{"as_of":"2026-08-10T12:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4834c45b7f42ae8c667642ce57606914aa799bce0c8c071f62689218ee1bf82d","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:21:42.346479Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T12:36:44.253836Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T02:59:25.273490Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2604.22552","last_updated":"2026-04-24T13:45:11Z","snapshot_observed_at":"2026-07-06T23:08:56.419589Z","submitted_at":"2026-04-24T13:45:11Z","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T12:27:14.499810Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2604.22552"},"observation_digest":"sha256:8bb1fe51a8c83f33b5a819d89051115e6a0228f4afba0c9aab55ae435e5559b9","observation_id":"ea248668-5f1a-44d3-b223-564b66d90c86","resolution":{"observed_at":"2026-05-11T19:16:08.022968Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2604.23105","last_updated":"2026-04-25T02:00:01Z","snapshot_observed_at":"2026-08-02T21:29:37.320382Z","submitted_at":"2026-04-25T02:00:01Z","title":"Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T08:32:18.670096Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2604.23105"},"observation_digest":"sha256:3da4c7bb6b1728dc40c83004a96a1d5c4f33525f51eb4413646d259136f84f98","observation_id":"cc8e46ee-6eca-402a-9c50-bac5ec6150b8","resolution":{"observed_at":"2026-05-11T20:36:08.954153Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2605.10253","last_updated":"2026-05-11T09:22:53Z","snapshot_observed_at":"2026-07-06T23:22:13.774652Z","submitted_at":"2026-05-11T09:22:53Z","title":"Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-05-12T05:29:41.946357Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2605.10253"},"observation_digest":"sha256:76ba564f4f8c0dc578f315b11c006194696c57c264fe6d462727b36d9722c677","observation_id":"f807f4e1-2291-4076-9ca0-51efa30d9a07","resolution":{"observed_at":"2026-05-12T05:31:23.683665Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":"2505.23828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-04T02:59:25.273490Z","title":"Spa-vlm: Stealthy poisoning attacks on rag-based vlm","venue":null,"work_id":"1dc135ff-de24-4a23-870a-f64383d13c55","year":2025},"citing_paper":{"arxiv_id":"2606.19736","last_updated":"2026-06-18T03:00:43Z","snapshot_observed_at":"2026-08-10T00:12:38.469889Z","submitted_at":"2026-06-18T03:00:43Z","title":"VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-26T18:45:43.733268Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2606.19736"},"observation_digest":"sha256:e66bc4fd361ee928622ccaf8505e42fe1a8eefec2ef39eafeb31948a2fc60a4b","observation_id":"87f325dc-e554-4200-a2ef-724c9ac6d6da","resolution":{"observed_at":"2026-07-04T02:59:25.275804Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-06T18:15:05.904038Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:de01460746bf4ef64b89b01ed5446f470ac25b5b4d42405a48e48d726192f213","observation_id":"92160704-b664-48cc-9512-28fbb974dd52","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.23828/citation-record","integrity":"/paper/2505.23828/integrity","json":"/paper/2505.23828/citation-record.json","paper":"/paper/2505.23828"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:39.392740Z","title":"Survey of hallucination in natural language generation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.392740Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:537cbe602daf6c52be3a159362f2cc7a660bd3b957a80524f75f852708e135b1","observation_id":"529c4620-40d3-4113-aa05-3cbafec494d2","resolution":{"observed_at":"2026-08-07T13:21:39.392740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.866397Z","title":"Transforming healthcare education: Harnessing large language models for frontline health worker capacity building using retrieval-augmented generation,","venue":null,"work_id":"6909be2d-c29a-491e-adb3-f1b800f702f1","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.421876Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:58b06fb6f65c67943896f0672821b75bfb0cbc977c20b64a3939bafd99603ad8","observation_id":"b97802ee-5bcb-47ba-bfa2-49aafbe01463","resolution":{"observed_at":"2026-08-07T13:21:45.916794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.732172Z","title":"Potential for gpt technology to optimize future clinical decision-making using retrieval-augmented generation,","venue":null,"work_id":"dfeb81a7-b21e-417a-bde8-34f44509a7f7","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.518083Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:930cce975d0788ab88728be9592e52b25e14e7cf8fdbb22e9a016d7dea91204a","observation_id":"d02dc5e4-0919-47ab-836c-db2f29384ac5","resolution":{"observed_at":"2026-08-07T13:21:45.782414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.581484Z","title":"Chain of reference