{"as_of":"2026-08-16T07:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b2516233cb846dfa0a9e8bdf551bf874a74d8d4203bfbb2dcf3097d44d2f948b","coverage":[{"denominator":6,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T21:36:15.248552Z","state":"measured"},{"denominator":6,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":6,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.18172/citation-record","integrity":"/paper/2505.18172/integrity","json":"/paper/2505.18172/citation-record.json","paper":"/paper/2505.18172"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-13T10:52:15.726610Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-15T21:36:15.223437Z","title":"arXiv:2307.10490 [cs.CR], 3rd Oct 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T21:36:15.223437Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2505.18172"},"observation_digest":"sha256:e329c063af6f0635868ed4b13248b4ce7de6898796e04a9fa5ca496023af9bd2","observation_id":"6beaf93c-dcf3-444d-b502-f11169d5a586","resolution":{"observed_at":"2026-08-15T21:36:15.223437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.15897","last_updated":"2024-08-27T18:23:44Z","snapshot_observed_at":"2026-08-15T11:59:12.117906Z","submitted_at":"2024-01-29T05:46:14Z","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.15897","snapshot_observed_at":"2026-08-15T21:36:15.228572Z","title":"Lipton, Hoda Heidari, Red-Teaming for Generative AI: Silver Bullet or Security Theater? arXiv:2401.15897 [cs.CY], 27th Aug 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T21:36:15.228572Z"},"links":{"cited_paper":"/paper/2401.15897","citing_paper":"/paper/2505.18172"},"observation_digest":"sha256:c7e5681115ec66ea3f1bd6294feee39da9baec49bde18348d02ee7427edb57de","observation_id":"71cd4eda-7962-4309-af21-f4e019217f80","resolution":{"observed_at":"2026-08-15T21:36:15.228572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14122","last_updated":"2024-10-17T03:34:21Z","snapshot_observed_at":"2026-08-13T10:05:33.843284Z","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14122","snapshot_observed_at":"2026-08-15T21:36:15.232968Z","title":"arXiv:2309.14122 [cs.CV], 17th Oct 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T21:36:15.232968Z"},"links":{"cited_paper":"/paper/2309.14122","citing_paper":"/paper/2505.18172"},"observation_digest":"sha256:ee0afed6fb5b11add23b5a5d72da02cf51ddcef905471eb6e56d216487c86efe","observation_id":"adcc0633-faa9-4eaa-ba80-8083bb30bb8b","resolution":{"observed_at":"2026-08-15T21:36:15.232968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.12082","last_updated":"2023-11-10T19:15:20Z","snapshot_observed_at":"2026-08-13T11:38:21.104427Z","submitted_at":"2023-05-20T03:41:45Z","title":"SneakyPrompt: Jailbreaking Text-to-image Generative Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.12082","snapshot_observed_at":"2026-08-15T21:36:15.237621Z","title":"arXiv:2305.12082 [cs.LG], 10th Nov 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T21:36:15.237621Z"},"links":{"cited_paper":"/paper/2305.12082","citing_paper":"/paper/2505.18172"},"observation_digest":"sha256:738f4594cd2bdd272103e5ffbedabf48e39f61474c419233aaa85ee26193308a","observation_id":"44ae3983-ca49-48bf-b32c-662942dc61bf","resolution":{"observed_at":"2026-08-15T21:36:15.237621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11755","last_updated":"2024-02-19T00:53:48Z","snapshot_observed_at":"2026-08-13T21:24:47.634755Z","submitted_at":"2024-02-19T00:53:48Z","title":"SPML: A DSL for Defending Language Models Against Prompt Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11755","snapshot_observed_at":"2026-08-15T21:36:15.243888Z","title":"arXiv:2402.11755 [cs.LG], 19th Feb 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T21:36:15.243888Z"},"links":{"cited_paper":"/paper/2402.11755","citing_paper":"/paper/2505.18172"},"observation_digest":"sha256:1538743b6babfb357241e93285f2e997988e14bc5bfe17966148a48e05f6e48c","observation_id":"88fcd084-e6be-40c9-99bf-5b36413b2d47","resolution":{"observed_at":"2026-08-15T21:36:15.243888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:36:15.465932Z","title":"UA O ] e R]U 'A @RVV&wͅ9s @ +p >w^VbZ= ]rc #fep e4s; @ @ @ fG`o\\蜝 r @ @ @+W, Ñpx @ @ @ R 3ϵm( N 6","venue":null,"work_id":"16f378fd-9b0f-4118-975d-bae5d797d2c9","year":null},"citing_paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T21:36:15.248552Z"},"links":{"citing_paper":"/paper/2505.18172"},"observation_digest":"sha256:ec952978a0c5de4229f0f3cec78789030c94797f7fdf2a9262741a35c8c4f740","observation_id":"5b62e853-d243-4321-af57-7a6cce51af45","resolution":{"observed_at":"2026-08-15T21:36:15.471704Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.18172","last_updated":"2025-05-14T12:55:05Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T21:31:58.014683Z","submitted_at":"2025-05-14T12:55:05Z","title":"GenAI Security: Outsmarting the Bots with a Proactive Testing Framework"},"reference_resolution":{"displayed":6,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":6},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 6 of 6 outbound references and 0 inbound Pith citation observations for arXiv:2505.18172."}