-e378-4590-a371-a8355ea1e0ad","resolution":{"observed_at":"2026-08-11T18:14:48.498035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.480215Z","title":"Red-teaming the stable diffusion safety filter, 2022","venue":null,"work_id":"e2ac1598-a91a-4564-90cf-efcf34559776","year":2022},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.029898Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:e3c7c47ed3d40da3d60182670e020b80b8dcf19fc0a56866aed593f4dbc47469","observation_id":"c104cd2b-7db6-4cd9-a456-752e5ba4d1a6","resolution":{"observed_at":"2026-08-11T18:14:48.484785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.467991Z","title":"High-resolution image syn- thesis with latent diffusion models","venue":null,"work_id":"87078c53-78b2-4e9f-a943-08ddc3997cb9","year":2022},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.060983Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:a11ade37ee66417d7526a9ff8b28662932606a648982a9c454e7d80f295df6a1","observation_id":"d82fe8af-81a8-4050-bede-bb2dbc7771b0","resolution":{"observed_at":"2026-08-11T18:14:48.471737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.098254Z","title":"U-net: Convolutional networks for biomedical image segmentation,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.098254Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:d8f2b71abd8e818e4efffb3572ff350c0e92447bdde683ba3dc476c4aacb0f94","observation_id":"2e42ddae-78ed-4324-a47a-6836b054bab9","resolution":{"observed_at":"2026-08-11T18:14:48.098254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.446584Z","title":null,"venue":null,"work_id":"6d5968e8-5b42-449b-8e1b-2651debeaebe","year":2022},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.140082Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:adec1921182a85e454af16428441032506f7dadc5d020a46481eccd19ab8fd06","observation_id":"f4fbfb67-c6a1-4552-aa2e-669946ec4b68","resolution":{"observed_at":"2026-08-11T18:14:48.451393Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.431641Z","title":"Safe latent diffusion: Mitigating inappro- priate degeneration in diffusion models, 2023","venue":null,"work_id":"eccf94c8-f3bf-4979-bd1a-55b832c30e41","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.151995Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:1d393142d749297614ab4f134c0fad1bb4eaca80433c2c1fd599030cf8cf73a9","observation_id":"024f2fb7-32dc-4c1b-a894-cd4e1cca60b0","resolution":{"observed_at":"2026-08-11T18:14:48.436408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-08-11T15:38:14.931716Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-08-11T18:14:48.160237Z","title":"Denois- ing diffusion implicit models","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.160237Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:f25ab5a6e57ca60e603e6ddbbf145f7bc14db4ffcbde28be896d7c034bc610fe","observation_id":"bf94ca88-7212-4e4c-a9a8-c6d86d9d5794","resolution":{"observed_at":"2026-08-11T18:14:48.160237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.417504Z","title":"Ring-a-bell! how reliable are concept removal meth- ods for diffusion models?, 2024","venue":null,"work_id":"67800b51-4150-4de5-8f57-2db5847f7f0c","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.166379Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:973f3e76578a09d907b17005c7b3f1f608d20293a797985ae1a6d77ec8322ca4","observation_id":"a4ad04a3-9194-41ca-9867-839d254a10a0","resolution":{"observed_at":"2026-08-11T18:14:48.422292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.03762","last_updated":"2023-08-02T00:41:18Z","snapshot_observed_at":"2026-08-16T05:25:19.960199Z","submitted_at":"2017-06-12T17:57:34Z","title":"Attention Is All You Need","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.03762","snapshot_observed_at":"2026-08-11T18:14:48.170198Z","title":"Gomez, Lukasz Kaiser, and Illia Polosukhin","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.170198Z"},"links":{"cited_paper":"/paper/1706.03762","citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:a726a211782cc1315c24ba776bac9116929862acbb030fc18fe7e7285a4adc55","observation_id":"5cfd9aab-f5dc-4eb2-9f4e-016fe23758e9","resolution":{"observed_at":"2026-08-11T18:14:48.170198Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.404097Z","title":"On the multi-modal vulnera- bility of diffusion