prompting helps llm to think like a lawyer,","venue":null,"work_id":"f1845d15-5d8d-4e45-bc99-1ee2272571d5","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.606706Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:3a66dc405d4ef293b32d9d411d6c917c514af3ad4092e3412de87f99a0807fa7","observation_id":"1a43bf60-b4a0-4512-8d7e-4c1ff5aa71c1","resolution":{"observed_at":"2026-08-07T13:21:45.637491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.16034","last_updated":"2021-06-30T13:01:33Z","snapshot_observed_at":"2026-08-08T04:59:56.661596Z","submitted_at":"2021-06-30T13:01:33Z","title":"AutoLAW: Augmented Legal Reasoning through Legal Precedent Prediction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.16034","snapshot_observed_at":"2026-08-07T13:21:39.682688Z","title":"Autolaw: augmented legal reasoning through legal precedent prediction,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.682688Z"},"links":{"cited_paper":"/paper/2106.16034","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:79f08542ff87fc84bc6680fef89b79efefe1e50b510d9f652de97c3598895161","observation_id":"96fab2b7-e261-4f54-a336-4e0a429af734","resolution":{"observed_at":"2026-08-07T13:21:39.682688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.384879Z","title":"Mycrunchgpt: A llm assisted framework for scientific machine learn- ing,","venue":null,"work_id":"88328920-9521-4538-a82d-536414e3b18a","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.763259Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:345f454cacbc8a0a70e845c7e367928c1c2fd4ad6b742436e69b4e2d3cda5622","observation_id":"f4a79b28-d50b-4070-a3b9-f57923bf5f88","resolution":{"observed_at":"2026-08-07T13:21:45.499498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04929","last_updated":"2023-11-03T19:41:09Z","snapshot_observed_at":"2026-08-07T23:46:27.304102Z","submitted_at":"2023-11-03T19:41:09Z","title":"An Interdisciplinary Outlook on Large Language Models for Scientific Research","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04929","snapshot_observed_at":"2026-08-07T13:21:39.835999Z","title":"An interdisciplinary outlook on large language models for scientific research,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.835999Z"},"links":{"cited_paper":"/paper/2311.04929","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:18fa6ff90ee0b53fb5058c3cb850ca875ee84c7565c8eca0ad22e90b19331e85","observation_id":"15d25f49-b42e-4948-b4be-4e726343a13e","resolution":{"observed_at":"2026-08-07T13:21:39.835999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:45.127580Z","title":"Opportunities for retrieval and tool augmented large language models in scientific facilities,","venue":null,"work_id":"4da7fa28-d5d7-4b7c-bd4b-d939e03925e5","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.900909Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:00c8bd848aa7d2a0f354cee83f847886772bdde4ba3e1aa49c28e0c9a827c40f","observation_id":"983ce030-0c50-4e21-9382-d59b44f52379","resolution":{"observed_at":"2026-08-07T13:21:45.273194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12735","last_updated":"2024-12-02T02:34:47Z","snapshot_observed_at":"2026-08-05T16:52:46.144105Z","submitted_at":"2024-07-17T16:55:42Z","title":"EchoSight: Advancing Visual-Language Models with Wiki Knowledge","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12735","snapshot_observed_at":"2026-08-07T13:21:39.948489Z","title":"Echosight: Advancing visual-language models with wiki knowledge,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:39.948489Z"},"links":{"cited_paper":"/paper/2407.12735","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:4d7a7da6c9d1f0cbd296b18ff1f5ae04d084f654840603d0c750da14627f6f24","observation_id":"6585cc9f-7072-4fe3-a5a7-a27ac79cb5cc","resolution":{"observed_at":"2026-08-07T13:21:39.948489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T13:21:40.020790Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.020790Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:23c7482fd81bd38df69b11b782d837b486b260469ecf999432687999cafc1540","observation_id":"fbf74ff2-eacd-4e67-a4e0-ef15b2f5fb08","resolution":{"observed_at":"2026-08-07T13:21:40.020790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-10T01:34:02.862915Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T13:21:40.107539Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.107539Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:262acd15a54c07ff35eb87a04a11b5743df5a6e781d707e2767c3a79b0087de0","observation_id":"bc749ad0-d4f3-4c11-bf0d-2d2ea5713ce2","resolution":{"observed_at":"2026-08-07T13:21:40.107539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T13:21:40.196536Z","title":"Poisoning re- trieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.196536Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:473123a9d50cde23b7de9ebcbc839da19e6e3deecb40c333a27d25e2bd9c61c1","observation_id":"1352cddc-bea4-444d-a0c2-ac35e9a1594a","resolution":{"observed_at":"2026-08-07T13:21:40.196536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20446","last_updated":"2025-02-04T14:35:38Z","snapshot_observed_at":"2026-08-10T04:06:38.482153Z","submitted_at":"2024-05-30T19:46:36Z","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20446","snapshot_observed_at":"2026-08-07T13:21:40.287773Z","title":"Is my data in your retrieval database? membership inference attacks against retrieval augmented generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.287773Z"},"links":{"cited_paper":"/paper/2405.20446","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:b5864019918bb62961c171ce4cae9663d782afad44fcefeca3e8632704e09143","observation_id":"eeedf574-7b1d-488a-8e1f-a0039365b93b","resolution":{"observed_at":"2026-08-07T13:21:40.287773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:40.381404Z","title":"Phantom: General trigger attacks on retrieval augmented language generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.381404Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:313f0c62be47803890f974e909ee9d3efb93faa8db40b761735ff5b4a5373209","observation_id":"459ca39b-2e64-4264-b250-6e2dffa39d30","resolution":{"observed_at":"2026-08-07T13:21:40.381404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.878177Z","title":"Poisoning web- scale training datasets is practical,","venue":null,"work_id":"b31b705e-7e68-4d4a-8bab-1c9104c3d381","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.463167Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:168fffac214729ba8bff52bd84e6e4ce70ffb4de88dfef631100857ced3e41cf","observation_id":"1f6563ac-2c47-43e2-bbfc-4c186e0a8660","resolution":{"observed_at":"2026-08-07T13:21:45.000137Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.635952Z","title":"Encyclopedic vqa: Visual questions about detailed properties of fine-grained categories,","venue":null,"work_id":"5a43eaf9-56e3-4c7b-a220-52b5051de9ee","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.569961Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:12c3b6c1e8177fbeac71eff825209c9580f5d97c74fc8a6ee21bce69f7731e46","observation_id":"aef7ea52-49d6-47a0-81bf-001741b46f25","resolution":{"observed_at":"2026-08-07T13:21:44.739950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.11713","last_updated":"2023-10-17T14:19:13Z","snapshot_observed_at":"2026-08-10T06:24:49.807173Z","submitted_at":"2023-02-23T00:33:54Z","title":"Can Pre-trained Vision and Language Models Answer Visual Information-Seeking Questions?","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.11713","snapshot_observed_at":"2026-08-07T13:21:40.614803Z","title":"Can pre-trained vision and language models answer visual information-seeking questions?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.614803Z"},"links":{"cited_paper":"/paper/2302.11713","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:b352dc102265639a22bb9744fc04b12899809133bb29c9d8dcf911dc55e0aa7c","observation_id":"261c7fb3-9da8-48e0-95c6-3f92a1fafaf9","resolution":{"observed_at":"2026-08-07T13:21:40.614803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:40.709980Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.709980Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:aade641e204ad55e6048a04a10d1040c629c8d85ec7ed36a050d33fbe83fc5f1","observation_id":"e30bd1b3-a759-4cd4-a9d3-9dd081fcc786","resolution":{"observed_at":"2026-08-07T13:21:40.709980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1206.6389","last_updated":"2013-03-25T10:16:36Z","snapshot_observed_at":"2026-07-06T02:50:47.096675Z","submitted_at":"2012-06-27T19:59:59Z","title":"Poisoning Attacks against Support Vector Machines","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1206.6389","snapshot_observed_at":"2026-08-07T13:21:40.788169Z","title":"Poisoning attacks against support vector machines,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.788169Z"},"links":{"cited_paper":"/paper/1206.6389","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:c1a29406841eb5ac17c78cdc84c9aa6e17f3ff0c7155ad85fc301cdc4b6e1d3f","observation_id":"ce73dec8-e161-4ab4-b654-4674387cdbb6","resolution":{"observed_at":"2026-08-07T13:21:40.788169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:40.836736Z","title":"Local model poisoning attacks to {Byzantine-Robust} federated learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.836736Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:4aec798a00662cff2ad517d0a93a903515cf4d0fdcf61e2039c7c1f34865b5a6","observation_id":"72865569-082e-4de2-9568-17134d9977c3","resolution":{"observed_at":"2026-08-07T13:21:40.836736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.328426Z","title":"Badencoder: Backdoor attacks to