{"as_of":"2026-08-10T10:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4a70896f2e73650b5ff92743b3a285566e58491186e0f889920019a920ae06d4","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:35:29.734144Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.24519/citation-record","integrity":"/paper/2505.24519/integrity","json":"/paper/2505.24519/citation-record.json","paper":"/paper/2505.24519"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:25.933568Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:25.933568Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:765ef44ea190f6f3af5472339dffee4c8743880527c92472517fb387406a3bcc","observation_id":"e1b8b59c-2071-448b-9953-4396531b7cf8","resolution":{"observed_at":"2026-08-07T12:35:25.933568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:25.982927Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:25.982927Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:f9a08703c94b2892bd76202ddd997f4d29fc57e9b12da6858aa69ab0706f659a","observation_id":"5ec3fc88-97c6-44ed-89bc-6ffec363f147","resolution":{"observed_at":"2026-08-07T12:35:25.982927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T12:35:26.079150Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.079150Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:4ea91132eebf37b70aaf5886dcd58481e529cc73cf188c19b712cf88218c2b32","observation_id":"39107875-e453-4a4d-9130-873c64d3a0a4","resolution":{"observed_at":"2026-08-07T12:35:26.079150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12966","last_updated":"2023-10-13T02:41:28Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-08-24T17:59:17Z","title":"Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyond","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12966","snapshot_observed_at":"2026-08-07T12:35:26.166915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.166915Z"},"links":{"cited_paper":"/paper/2308.12966","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:82d1361a8ab25a71e1c84df796297d50b36ef72ddebdf6a23451a9fefa532068","observation_id":"ccd595d5-669e-4bd3-b9d5-5f75e0235220","resolution":{"observed_at":"2026-08-07T12:35:26.166915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.635822Z","title":null,"venue":null,"work_id":"e168b7d6-7844-4a1a-a441-d9a8d4a725f9","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.271208Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:e2fcb4f02eb6cf87461f00d55a1c24f71447317411547a399427f4f5cd62522c","observation_id":"482ab8ce-1631-47f2-ac94-31d182adad7e","resolution":{"observed_at":"2026-08-07T12:35:31.713996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.10081","last_updated":"2024-03-19T17:51:45Z","snapshot_observed_at":"2026-08-09T09:52:05.108481Z","submitted_at":"2023-11-16T18:37:29Z","title":"DRESS: Instructing Large Vision-Language Models to Align and Interact with Humans via Natural Language Feedback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.10081","snapshot_observed_at":"2026-08-07T12:35:26.371851Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.371851Z"},"links":{"cited_paper":"/paper/2311.10081","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:9a0ea2df31291addd7f8073f77ead7c501a91bde55feaa6d3bf32a32fa97ac35","observation_id":"9519eda1-bd00-4a51-b2da-7a4555a3bfff","resolution":{"observed_at":"2026-08-07T12:35:26.371851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.491130Z","title":null,"venue":null,"work_id":"3e23f6ef-ff75-4068-ac5f-b504c377f48e","year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.477651Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:6c17206560901b5db6377018c013bdd050c20c1720bcdd0de62ef47b046b7e2c","observation_id":"c2cbd348-5c46-4b5e-89c5-44af4ff6e641","resolution":{"observed_at":"2026-08-07T12:35:31.584942Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06625","last_updated":"2025-02-10T05:47:27Z","snapshot_observed_at":"2026-07-06T19:30:13.003609Z","submitted_at":"2024-10-09T07:21:43Z","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06625","snapshot_observed_at":"2026-08-07T12:35:26.553538Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.553538Z"},"links":{"cited_paper":"/paper/2410.06625","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:cba54b1df0bf9ed08781dd0c0776138d663c7e4e0601f10349471236381a4354","observation_id":"71bdcb01-8904-4e8f-96c7-830263e41da1","resolution":{"observed_at":"2026-08-07T12:35:26.553538