{"as_of":"2026-08-20T22:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ac890086950a05c08f8e5cdf1c1706ec3fc31347aba49dd910e37df8d146b150","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:46:49.716932Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T04:22:02.841142Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T05:31:07.639724Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-08-12T04:22:02.841142Z","title":"Natural reflection back- door attack on vision language model for autonomous driv- ing","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2412.01528","last_updated":"2025-08-21T05:56:47Z","snapshot_observed_at":"2026-08-17T23:56:16.045921Z","submitted_at":"2024-12-02T14:19:44Z","title":"CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T04:22:02.841142Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2412.01528"},"observation_digest":"sha256:2e9021a9cec4f9c0c8277f29b4c6855b57094e5f2deadc752c8ccb556c5fa913","observation_id":"bc7ed300-a1f1-4598-93fa-1f94b54a9aa3","resolution":{"observed_at":"2026-08-12T04:22:02.841142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-08-06T15:42:37.793731Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.17934","last_updated":"2025-07-21T04:30:50Z","snapshot_observed_at":"2026-08-17T18:23:43.625241Z","submitted_at":"2025-07-21T04:30:50Z","title":"Multimodal Fine-grained Reasoning for Post Quality Evaluation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:42:37.793731Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2507.17934"},"observation_digest":"sha256:8f576eddaadbd447bf437c4762cc827002e8f81b79386061e69e850ad10c722f","observation_id":"68e24890-d42a-49da-a089-0aebd84598de","resolution":{"observed_at":"2026-08-06T15:42:37.793731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-08-05T18:34:44.065462Z","title":"Natural reflection backdoor attack on vision language model for autonomous driving","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.14527","last_updated":"2025-08-22T18:47:29Z","snapshot_observed_at":"2026-08-17T03:39:15.927653Z","submitted_at":"2025-08-20T08:36:57Z","title":"Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T18:34:44.065462Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2508.14527"},"observation_digest":"sha256:53a6133f8b39c3a9ed8bea035c202f950f7c64d4dca90d3613b3148ca8198cf1","observation_id":"590ecbd9-250c-4946-8985-5568127bbbfc","resolution":{"observed_at":"2026-08-05T18:34:44.065462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2505.06413","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2505.06413 , year=","venue":null,"work_id":"3a7a5133-d1f6-4a6f-b21a-4cea90842f0a","year":2025},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-16T22:50:02.447684Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:6241645ff8d5a6d8c286732ad89c0f3d79205337bc0401097ed3d2e939347149","observation_id":"4019e872-c869-42ef-b1a4-a3d670d0f029","resolution":{"observed_at":"2026-05-10T22:05:49.195873Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2505.06413","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2505.06413 , year=","venue":null,"work_id":"3a7a5133-d1f6-4a6f-b21a-4cea90842f0a","year":2025},"citing_paper":{"arxiv_id":"2604.19083","last_updated":"2026-04-21T04:52:38Z","snapshot_observed_at":"2026-08-17T00:05:16.447005Z","submitted_at":"2026-04-21T04:52:38Z","title":"ProjLens: Unveiling the Role of Projectors in Multimodal Model Safety","version":1},"reference_index":160,"source":"arxiv_source","source_observed_at":"2026-05-10T03:00:34.862711Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2604.19083"},"observation_digest":"sha256:ff218dde3929f1307481ef7af68df21ae3ddfb18098ba40d07f779d6d8559fa1","observation_id":"8661e0e7-f6df-4e41-b508-5a7ad0ecb441","resolution":{"observed_at":"2026-05-11T12:46:05.578456Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2505.06413","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2505.06413 , year=","venue":null,"work_id":"3a7a5133-d1f6-4a6f-b21a-4cea90842f0a","year":2025},"citing_paper":{"arxiv_id":"2605.10386","last_updated":"2026-05-11T11:28:03Z","snapshot_observed_at":"2026-08-16T17:39:49.769592Z","submitted_at":"2026-05-11T11:28:03Z","title":"GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-05-12T05:17:42.003708Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2605.10386"},"observation_digest":"sha256:697bfd0b366d3ae9167c84b27f68446c28b0f17ffe984ad75dfe6c94bc6afbce","observation_id":"58f9463a-acab-4157-8357-f4f38abf4dd9","resolution":{"observed_at":"2026-05-12T05:21:26.969346Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2505.06413","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2505.06413 , year=","venue":null,"work_id":"3a7a5133-d1f6-4a6f-b21a-4cea90842f0a","year":2025},"citing_paper":{"arxiv_id":"2605.15711","last_updated":"2026-05-15T08:01:32Z","snapshot_observed_at":"2026-08-16T20:30:55.833411Z","submitted_at":"2026-05-15T08:01:32Z","title":"EntropyScan: Towards Model-level Backdoor Detection in LVLMs via Visual Attention Entropy","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-20T19:46:49.000647Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2605.15711"},"observation_digest":"sha256:5ea5abe68f42bd6719e9648ce7f9e43c73952e21677eb7545910b55f0d6e91ef","observation_id":"0dd8ebe1-fb08-4bda-a692-c3366b1a4893","resolution":{"observed_at":"2026-05-20T19:48:57.428969Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2505.06413","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06413","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2505.06413 , year=","venue":null,"work_id":"3a7a5133-d1f6-4a6f-b21a-4cea90842f0a","year":2025},"citing_paper":{"arxiv_id":"2605.22365","last_updated":"2026-05-25T01:50:16Z","snapshot_observed_at":"2026-08-17T08:20:06.573438Z","submitted_at":"2026-05-21T11:58:46Z","title":"TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting","version":1},"reference_index":114,"source":"arxiv_source","source_observed_at":"2026-05-22T05:29:52.758898Z"},"links":{"cited_paper":"/paper/2505.06413","citing_paper":"/paper/2605.22365"},"observation_digest":"sha256:dbff12f7293045324d502896790e6ddb48a70245ce122818e9a11d8e725e79b8","observation_id":"fab5159d-d989-4993-9e1b-e065040df6e1","resolution":{"observed_at":"2026-05-22T05:31:07.642580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.06413/citation-record","integrity":"/paper/2505.06413/integrity","json":"/paper/2505.06413/citation-record.json","paper":"/paper/2505.06413"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.14219","last_updated":"2024-08-30T21:17:17Z","snapshot_observed_at":"2026-08-17T03:25:04.404839Z","submitted_at":"2024-04-22T14:32:33Z","title":"Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.14219","snapshot_observed_at":"2026-08-15T22:46:49.441780Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.441780Z"},"links":{"cited_paper":"/paper/2404.14219","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:46087603886022455e076827282dd985639ba7829aa56c9975f018a5e9e8f514","observation_id":"19397857-f997-43e6-b692-389c2eb10a4e","resolution":{"observed_at":"2026-08-15T22:46:49.441780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-08-20T15:31:01.041088Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-15T22:46:49.446928Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.446928Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:1d530d04033972216fda249b5c18550a1b4f02d5a6f39f706534ea6134e9ff99","observation_id":"87ecc4a6-4304-4c00-9b93-8d3a74e447d2","resolution":{"observed_at":"2026-08-15T22:46:49.446928Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15818","last_updated":"2023-07-28T21:18:02Z","snapshot_observed_at":"2026-08-02T16:17:50.621617Z","submitted_at":"2023-07-28T21:18:02Z","title":"RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15818","snapshot_observed_at":"2026-08-15T22:46:49.451939Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.451939Z"},"links":{"cited_paper":"/paper/2307.15818","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:b6544471697c1e60dbad5e0bd527b70aa6867aaa15bdb7644028e80c537f22d0","observation_id":"1e0e279c-366e-4076-8023-77c3e6e524c0","resolution":{"observed_at":"2026-08-15T22:46:49.451939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.457808Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.457808Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:84c2be42aca5eb4d85474a445c1feaad7378eb435a5c09021f307ffc160b3360","observation_id":"e462b274-dc18-4d13-b3ac-269dff081517","resolution":{"observed_at":"2026-08-15T22:46:49.457808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.967353Z","title":null,"venue":null,"work_id":"0917d700-b466-492d-9bf7-edc49143808f","year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.462275Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:7b8c4514ea52ec65115abdd3950c7b6843beb75c38ec179109b4dd4c9c94344d","observation_id":"c265db92-714a-4f72-9257-7398ed075a59","resolution":{"observed_at":"2026-08-15T22:46:50.972253Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-15T22:46:49.466680Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.466680Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:c2a369783b62da4259496028a6681f54bf2d6f534ced05e81cae03a1159bbcb1","observation_id":"24df9c5f-5841-4c8d-a589-6d41b0e4a257","resolution":{"observed_at":"2026-08-15T22:46:49.466680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.952239Z","title":null,"venue":null,"work_id":"827e16cd-ff54-4d7d-bdb6-1e1e3631ab21","year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.472023Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:959e1f2626503f7a0ab3937c73073781cfd144b7adac09b3f0c90d2f4b4663eb","observation_id":"2027b686