pre- trained encoders in self-supervised learning,","venue":null,"work_id":"43481a0a-0c28-41c6-ab78-1c2f27c6511c","year":2022},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.890602Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:5197e9a65c1fd81e1c8827d54d0685e83c65df700fb48f461cb4c0bd85eff4c4","observation_id":"2824b544-a343-4f15-90ef-f8e6b694bede","resolution":{"observed_at":"2026-08-07T13:21:44.456896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:44.117470Z","title":"Defeat: Deep hidden feature backdoor attacks by imperceptible perturbation and latent representation constraints,","venue":null,"work_id":"b8dd6c32-1863-4c95-9df5-2ee4c1a47c99","year":2022},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.968482Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:cfac3a35e93c5d0366b2445f426ebfc5ea6b22a94bace2a941ad0f6d2dc3e49a","observation_id":"d438f0fa-5f3f-4c30-ac65-5e164832ce9d","resolution":{"observed_at":"2026-08-07T13:21:44.198814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.865387Z","title":"Kerckhoffs, La cryptographie militaire","venue":null,"work_id":"c7c2a8a4-6e64-4c86-a29d-8162e1e55ac8","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.106611Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:52c7fbf516aceb919ffa195e5d81668c765312b96b2634f5c37bf0087e70630a","observation_id":"b7b40b90-4768-4756-8bdb-39216befe95b","resolution":{"observed_at":"2026-08-07T13:21:43.983920Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.609349Z","title":"Unsupervised k-means clustering algo- rithm,","venue":null,"work_id":"ea225f8e-27fb-4018-91f1-c467b7955c82","year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.169190Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:c28f5df506a76ed67e3cd50b82bfaf40c0a2665d898f5a72d019f3b6a662d6e3","observation_id":"95be1161-39ab-4a86-a697-5a433c51d2a1","resolution":{"observed_at":"2026-08-07T13:21:43.713481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04252","last_updated":"2024-02-06T18:59:48Z","snapshot_observed_at":"2026-08-09T19:13:53.289650Z","submitted_at":"2024-02-06T18:59:48Z","title":"EVA-CLIP-18B: Scaling CLIP to 18 Billion Parameters","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04252","snapshot_observed_at":"2026-08-07T13:21:41.212978Z","title":"Eva-clip-18b: Scaling clip to 18 billion parameters,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.212978Z"},"links":{"cited_paper":"/paper/2402.04252","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:b713689764118d6cea2defd25e8e5da9a82f9530c0a5195bc208b0d7711fd843","observation_id":"33163676-9942-43da-96e7-7883f6a5b377","resolution":{"observed_at":"2026-08-07T13:21:41.212978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-07T13:21:41.269897Z","title":"Mistral 7b,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.269897Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:a10e6e99a2388704d05c719ea5c7559530b95b438c287b47501578f6819fad0e","observation_id":"4cdc62a5-b2e4-4b08-b23c-388224f71aa6","resolution":{"observed_at":"2026-08-07T13:21:41.269897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.438582Z","title":"Llama 3 model card,","venue":null,"work_id":"6230b000-40ba-421b-9943-0f9de6b77101","year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.335774Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:310fc0323367ae2df32fbaa9175a62428393912f8ff4f074d41cb4be63aeb60c","observation_id":"3d6d30b7-259a-425d-a565-47e182bd736b","resolution":{"observed_at":"2026-08-07T13:21:43.537417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14238","last_updated":"2024-01-15T15:23:55Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-21T18:59:31Z","title":"InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14238","snapshot_observed_at":"2026-08-07T13:21:41.389521Z","title":"Internvl: Scaling up vision foundation models and aligning for generic visual-linguistic tasks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.389521Z"},"links":{"cited_paper":"/paper/2312.14238","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:f68ad5584397ba4572e8d625a287b73a3d0815edb1b5c5d27949e9d7417dde54","observation_id":"fdbc471c-a998-480e-910c-bd41589940d0","resolution":{"observed_at":"2026-08-07T13:21:41.389521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:41.456553Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.456553Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:b0750fa8aa7d4723ad2f511b2de0d47784ffe1e9afaa9996958055a42c1e2aeb","observation_id":"baf2abde-d710-425f-982c-621fc65b6b36","resolution":{"observed_at":"2026-08-07T13:21:41.456553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T13:21:41.536354Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.536354Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:188f449ac10d5a1fff57c3524ce9a774861fcfe261a6dcdf66dfd808c0f66485","