models","venue":null,"work_id":"fade14f6-b729-439e-b5ba-f1b48efde439","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.175036Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:c71a46331a2dc57e12cacaf1963d8b57c43e620bb5d9cbbec0cbf1ec5e0655ba","observation_id":"b2c62a16-c53e-44ac-96ee-e3025251222c","resolution":{"observed_at":"2026-08-11T18:14:48.408872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.391374Z","title":"Mma-diffusion: Multimodal at- tack on diffusion models","venue":null,"work_id":"0c8ea46f-8b02-4833-af79-87426e0cee46","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.179153Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:9d7b7aa0b9372cb3787b5e98f1ac129b4e9a66a17f026fd3dd21a3989a7b41f0","observation_id":"017c60d7-3787-45cd-b10c-eb2a3344c93b","resolution":{"observed_at":"2026-08-11T18:14:48.396007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.378456Z","title":"Guardt2i: Defending text-to-image models from adversarial prompts, 2024","venue":null,"work_id":"4a2d234c-846a-43d7-9d47-e458330ebd7c","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.182890Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:93e8040f8d3302eb8f2b4801a2b0a28f2287c28a3f19f8d2656cc28b3079b31e","observation_id":"d572b07d-5818-418d-ae49-75ac9957cd4c","resolution":{"observed_at":"2026-08-11T18:14:48.382994Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.365098Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"2efc63a6-b7bd-4020-8cae-a577daf9d130","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.188244Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:d3c7a869ebe57cc0809de9381c4389d16f87ec6783460e2ae8362a37a80d20d3","observation_id":"4f83f497-f747-4eaa-9f4f-07c28db11ab2","resolution":{"observed_at":"2026-08-11T18:14:48.369784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.04627","last_updated":"2022-06-05T01:57:58Z","snapshot_observed_at":"2026-08-13T12:11:58.325060Z","submitted_at":"2021-10-09T18:36:00Z","title":"Vector-quantized Image Modeling with Improved VQGAN","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.04627","snapshot_observed_at":"2026-08-11T18:14:48.193392Z","title":"Vector-quantized image modeling with improved vqgan","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.193392Z"},"links":{"cited_paper":"/paper/2110.04627","citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:0ccfd6171da14fd12634bf8fa399c7329901ca9110586f94f50afe83aa5d8559","observation_id":"b7eb525b-cae4-4421-a3bc-0a24b24c1d04","resolution":{"observed_at":"2026-08-11T18:14:48.193392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.352744Z","title":"To gener- ate or not? safety-driven unlearned diffusion models are still easy to generate unsafe images","venue":null,"work_id":"cc785733-eb37-4de8-9817-ffb4ccd90c54","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.199367Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:8cc8bf927618e5bc7cae567f21c9d322b26860d5e090e9c815b37b73628b2ead","observation_id":"0a3975fd-1ce8-4273-aabc-ed9feb0789ea","resolution":{"observed_at":"2026-08-11T18:14:48.357130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.339507Z","title":"Cipherdm: Secure three-party infer- ence for diffusion model sampling","venue":null,"work_id":"18e1db03-d7fe-42ef-b12f-a6a21477e2cf","year":2024},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.205537Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:2a4a2c1373b8c28fe6aa6791153b2997800d3f1e1a71f9b7126355262df3f121","observation_id":"f3be4cf8-ba9f-4d43-9960-062bde8a40e0","resolution":{"observed_at":"2026-08-11T18:14:48.343996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T18:14:48.323907Z","title":"A pilot study of query-free adversarial attack against stable diffusion","venue":null,"work_id":"280d75ff-efb6-4291-be9a-befe06eed12c","year":2023},"citing_paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-11T18:14:48.210139Z"},"links":{"citing_paper":"/paper/2412.08156"},"observation_digest":"sha256:deed0ccc26d773dc13d0c2a98e1e0c234549cc1bf80f5b7c300e65378a3b8783","observation_id":"c41ccd53-30a8-4937-841f-0b67a78db71f","resolution":{"observed_at":"2026-08-11T18:14:48.330414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.08156","last_updated":"2024-12-11T07:22:51Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T23:44:34.905081Z","submitted_at":"2024-12-11T07:22:51Z","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":32},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2412.08156."}