-56ae-4bde-93f4-fec772257ae5","resolution":{"observed_at":"2026-08-15T22:46:50.956731Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.476202Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.476202Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:36c570e7592fbb8d954a9e017c3d4e8d4f0d4c4602edc50bfc3a74e65436bfdb","observation_id":"a09d8690-82f6-41f2-8e38-feaa4b8575a0","resolution":{"observed_at":"2026-08-15T22:46:49.476202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.480289Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.480289Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:c666c62b734cd7003d64210219801d32cf4dc062e19fdffa4e9ee55fac448422","observation_id":"56cb1559-564e-41ec-ad99-da2e191cb39d","resolution":{"observed_at":"2026-08-15T22:46:49.480289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14432","last_updated":"2025-05-02T16:03:31Z","snapshot_observed_at":"2026-08-17T16:49:55.394145Z","submitted_at":"2024-11-21T18:59:55Z","title":"Insight-V: Exploring Long-Chain Visual Reasoning with Multimodal Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14432","snapshot_observed_at":"2026-08-15T22:46:49.484445Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.484445Z"},"links":{"cited_paper":"/paper/2411.14432","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:8cd74316b882a2faffc16b14c8c727314c28a25f5ead6a925e07604f5e31287d","observation_id":"f88d9221-0fb9-4f40-8093-c65f6ccc47ca","resolution":{"observed_at":"2026-08-15T22:46:49.484445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.928596Z","title":"Everingham, S","venue":null,"work_id":"cd1069ff-41f7-45b2-8118-3205bf5f91a7","year":2015},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.488890Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:5d06511738a675405611b8877627030f1f63ffc95eaf8ff19abeb556bc2ed808","observation_id":"9d9e785f-06f4-44c6-8068-ff75a491ee8d","resolution":{"observed_at":"2026-08-15T22:46:50.933338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.914080Z","title":null,"venue":null,"work_id":"cae0d119-ef8e-4ea6-a2f1-59b108d1a45f","year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.493360Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:af1d3b30f35320d1326204d29552784027849da3075620fa6dab58af5e3f5a6e","observation_id":"7898d171-a7e9-4d98-b6af-07d08f55699b","resolution":{"observed_at":"2026-08-15T22:46:50.918616Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.11170","last_updated":"2024-03-22T15:31:39Z","snapshot_observed_at":"2026-08-16T14:25:58.105109Z","submitted_at":"2024-01-20T08:46:06Z","title":"Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.11170","snapshot_observed_at":"2026-08-15T22:46:49.497562Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.497562Z"},"links":{"cited_paper":"/paper/2401.11170","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:d563e714d0474ba1e77f933c138571b1ed2c51b63aa103388a6178fabb48988f","observation_id":"24064e97-9938-4eee-99d9-168219432228","resolution":{"observed_at":"2026-08-15T22:46:49.497562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.15010","last_updated":"2023-04-28T17:59:25Z","snapshot_observed_at":"2026-08-12T23:40:42.885633Z","submitted_at":"2023-04-28T17:59:25Z","title":"LLaMA-Adapter V2: Parameter-Efficient Visual Instruction Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.15010","snapshot_observed_at":"2026-08-15T22:46:49.502461Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.502461Z"},"links":{"cited_paper":"/paper/2304.15010","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:33ced6d90e1b8653cc83d771e403e1a6f6b76bae0520c496dee65d5e8fc274a9","observation_id":"5b537212-c225-43ea-a87c-700a027663f0","resolution":{"observed_at":"2026-08-15T22:46:49.502461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.10760","last_updated":"2020-08-02T08:38:25Z","snapshot_observed_at":"2026-08-14T12:42:44.861746Z","submitted_at":"2020-07-21T12:49:12Z","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.10760","snapshot_observed_at":"2026-08-15T22:46:49.507490Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.507490Z"},"links":{"cited_paper":"/paper/2007.10760","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:4539c6875d83ba5bf7830a183f6797e6dc89b6f9626597875cf9719d0d980305","observation_id":"511b8185-c636-4589-86d3-fda10605f7cf","resolution":{"observed_at":"2026-08-15T22:46:49.507490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.511923Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.511923Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:6b4f1ddc871339102624b33146d983af517fa0734b55d8dcaac1d2ec5d63f04a","observation_id":"c63b075e-e362-4287-9b6c-2aaa72a65c9c","resolution":{"observed_at":"2026-08-15T22:46:49.511923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.13864","last_updated":"2025-07-29T17:24:25Z","snapshot_observed_at":"2026-08-20T10:54:34.483501Z","submitted_at":"2024-09-20T19:28:48Z","title":"Persistent