{"as_of":"2026-08-17T20:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e9e2c39fbfcd4a36d32fb0841d4a406789280a9ab8c49bcdd34c937da80af1ba","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T10:36:19.680687Z","state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.16512/citation-record","integrity":"/paper/2412.16512/integrity","json":"/paper/2412.16512/citation-record.json","paper":"/paper/2412.16512"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2006.11239","last_updated":"2020-12-16T21:15:05Z","snapshot_observed_at":"2026-08-10T05:21:27.485481Z","submitted_at":"2020-06-19T17:24:44Z","title":"Denoising Diffusion Probabilistic Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.11239","snapshot_observed_at":"2026-08-11T10:36:19.370837Z","title":"Denoising diffusion probabilis- tic models,","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.370837Z"},"links":{"cited_paper":"/paper/2006.11239","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:5069e79e7b7e4826aa8a32a435de8bdc52f5c89b99e727f33964346a0af5d0b6","observation_id":"156dadde-027e-40dd-a9b2-1e361fd76b7d","resolution":{"observed_at":"2026-08-11T10:36:19.370837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-08-11T15:38:14.931716Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-08-11T10:36:19.384381Z","title":"Denoising diffusion implicit models,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.384381Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:69241c1900f1768fc57054f078a7817688f96c860af031a2f3ac76620d2deeb5","observation_id":"a67f15e1-fa91-46b7-8411-5d5204110485","resolution":{"observed_at":"2026-08-11T10:36:19.384381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-08-11T10:36:19.391765Z","title":"Score-based gener- ative modeling through stochastic differential equations,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.391765Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:e1e4550b02c03a402397fc4fe0f8f63a801881d88a90e138573da086391c6630","observation_id":"9bc56d40-bd99-4ad5-b477-d4682bc9fb68","resolution":{"observed_at":"2026-08-11T10:36:19.391765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:21.064555Z","title":"High-resolution image synthesis with latent diffusion models,","venue":null,"work_id":"c6401b30-22bb-4f26-8064-e115b9e3de57","year":2022},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.412867Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:139846c630a62af6e913fe22225459097a9be8f4acc901f354890fd363523308","observation_id":"8c7d6fbc-5c99-4285-8b8a-aebb966e6e73","resolution":{"observed_at":"2026-08-11T10:36:21.079339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2009.09761","last_updated":"2021-03-30T19:48:38Z","snapshot_observed_at":"2026-07-06T09:57:19.117228Z","submitted_at":"2020-09-21T11:20:38Z","title":"DiffWave: A Versatile Diffusion Model for Audio Synthesis","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.09761","snapshot_observed_at":"2026-08-11T10:36:19.437535Z","title":"Diffwave: A versatile diffusion model for audio synthesis,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.437535Z"},"links":{"cited_paper":"/paper/2009.09761","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:34d70e01e8b6ff19809b0574ac6b422ce63b755bafb6cb2bed019b9bfdf720a8","observation_id":"938db6c7-6aae-4c7a-96dc-c87b67c5ad17","resolution":{"observed_at":"2026-08-11T10:36:19.437535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.17003","last_updated":"2022-06-16T11:44:17Z","snapshot_observed_at":"2026-08-16T17:10:16.808567Z","submitted_at":"2022-03-31T12:52:25Z","title":"Equivariant Diffusion for Molecule Generation in 3D","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.17003","snapshot_observed_at":"2026-08-11T10:36:19.450042Z","title":"Equivariant diffusion for molecule generation in 3d,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.450042Z"},"links":{"cited_paper":"/paper/2203.17003","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:57bb33cded91b1ea3058adfd04538a790b74e2cb4f55201b7e5e8d1cf339c1a0","observation_id":"f2d800ca-0187-4ec5-8948-04f448e70d30","resolution":{"observed_at":"2026-08-11T10:36:19.450042Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.14734","last_updated":"2023-05-23T10:32:08Z","snapshot_observed_at":"2026-08-17T13:02:47.026388Z","submitted_at":"2022-09-29T12:55:03Z","title":"DiGress: Discrete Denoising diffusion for graph generation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.14734","snapshot_observed_at":"2026-08-11T10:36:19.462020Z","title":"Digress: Discrete denoising diffusion for graph generation,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.462020Z"},"links":{"cited_paper":"/paper/2209.14734","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:e1a3c1412d8489cf67f74ac45813420e7f8197ebfa25ddf7c37a581b033492fd","observation_id":"7e2c9739-a6b2-4130-b549-c1fd9b35d7a4","resolution":{"observed_at":"2026-08-11T10:36:19.462020Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:21.026900Z","title":"Generative adversarial networks,","venue":null,"work_id":"be47af35-044a-4d53-b9d4-c30abe6280d4","year":2014},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.471020Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:480856b3854a35b8756586c32a75138132d0c872a233776cf5eba62826969517","observation_id":"f2d5ee65-ddba-4089-b05c-05c509b72b3e","resolution":{"observed_at":"2026-08-11T10:36:21.039154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6114","last_updated":"2022-12-10T21:04:00Z","snapshot_observed_at":"2026-08-14T23:50:45.029465Z","submitted_at":"2013-12-20T20:58:10Z","title":"Auto-Encoding Variational Bayes","version":11},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6114","snapshot_observed_at":"2026-08-11T10:36:19.483284Z","title":"Auto-encoding variational bayes,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.483284Z"},"links":{"cited_paper":"/paper/1312.6114","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:9d02c0b3806bc96ff056a9920d53bf4e62ac520fb4330f87a4917bcd912c8c66","observation_id":"d0cc3600-c4b5-4c1e-b3fd-00beb3c20bd5","resolution":{"observed_at":"2026-08-11T10:36:19.483284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.928238Z","title":"Fast ode- based sampling for diffusion models in around 5 steps,","venue":null,"work_id":"8289f0b7-8f99-402f-a94c-3cb4e7f047ce","year":2024},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.496505Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:776a46e404623a09769e2143d422319d32b527be817a1de8a47f302be823a937","observation_id":"42d0ed4d-46f7-48fc-b310-40d909aa12ca","resolution":{"observed_at":"2026-08-11T10:36:20.946063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.02747","last_updated":"2023-02-08T15:46:05Z","snapshot_observed_at":"2026-08-16T02:30:42.660030Z","submitted_at":"2022-10-06T08:32:20Z","title":"Flow Matching for Generative Modeling","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.02747","snapshot_observed_at":"2026-08-11T10:36:19.506675Z","title":"Flow matching for generative modeling,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.506675Z"},"links":{"cited_paper":"/paper/2210.02747","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:b71eb6560f4ffd6975a251aa402a40c43dcd40982d50db2af0059f9c42a93701","observation_id":"e899acbb-2a02-40e0-bcc0-9ddb9932a8e6","resolution":{"observed_at":"2026-08-11T10:36:19.506675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.03003","last_updated":"2022-09-07T08:59:55Z","snapshot_observed_at":"2026-07-06T13:49:40.974495Z","submitted_at":"2022-09-07T08:59:55Z","title":"Flow Straight and Fast: Learning to Generate and Transfer Data with Rectified Flow","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.03003","snapshot_observed_at":"2026-08-11T10:36:19.517332Z","title":"Flow straight and fast: Learning to generate and transfer data with rectified flow,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.517332Z"},"links":{"cited_paper":"/paper/2209.03003","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:f4d1f95bfa5ed5a297eeb869536a18aaf03e0216b793073c2118dafd588da297","observation_id":"fd5fa73d-ce3b-4ed5-98b1-a79b80f90bca","resolution":{"observed_at":"2026-08-11T10:36:19.517332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.878408Z","title":"Con- sistency models,","venue":null,"work_id":"e9815e49-7712-4b84-af52-4786e9959f29","year":2023},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.528021Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:2b21659f846f4f965a97496e5ed3035a17e0b44520d99d5388cc17ef1b60f787","observation_id":"f62cdcca-36a2-4a92-9ec9-f73a13860b40","resolution":{"observed_at":"2026-08-11T10:36:20.905633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.06874","last_updated":"2023-12-29T10:44:40Z","snapshot_observed_at":"2026-08-16T15:24:43.274835Z","submitted_at":"2023-06-12T05:14:13Z","title":"VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models","version":5},"cited_work":{"arxiv_id":"2306.06874","doi":null,"metadata_source":"pith","pith_arxiv_id":"2306.06874","snapshot_observed_at":"2026-08-11T10:36:20.048853Z","title":"VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models","venue":"cs.CR","work_id":"882e0596-7136-4b7b-93bc-eb2c5c3e5b20","year":2023},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.539120Z"},"links":{"cited_paper":"/paper/2306.06874","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:711d87475d7010cd3693ead0d44941d79de3883ad008a8a777a108976c838ad0","observation_id":"3b416d75-2beb-4a29-b833-2283afa83c73","resolution":{"observed_at":"2026-08-11T10:36:20.068557Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.854338Z","title":"Trojdiff: Trojan attacks on diffusion models with diverse targets,","venue":null,"work_id":"d9acf02b-26e5-4bac-ba36-637af8076675","year":2023},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.548675Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:11adf12d8490fe8f17aca0000fb6e1accc2fdb9c85806e37c9481fb8dbf384c4","observation_id":"3e7ae812-637a-4fe0-b394-e7c3c93d3e74","resolution":{"observed_at":"2026-08-11T10:36:20.861741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.831531Z","title":"How to backdoor diffusion models?,","venue":null,"work_id":"58e54e7b-cf14-4e0a-8a50-95bedc066a5c","year":2023},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.556322Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:e81d080900597ad0f555adf79a8650f72b7f69adeafff033e3fee6194838ffc9","observation_id":"f4932ec3-d4dc-452e-8576-dde5bd182e13","resolution":{"observed_at":"2026-08-11T10:36:20.837032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01101","last_updated":"2025-02-04T18:18:40Z","snapshot_observed_at":"2026-08-16T14:04:39.965589Z","submitted_at":"2024-04-01T13:21:05Z","title":"UFID: A Unified Framework for Input-level Backdoor Detection on Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01101","snapshot_observed_at":"2026-08-11T10:36:19.566107Z","title":"Ufid: A unified framework for input-level backdoor detection on diffusion models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.566107Z"},"links":{"cited_paper":"/paper/2404.01101","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:8b1bbc8fe5cac07807e833f779dc0ed18061ebf5fa7ce351672137a594b8e022","observation_id":"47ea2890-466c-454e-ac0c-8d6cb64d5180","resolution":{"observed_at":"2026-08-11T10:36:19.566107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.05294","last_updated":"2024-09-09T03:02:16Z","snapshot_observed_at":"2026-08-16T13:20:19.643881Z","submitted_at":"2024-09-09T03:02:16Z","title":"TERD: A Unified Framework for Safeguarding Diffusion Models Against Backdoors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.05294","snapshot_observed_at":"2026-08-11T10:36:19.574072Z","title":"Terd: A unified framework for safeguarding diffusion models against backdoors,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.574072Z"},"links":{"cited_paper":"/paper/2409.05294","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:1f785da359ad2855909bd34894ef0b94b532b00713fbfe517bd5579e4a552e8f","observation_id":"31f1da38-4c24-462c-9d90-494b69dc3fca","resolution":{"observed_at":"2026-08-11T10:36:19.574072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00050","last_updated":"2024-02-04T23:27:23Z","snapshot_observed_at":"2026-08-16T14:39:49.964601Z","submitted_at":"2023-11-27T23:58:56Z","title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift","version":2},"cited_work":{"arxiv_id":"2312.00050","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.00050","snapshot_observed_at":"2026-08-11T10:36:19.848543Z","title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift","venue":"cs.CR","work_id":"f2ee326a-88bc-4a24-b2cc-a4927f823f43","year":2023},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.580487Z"},"links":{"cited_paper":"/paper/2312.00050","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:e7d85df934a47cff916b27368d952f002e2a2c37036f28911f7ad7c5819a8510","observation_id":"d03a82fc-1064-49cb-be5e-f54daa9b487f","resolution":{"observed_at":"2026-08-11T10:36:19.877891Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.801359Z","title":"How to backdoor consistency models?,","venue":null,"work_id":"9c1dcce9-c0d9-4068-b435-bdba910d1555","year":2024},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.586916Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:51750b9df5f7eb795ae0159430a6973a691381f13ec79e46c5db3e14aa130a7b","observation_id":"c62b8484-3308-4ba7-ac9d-cd01bd8ae6e9","resolution":{"observed_at":"2026-08-11T10:36:20.807140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.721896Z","title":"Badnets: Evaluating backdooring attacks on deep neural networks,","venue":null,"work_id":"88a4ea58-4c38-4d4f-9082-0c67640b7d9e","year":2019},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.596201Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:cd51ae2de7bac8bcb5d3b05cc0b812ea074334c63b8893c0f8d796695dd6a2e3","observation_id":"2d4f237a-add5-448d-8812-048a47151fbf","resolution":{"observed_at":"2026-08-11T10:36:20.740059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.697943Z","title":"Invisible backdoor attack with sample-specific triggers,","venue":null,"work_id":"a855e9c7-8ded-4716-8ffb-29b13e44e4a0","year":2021},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.602484Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:252556503798e7021d7c0dc6d55b0e56bfeef447cfd9fd67062e19b976e73020","observation_id":"b36cb37a-0259-4b58-b69e-fc5806126294","resolution":{"observed_at":"2026-08-11T10:36:20.704534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00816","last_updated":"2024-06-02T17:43:19Z","snapshot_observed_at":"2026-08-16T13:46:58.769299Z","submitted_at":"2024-06-02T17:43:19Z","title":"Invisible Backdoor Attacks on Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00816","snapshot_observed_at":"2026-08-11T10:36:19.611462Z","title":"Invisible backdoor attacks on diffusion models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.611462Z"},"links":{"cited_paper":"/paper/2406.00816","citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:45c152db1fc8f6c20e6313ef3e5239ed1b14acdbfc92a987c779b5e9dcbcc181","observation_id":"57edba2c-5467-46c0-9d43-36578a888db8","resolution":{"observed_at":"2026-08-11T10:36:19.611462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:19.619914Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.619914Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:d3c33be2ad714d5d055327b8ef324d7c90ca92caf4454edc042fc1cad4428332","observation_id":"fc73d50b-7e93-4571-b123-fbeb618f5d03","resolution":{"observed_at":"2026-08-11T10:36:19.619914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.657826Z","title":"Deep learning face attributes in the wild,","venue":null,"work_id":"9c33c6d1-5a90-4d8f-8f9f-ed14f3371722","year":2015},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.632882Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:9f011a4417b627a41875c1462aaaac35f6c60079ae6ff58461961dd533d79618","observation_id":"9a9417d9-a8eb-4f42-b902-911469c51864","resolution":{"observed_at":"2026-08-11T10:36:20.666123Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.634987Z","title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium,","venue":null,"work_id":"d698eb2e-7660-42ad-bc55-31e085110632","year":2017},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.644536Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:04c555c710e248c068798b319ddd2bec56871501b85a507530374096880fda94","observation_id":"bf2d7314-fb59-447f-a0e5-b6c9701da08f","resolution":{"observed_at":"2026-08-11T10:36:20.640539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.616567Z","title":"Improved precision and recall metric for assessing generative models,","venue":null,"work_id":"9475ec7b-236c-433c-a7ad-10f2e2798498","year":2019},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.657713Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:5a3640839e9a54d19699754dc44213f919f1d3c792db61a1acf0934344117b99","observation_id":"a66fc482-adf9-44a2-879a-8d12a7b181fd","resolution":{"observed_at":"2026-08-11T10:36:20.622174Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:36:20.586574Z","title":"Adding conditional control to text-to-image diffusion models,","venue":null,"work_id":"ce55aa70-4257-4111-9a77-b0b637fc444f","year":2023},"citing_paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T10:36:19.680687Z"},"links":{"citing_paper":"/paper/2412.16512"},"observation_digest":"sha256:488ae88f955e77a93ec1751433983d2ccc4607adbf2c8ec2ca32829710938f1a","observation_id":"3596db0a-d12b-4cf5-a72e-b1bc8ed70ea3","resolution":{"observed_at":"2026-08-11T10:36:20.596204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.16512","last_updated":"2024-12-21T07:21:53Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-17T01:20:06.530236Z","submitted_at":"2024-12-21T07:21:53Z","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":2,"verified_fuzzy":13},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2412.16512."}