observation_id":"b07ae3a4-f922-4f4d-924f-3a1d3288c8dc","resolution":{"observed_at":"2026-08-07T13:21:41.536354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-07T13:21:41.598385Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.598385Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:ac189cf838249e9dbd57a469bcbbdc52b5147b5b547e9937043838b10761669a","observation_id":"30aa5610-ab9b-44d7-81eb-f9b685d4f56b","resolution":{"observed_at":"2026-08-07T13:21:41.598385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.277965Z","title":"Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,","venue":null,"work_id":"a5221491-aa7e-4b60-aec4-c29c4c61a75f","year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.670709Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:1800528692d0e64c03475467035feb9c558766c5855129f90a226eaaccdeedf9","observation_id":"568593c2-1d52-4fde-9d20-11fc2ce3f893","resolution":{"observed_at":"2026-08-07T13:21:43.350327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:41.770586Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.770586Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:63faa3b531bc57bd49597f178cc732f05a1a5145ac0b4d9147fe160117ec24fa","observation_id":"5395f5fc-363e-42d1-88a5-201d09c27030","resolution":{"observed_at":"2026-08-07T13:21:41.770586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T13:21:41.845428Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.845428Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:30e13a515e75f481fe6d6b34d103d2648152e5dee5c6113446163ddfef4ac9b7","observation_id":"34bbff10-6a13-4662-91df-064b1288c47a","resolution":{"observed_at":"2026-08-07T13:21:41.845428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:41.891174Z","title":"Theoretically principled trade-off between robustness and accuracy,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.891174Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:a69f92469daa22b715aab381caa9ad87ad2600e7daa1c9052c7ff4c6c7e29a69","observation_id":"814f94bc-f151-430d-834c-27c9d3bf286b","resolution":{"observed_at":"2026-08-07T13:21:41.891174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-10T05:12:13.391312Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T13:21:41.966464Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.966464Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:00176f59e7c03979c58ef4a9414ca779a0dec62a357436093a73ee37f3d19136","observation_id":"19b04edd-5048-486a-a247-d1d459f40f8a","resolution":{"observed_at":"2026-08-07T13:21:41.966464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-04T13:57:53.214741Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T13:21:42.030726Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.030726Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:d7bea3f5ac80933e72a810f8766f61e47019b3e3723920f9a0a648b276474cc8","observation_id":"96aade47-d54a-489b-8694-17e91fe211e1","resolution":{"observed_at":"2026-08-07T13:21:42.030726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:42.113542Z","title":"Denoising diffusion probabilistic models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.113542Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:12553fe329e024c841fa9a457043a7618cd86089f4cbd39a9dd4c57197272f1d","observation_id":"43290c99-1617-4479-9b40-996ce1ac1c73","resolution":{"observed_at":"2026-08-07T13:21:42.113542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T13:21:42.188870Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.188870Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:a597b32e89380c5ce5f4709a3eb8fc14920eeed87319cbb59ed31acb37aee1be","observation_id":"3c44f82d-a9fa-45a5-aaeb-a7d689c79cf6","resolution":{"observed_at":"2026-08-07T13:21:42.188870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T13:21:42.271921Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.271921Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:8fd09b0935670f52310511e9752e3071d1586c003916f88f0b4eb507b5af2304","observation_id":"d3bef515-93f2-4525-8851-2aceec43d073","resolution":{"observed_at":"2026-08-07T13:21:42.271921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:21:43.099328Z","title":"FlexRAG,","venue":null,"work_id":"bc0d663a-434b-4528-8ff7-b0c5838c7b05","year":2025},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.346479Z"},"links":{"citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:99974221a087c1c6483bf108e1c4ef3a4c294055896c6de143289cccca34307b","observation_id":"75eae8ed-9459-483a-a4c6-cb844ae05f39","resolution":{"observed_at":"2026-08-07T13:21:43.142562Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T12:11:45.619951Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":27,"verified_exact":0,"verified_fuzzy":14},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 5 inbound Pith citation observations for arXiv:2505.23828."}