Backdoor Attacks in Continual Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.13864","snapshot_observed_at":"2026-08-15T22:46:49.516245Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.516245Z"},"links":{"cited_paper":"/paper/2409.13864","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:faf02d909328ec2e36efbf0736b70b81032f83cc40d01795198286a3a2b2285e","observation_id":"0c993e11-657b-4285-8c98-82b1ea80b15c","resolution":{"observed_at":"2026-08-15T22:46:49.516245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05885","last_updated":"2024-10-02T13:46:39Z","snapshot_observed_at":"2026-08-19T20:32:28.095054Z","submitted_at":"2024-05-09T16:17:41Z","title":"VLM-Auto: VLM-based Autonomous Driving Assistant with Human-like Behavior and Understanding for Complex Road Scenes","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05885","snapshot_observed_at":"2026-08-15T22:46:49.521095Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.521095Z"},"links":{"cited_paper":"/paper/2405.05885","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:73337c11bdf92c39a8b00cac7987344c1a0ed4562f4b6a498653b22e51779f6f","observation_id":"91f5957a-5a10-4072-970e-b0b1381db4ea","resolution":{"observed_at":"2026-08-15T22:46:49.521095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.899249Z","title":null,"venue":null,"work_id":"81a9169e-1538-406d-8620-49d03870af7b","year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.525555Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:215464726b7284c0323316fa3dc608337b68bf8ffb33af25b42b7f0140ed59f5","observation_id":"00d5cb1a-7028-430c-b10e-031f6b02514a","resolution":{"observed_at":"2026-08-15T22:46:50.903970Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.530221Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.530221Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:acfd12b4600753f7742f276daf63657fbd4629bef5a9db26f7da9801638a5957","observation_id":"f15ee2cd-9f12-4143-a1e9-68ea9aee963a","resolution":{"observed_at":"2026-08-15T22:46:49.530221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11473","last_updated":"2024-02-18T06:31:05Z","snapshot_observed_at":"2026-08-16T22:50:36.518159Z","submitted_at":"2024-02-18T06:31:05Z","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11473","snapshot_observed_at":"2026-08-15T22:46:49.534783Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.534783Z"},"links":{"cited_paper":"/paper/2402.11473","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:44462d00d5d2f6be98ac6b522c48ea8677de5a2067ba318d447ae484408d8bb7","observation_id":"6848671e-792e-462d-a4cd-89f0fc69bea2","resolution":{"observed_at":"2026-08-15T22:46:49.534783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-15T22:46:49.539496Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.539496Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:1a81406924b8f7c43dc5912e0ec3137b6c44202c0cbb2b34a144388914de743a","observation_id":"4c33e723-8bbd-48c8-b624-07daa3f74884","resolution":{"observed_at":"2026-08-15T22:46:49.539496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18844","last_updated":"2024-12-16T06:59:33Z","snapshot_observed_at":"2026-08-19T22:03:00.230466Z","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18844","snapshot_observed_at":"2026-08-15T22:46:49.544226Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.544226Z"},"links":{"cited_paper":"/paper/2406.18844","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:06d80ae6027b1528bbd9cc6e1d460925619bbee64a904c446fcdd4d6ddd64cec","observation_id":"fe661b74-ad00-43dc-b17f-e8d4d033140b","resolution":{"observed_at":"2026-08-15T22:46:49.544226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12075","last_updated":"2024-03-04T13:59:22Z","snapshot_observed_at":"2026-08-16T14:41:59.499521Z","submitted_at":"2023-11-20T02:21:49Z","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12075","snapshot_observed_at":"2026-08-15T22:46:49.549181Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.549181Z"},"links":{"cited_paper":"/paper/2311.12075","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:3ebf505b8c1e3ee65e696d9ead855ad3ae343f5497649b22b9e33fcdc8865edd","observation_id":"95f1fe9b-533a-41dd-8e69-28b3a0754546","resolution":{"observed_at":"2026-08-15T22:46:49.549181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.15172","last_updated":"2023-12-23T05:51:40Z","snapshot_observed_at":"2026-08-19T03:01:16.016109Z","submitted_at":"2023-12-23T05:51:40Z","title":"Pre-trained Trojan Attacks for Visual Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.15172","snapshot_observed_at":"2026-08-15T22:46:49.553601Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.553601Z"},"links":{"cited_paper":"/paper/2312.15172","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:05e74811789613e9196d67163302d270ccb358a9ae2391351b7e3ffcb0d8c8f4","observation_id":"ee2ae512-ecbb-4ba1-b30b-a8aa89019d03","resolution":{"observed_at":"2026-08-15T22:46:49.553601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02882","last_updated":"2024-08-06T01:20:12Z","snapshot_observed_at":"2026-08-16T13:28:19.568054Z","submitted_at":"2024-08-06T01:20:12Z","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02882","snapshot_observed_at":"2026-08-15T22:46:49.558029Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.558029Z"},"links":{"cited_paper":"/paper/2408.02882","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:d1c22e5251c98f180b6b4f7302dd0e7ab8943d6777501f78c6d52f7937754f3f","observation_id":"211df849-6c3f-4dc2-b5c4-7937e5178487","resolution":{"observed_at":"2026-08-15T22:46:49.558029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.883690Z","title":null,"venue":null,"work_id":"ad1488d1-45e9-4f88-886f-347178e56492","year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.562652Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:265e64cc8e033ca1e42b6f9d54e1b9ca4d9d00b39e1b790a439d13815123fe4a","observation_id":"ca6ee6b0-ad9e-4e2a-a346-8f098b5ed047","resolution":{"observed_at":"2026-08-15T22:46:50.888200Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.567176Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.567176Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:383798c11d49fd40b4df7731345cc7405641dc75c6f1961e4918c921cd9703c4","observation_id":"16d18a10-2dcf-49d3-8c6f-d02c0e5becd2","resolution":{"observed_at":"2026-08-15T22:46:49.567176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.18511","last_updated":"2025-02-22T12:55:28Z","snapshot_observed_at":"2026-08-17T17:03:15.361896Z","submitted_at":"2025-02-22T12:55:28Z","title":"ELBA-Bench: An Efficient Learning Backdoor Attacks Benchmark for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.18511","snapshot_observed_at":"2026-08-15T22:46:49.571374Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.571374Z"},"links":{"cited_paper":"/paper/2502.18511","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:14db14220af672eaf736b7358398bdaa0b32bef4a5cb65775756d1caba2172a1","observation_id":"102292ef-b1e7-4814-8660-c2046529b413","resolution":{"observed_at":"2026-08-15T22:46:49.571374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.575970Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.575970Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:107fd34cc37a09f21f94f1e60850f8ef5b4a9b8c85b03e968200816d34e7ab83","observation_id":"6eec2172-e63d-4ded-a0f1-1b13590a320b","resolution":{"observed_at":"2026-08-15T22:46:49.575970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12966","last_updated":"2024-03-21T16:26:44Z","snapshot_observed_at":"2026-08-20T09:25:27.365609Z","submitted_at":"2024-03-19T17:59:52Z","title":"Chain-of-Spot: Interactive Reasoning Improves Large Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12966","snapshot_observed_at":"2026-08-15T22:46:49.580167Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.580167Z"},"links":{"cited_paper":"/paper/2403.12966","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:06cfbf11a04ba8043088e36101ab79b42fc83f4483a47b67eaa01c79dfaa6791","observation_id":"68331950-8b18-41f1-add1-4b8f37427f38","resolution":{"observed_at":"2026-08-15T22:46:49.580167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-15T22:46:49.584660Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.584660Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:c93f399687d624543c0c5a14b2f87d057ffe04d43b586ccd174ce43d4fd5431f","observation_id":"5066049a-ab04-4ef0-bbe0-570ce42b4938","resolution":{"observed_at":"2026-08-15T22:46:49.584660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00438","last_updated":"2023-12-01T09:10:33Z","snapshot_observed_at":"2026-08-19T15:16:18.882142Z","submitted_at":"2023-12-01T09:10:33Z","title":"Dolphins: Multimodal Language Model for Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.00438","snapshot_observed_at":"2026-08-15T22:46:49.589275Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.589275Z"},"links":{"cited_paper":"/paper/2312.00438","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:f3247284ee37f1de7d2f8ba77f369f657b8e2090c94e63fc9822fac2cd052873","observation_id":"96dabfef-6f05-4c3e-9f54-f162ed66ddf5","resolution":{"observed_at":"2026-08-15T22:46:49.589275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.593960Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.593960Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:9b2e53a4d2e590cb56742411ed9ce2634331c96bd190a3775a2b07b202afa692","observation_id":"ec34260c-9325-4c37-91e9-ba4dc5d4f15c","resolution":{"observed_at":"2026-08-15T22:46:49.593960Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-16T18:44:13.954731Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-15T22:46:49.598434Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.598434Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:3b106b545cd58377a5a588785aa9dc70b40f063d2f9f4c53159d8c9268c1540f","observation_id":"643770f3-0b0b-4e86-b825-921c4446f549","resolution":{"observed_at":"2026-08-15T22:46:49.598434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.848978Z","title":null,"venue":null,"work_id":"28fa06ed-0508-4ccb-859d-0adb7232e24e","year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.603539Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:f9b93ccd7bef50e4f6cab7823f192c9ff40220418af12034062149b2e903b266","observation_id":"00b13a97-251e-4f0d-8925-81dfdf36dfa1","resolution":{"observed_at":"2026-08-15T22:46:50.853714Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"5026.2022","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.065620Z","title":null,"venue":null,"work_id":"f4328d29-5c75-4eb7-94c7-1b90eff10c5a","year":2022},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.607727Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:d72517ca06b239ccda7e969e3a79cdd6c4120167bf463e25c34048e6f614a9cc","observation_id":"95578ee8-ce04-44bc-ab24-60531d7cd078","resolution":{"observed_at":"2026-08-15T22:46:50.072929Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14150","last_updated":"2025-01-16T10:57:44Z","snapshot_observed_at":"2026-08-19T12:47:50.220214Z","submitted_at":"2023-12-21T18:59:12Z","title":"DriveLM: Driving with Graph Visual Question Answering","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14150","snapshot_observed_at":"2026-08-15T22:46:49.611878Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.611878Z"},"links":{"cited_paper":"/paper/2312.14150","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:9d74889092d290e6fc2a6b72d7ce0c8c8fa29e60098170cad33706c62f06e907","observation_id":"6933f228-cc5b-4d3f-965a-90707ce14eaa","resolution":{"observed_at":"2026-08-15T22:46:49.611878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.834344Z","title":null,"venue":null,"work_id":"519006d5-37ee-4d75-a491-e7563ca84e36","year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.616416Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:e17665333545758d2259c3309454862d2d4a35b533698f2c9372251700e78afe","observation_id":"0eb2f877-3d82-4a92-b0e7-4e07a6718545","resolution":{"observed_at":"2026-08-15T22:46:50.838946Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.620596Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.620596Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:3be9d394ae61db00c44e4ffd3b222662ebf4c3337d766bca6312400c9901b1e4","observation_id":"7d38f813-db5f-48c9-8a4b-a109b9486e74","resolution":{"observed_at":"2026-08-15T22:46:49.620596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.808457Z","title":null,"venue":null,"work_id":"6e300afe-47ed-4bef-8ac6-a121b7e29570","year":null},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.629520Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:2ba2f6eede69888b24bfd27bfc7041caa3ad33ec9c77db5623359d882a86ac3b","observation_id":"6eb364a6-5d25-44e0-90c4-ec5bae73f3e7","resolution":{"observed_at":"2026-08-15T22:46:50.813233Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12289","last_updated":"2024-06-25T17:55:35Z","snapshot_observed_at":"2026-08-13T08:07:31.942031Z","submitted_at":"2024-02-19T17:04:04Z","title":"DriveVLM: The Convergence of Autonomous Driving and Large Vision-Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12289","snapshot_observed_at":"2026-08-15T22:46:49.638732Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.638732Z"},"links":{"cited_paper":"/paper/2402.12289","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:7fb4ff5e823db1a5970087aca46adee32627891da80c882a56d971f1ae87012a","observation_id":"8d0dd24e-de3b-4313-8e7b-532b35b9b509","resolution":{"observed_at":"2026-08-15T22:46:49.638732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12191","last_updated":"2024-10-03T15:54:49Z","snapshot_observed_at":"2026-08-06T05:35:29.109022Z","submitted_at":"2024-09-18T17:59:32Z","title":"Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolution","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12191","snapshot_observed_at":"2026-08-15T22:46:49.647538Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.647538Z"},"links":{"cited_paper":"/paper/2409.12191","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:6640a1c1a8ef898c53ac666f1310c12cd65e2e442d208ccb1e94d950fa8db1fc","observation_id":"4a6f3d03-8d16-4b12-9bf3-e0560df2d379","resolution":{"observed_at":"2026-08-15T22:46:49.647538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00816","last_updated":"2024-06-24T15:40:01Z","snapshot_observed_at":"2026-08-16T15:27:27.256613Z","submitted_at":"2023-06-01T15:42:06Z","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.00816","snapshot_observed_at":"2026-08-15T22:46:49.651691Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.651691Z"},"links":{"cited_paper":"/paper/2306.00816","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:4e8b4440372b43eac14e7123505b56b43afcf3fee8e68ad057174e36d8dff408","observation_id":"6afe1a06-4867-4705-849a-0c78d12c57c8","resolution":{"observed_at":"2026-08-15T22:46:49.651691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.792400Z","title":null,"venue":null,"work_id":"39b94c00-c243-4a40-8a8f-b3c4841dc65b","year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.656121Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:69ccdebf6663716cf866dbcaabb80ce9ddf368a998a0c412508f727beea1c8f3","observation_id":"3ff99cfc-76a2-4b5a-80ff-627c8c1f9d83","resolution":{"observed_at":"2026-08-15T22:46:50.797944Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.776756Z","title":null,"venue":null,"work_id":"df68f96a-2c62-4283-b1b9-4f70abfcfe5a","year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.660406Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:ee12d3a618e62799d3c22d1d8737e1f66c9a075973c1a7ae5d233a2b1ab019eb","observation_id":"be98815b-0d05-47b3-aff2-55dcd863e313","resolution":{"observed_at":"2026-08-15T22:46:50.781398Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00746","last_updated":"2024-12-01T09:52:48Z","snapshot_observed_at":"2026-08-19T13:50:33.499116Z","submitted_at":"2024-12-01T09:52:48Z","title":"BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.00746","snapshot_observed_at":"2026-08-15T22:46:49.665046Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.665046Z"},"links":{"cited_paper":"/paper/2412.00746","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:27fcb19b32b2635aa2309bc64e7b260710a58221ccc5d3a0a8fe60a0afdd3982","observation_id":"f362c2e6-c66d-40bf-b10a-e4e44c9282cd","resolution":{"observed_at":"2026-08-15T22:46:49.665046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.762278Z","title":null,"venue":null,"work_id":"3c2732af-a809-4f09-86ac-0daf3eaafc9a","year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.671402Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:c41fe8670a865639f1a283f3298ac5d01ed431fc33f252fba32d8d465b33b846","observation_id":"6b1f7f3b-b5a7-4c40-ac5f-c82a021779f4","resolution":{"observed_at":"2026-08-15T22:46:50.766778Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.745984Z","title":null,"venue":null,"work_id":"8209fa2e-8253-4a64-a17f-8be551c2c2c0","year":2022},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.676136Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:411362514c3f85b5bde3c342ab15d04dad0c8ecce11805ce6f3687ba267395b2","observation_id":"97cb7f24-fe9d-46bf-a9a6-c0072d13ebf7","resolution":{"observed_at":"2026-08-15T22:46:50.750942Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.731249Z","title":null,"venue":null,"work_id":"1cbbd630-4033-4126-8a19-e11b71a6c8e5","year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.680721Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:0c28fff1fe040fe81a1b4c3ac9b2abd4680e4c1738baca686da94a6fdbf6a78c","observation_id":"f1fbb01d-216e-4851-94ed-70c4b8f44e0f","resolution":{"observed_at":"2026-08-15T22:46:50.735648Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.13164","last_updated":"2022-01-31T12:19:28Z","snapshot_observed_at":"2026-08-16T21:11:37.365341Z","submitted_at":"2022-01-31T12:19:28Z","title":"Imperceptible and Multi-channel Backdoor Attack against Deep Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.13164","snapshot_observed_at":"2026-08-15T22:46:49.685388Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.685388Z"},"links":{"cited_paper":"/paper/2201.13164","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:9c55c744c21cdfe0843cd8a36f549b1951601c636a259eb34835aa8f5f4f6395","observation_id":"d4bd2b61-4bed-40d6-b577-412a01a65f0a","resolution":{"observed_at":"2026-08-15T22:46:49.685388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:50.716415Z","title":null,"venue":null,"work_id":"f2db477d-8d57-41a4-96d6-6f54382afc96","year":2025},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.689876Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:3f1e34a60f60b29939950f560b999f21c9cf3fca4842d0b0d8621f1593315e15","observation_id":"5f46bc19-9fe6-45e9-8bba-4e40d862640c","resolution":{"observed_at":"2026-08-15T22:46:50.720987Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01043","last_updated":"2024-08-12T11:53:28Z","snapshot_observed_at":"2026-08-20T15:58:21.086463Z","submitted_at":"2023-11-02T07:23:33Z","title":"LLM4Drive: A Survey of Large Language Models for Autonomous Driving","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01043","snapshot_observed_at":"2026-08-15T22:46:49.694217Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.694217Z"},"links":{"cited_paper":"/paper/2311.01043","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:598a1c0b033b6c5f563409d5acbb93dfcb386cfff5c2a3158c134b15bca7d87c","observation_id":"6b0a9334-8c59-49e0-80b4-cd733c1f6267","resolution":{"observed_at":"2026-08-15T22:46:49.694217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09251","last_updated":"2025-06-19T05:02:13Z","snapshot_observed_at":"2026-08-20T01:24:47.056874Z","submitted_at":"2024-08-17T16:42:13Z","title":"V2X-VLM: End-to-End V2X Cooperative Autonomous Driving Through Large Vision-Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09251","snapshot_observed_at":"2026-08-15T22:46:49.698754Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.698754Z"},"links":{"cited_paper":"/paper/2408.09251","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:02588f41845c23f2962c85618845da1c0ecd0dcc42855a982817ab70bc79e670","observation_id":"21f4e39e-cd7d-47e1-bd27-985409ba926a","resolution":{"observed_at":"2026-08-15T22:46:49.698754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.703508Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.703508Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:7311139caacfe21dda34a7d37f368d53f4d93fab655e0d848aed855362053a1e","observation_id":"e10cda93-8cfe-4a27-8504-c1a176e9f562","resolution":{"observed_at":"2026-08-15T22:46:49.703508Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:46:49.707782Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.707782Z"},"links":{"citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:0bae003388b5a58e3b19c097cba6790d006ae705deff990c490a12f0ce0de368","observation_id":"2bad9622-e6a5-4ff7-afa7-dd3c5d14e232","resolution":{"observed_at":"2026-08-15T22:46:49.707782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.16134","last_updated":"2024-05-30T04:45:11Z","snapshot_observed_at":"2026-08-18T06:56:56.051501Z","submitted_at":"2024-05-25T08:57:30Z","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.16134","snapshot_observed_at":"2026-08-15T22:46:49.716932Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.716932Z"},"links":{"cited_paper":"/paper/2405.16134","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:e4b9a15a1d18546dac3528f0721e15bb20ae0fad18b52b86634574821c1fe881","observation_id":"ca394c50-2826-47ad-89a3-d546093a9ca8","resolution":{"observed_at":"2026-08-15T22:46:49.716932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.08970","last_updated":"2022-10-13T16:01:36Z","snapshot_observed_at":"2026-08-16T18:16:38.552318Z","submitted_at":"2021-06-16T17:09:55Z","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","version":3},"cited_work":{"arxiv_id":"2106.08970","doi":null,"metadata_source":"pith","pith_arxiv_id":"2106.08970","snapshot_observed_at":"2026-08-15T22:46:49.978066Z","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","venue":"cs.LG","work_id":"4209237e-fa6d-4aa8-a7a7-fd386b7946e0","year":2021},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.624849Z"},"links":{"cited_paper":"/paper/2106.08970","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:1963ab2889417b2bb0dbc5c0d8b6776812abaf29b29a02a4736ba95e19781ab8","observation_id":"c85567e7-785e-4b66-a050-26c574f1ea98","resolution":{"observed_at":"2026-08-15T22:46:49.986044Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.00905","last_updated":"2023-10-25T21:45:24Z","snapshot_observed_at":"2026-08-16T15:51:32.614520Z","submitted_at":"2023-03-02T01:55:10Z","title":"Open-World Object Manipulation using Pre-trained Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.00905","snapshot_observed_at":"2026-08-15T22:46:49.633836Z","title":"arXiv preprint arXiv:2303.00905 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.633836Z"},"links":{"cited_paper":"/paper/2303.00905","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:28c1ba95b0781d5213c9f6e317ca2078cb90a471cc2fe69e2c52c130f3ced97e","observation_id":"dd0564b7-9a9c-453f-b88e-85f2dd403a3e","resolution":{"observed_at":"2026-08-15T22:46:49.633836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05553","last_updated":"2024-07-01T10:27:42Z","snapshot_observed_at":"2026-08-19T14:16:33.578339Z","submitted_at":"2024-05-09T05:23:34Z","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05553","snapshot_observed_at":"2026-08-15T22:46:49.712361Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.712361Z"},"links":{"cited_paper":"/paper/2405.05553","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:7aae27f550e048bf1009f27b85c4dc86415e24b014fd3babd38d3a2354198bde","observation_id":"a7c06e9a-ade4-4634-8164-6e5bf71fbe5c","resolution":{"observed_at":"2026-08-15T22:46:49.712361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":2,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":55,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 8 inbound Pith citation observations for arXiv:2505.06413."}