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4647.36855","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:30.648666Z","title":null,"venue":null,"work_id":"3821991b-ed69-4601-a988-5efce3dec436","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.629200Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:01060d60b6b5ad236ce0a2c9eeed32b1fe0e1b7f13ac539a0c90026a99c7e05c","observation_id":"2da1b165-06a7-454d-b2b0-4971301913eb","resolution":{"observed_at":"2026-08-07T12:35:30.703721Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-07T12:35:26.772719Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.772719Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:e5866b58f64fccf795a1f7b22ca283bea8be2162ab41e719e56e75ee6579bdb6","observation_id":"dcf6d652-8dbb-4351-829b-31ada64094cb","resolution":{"observed_at":"2026-08-07T12:35:26.772719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05608","last_updated":"2025-01-19T16:23:38Z","snapshot_observed_at":"2026-07-06T16:45:24.070954Z","submitted_at":"2023-11-09T18:59:11Z","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05608","snapshot_observed_at":"2026-08-07T12:35:26.878499Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.878499Z"},"links":{"cited_paper":"/paper/2311.05608","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:9e55a39c538d72e273674fc4f3dbedaee23ebefa01e7fbdbce559f827d8c09b1","observation_id":"15745a6e-fa80-4aa0-b09a-8879aa8366e6","resolution":{"observed_at":"2026-08-07T12:35:26.878499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09572","last_updated":"2024-10-15T04:55:36Z","snapshot_observed_at":"2026-07-06T17:44:41.822709Z","submitted_at":"2024-03-14T17:03:04Z","title":"Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09572","snapshot_observed_at":"2026-08-07T12:35:26.935873Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:26.935873Z"},"links":{"cited_paper":"/paper/2403.09572","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:c4f4e03e11b5e15aacb411d696346f2b4634ba57066fe114f90989d7c4899c1a","observation_id":"34d5c27d-c373-4429-bc04-7021f7871f58","resolution":{"observed_at":"2026-08-07T12:35:26.935873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18495","last_updated":"2024-12-09T20:21:56Z","snapshot_observed_at":"2026-08-06T04:32:59.039501Z","submitted_at":"2024-06-26T16:58:20Z","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18495","snapshot_observed_at":"2026-08-07T12:35:27.036330Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.036330Z"},"links":{"cited_paper":"/paper/2406.18495","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:98403a01af7d6080068019aba360327b23b68d20dda79dcfafc6a9f2f0dd2e8e","observation_id":"383440b7-5bbc-492a-812b-4f773c789803","resolution":{"observed_at":"2026-08-07T12:35:27.036330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1603.07396","last_updated":"2016-03-24T00:02:58Z","snapshot_observed_at":"2026-08-07T19:22:55.853637Z","submitted_at":"2016-03-24T00:02:58Z","title":"A Diagram Is Worth A Dozen Images","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1603.07396","snapshot_observed_at":"2026-08-07T12:35:27.138684Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.138684Z"},"links":{"cited_paper":"/paper/1603.07396","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:9e506792f9ab742a8951029875fba8e88aacc3dfc7987af09e7de0fca2452cbb","observation_id":"829353e0-621a-4b52-89c0-78ac6ac7e9c0","resolution":{"observed_at":"2026-08-07T12:35:27.138684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03744","last_updated":"2024-05-15T19:22:44Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:59:56Z","title":"Improved Baselines with Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03744","snapshot_observed_at":"2026-08-07T12:35:27.244469Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.244469Z"},"links":{"cited_paper":"/paper/2310.03744","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:ab7b7f3e7a0b28340f59f3a91ed0a6c89e1d1b8decf7d3056da0ecb7d9a50c13","observation_id":"4b0f4459-02d0-447c-a4c4-cbe4f500a9b6","resolution":{"observed_at":"2026-08-07T12:35:27.244469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17600","last_updated":"2024-06-19T08:32:14Z","snapshot_observed_at":"2026-07-06T16:54:22.039181Z","submitted_at":"2023-11-29T12:49:45Z","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17600","snapshot_observed_at":"2026-08-07T12:35:27.358332Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.358332Z"},"links":{"cited_paper":"/paper/2311.17600","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:db464c70c939243aaf195d10dc095b4e873875926ea77ed46f1b02bf3a286990","observation_id":"fc9f6bfe-fd97-4e71-832b-1f1fccf337f9","resolution":{"observed_at":"2026-08-07T12:35:27.358332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T12:35:27.438621Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.438621Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:9d01544cc4ad11b64721c5c365090f7bc3a5541d2b6eb5e03833720115ad4450","observation_id":"4b4b497e-7604-43f3-a40b-f86b1d603876","resolution":{"observed_at":"2026-08-07T12:35:27.438621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-07T12:35:27.577719Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.577719Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:df8cc78275f9faabb5cea24428f83c3d0458a8f6b4afb63c5f96e2f094e1e101","observation_id":"b0f156a1-1c31-4c81-bd4e-6e068d4595a6","resolution":{"observed_at":"2026-08-07T12:35:27.577719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09345","last_updated":"2024-11-01T06:30:11Z","snapshot_observed_at":"2026-08-09T18:32:20.343813Z","submitted_at":"2024-02-14T17:49:07Z","title":"InfoRM: Mitigating Reward Hacking in RLHF via Information-Theoretic Reward Modeling","version":5},"cited_work":{"arxiv_id":"2402.09345","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09345","snapshot_observed_at":"2026-08-07T12:35:30.314941Z","title":"InfoRM: Mitigating Reward Hacking in RLHF via Information-Theoretic Reward Modeling","venue":"cs.LG","work_id":"9c5a8d87-ceae-4a46-8fdf-2cc2356fee33","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.696015Z"},"links":{"cited_paper":"/paper/2402.09345","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:9e26f7304323742c37f08e50985cc73f076a8c1e14cfb4074c9a11e8b3e810c4","observation_id":"b5eb8da3-2fb5-4a0b-a87f-592c7f958673","resolution":{"observed_at":"2026-08-07T12:35:30.381649Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.19358","last_updated":"2025-06-02T16:30:23Z","snapshot_observed_at":"2026-08-09T20:35:40.499093Z","submitted_at":"2025-01-31T18:10:53Z","title":"The Energy Loss Phenomenon in RLHF: A New Perspective on Mitigating Reward Hacking","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.19358","snapshot_observed_at":"2026-08-07T12:35:27.803525Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.803525Z"},"links":{"cited_paper":"/paper/2501.19358","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:8c496755b6c0624847b8d6bf645cff45ad5166c36a07529748275fa6ef76e0f3","observation_id":"f47762c9-4d25-41ad-b147-744e6e0ad953","resolution":{"observed_at":"2026-08-07T12:35:27.803525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-08-09T21:14:39.812982Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T12:35:27.915330Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.915330Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:28aadcfa8200c7eb8e3cffdf1c04830efee8215754c173cec1a297daaa9084ff","observation_id":"aaec619b-8e1a-4d76-ad0a-f774bf657377","resolution":{"observed_at":"2026-08-07T12:35:27.915330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.00020","last_updated":"2021-02-26T19:04:58Z","snapshot_observed_at":"2026-07-06T10:45:03.059688Z","submitted_at":"2021-02-26T19:04:58Z","title":"Learning Transferable Visual Models From Natural Language Supervision","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.00020","snapshot_observed_at":"2026-08-07T12:35:28.065494Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.065494Z"},"links":{"cited_paper":"/paper/2103.00020","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:dbdc2397b6614e72febfe7e1affbc98e1e5dfe3f15bd8a751d50cca549b22403","observation_id":"a4a215b9-c758-49c1-9c63-548fa95d2a35","resolution":{"observed_at":"2026-08-07T12:35:28.065494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.10752","last_updated":"2022-04-13T11:38:44Z","snapshot_observed_at":"2026-07-06T12:20:47.369918Z","submitted_at":"2021-12-20T18:55:25Z","title":"High-Resolution Image Synthesis with Latent Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.10752","snapshot_observed_at":"2026-08-07T12:35:28.220688Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.220688Z"},"links":{"cited_paper":"/paper/2112.10752","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:d7560bc464d7f515d58a7f73f5d8bc5c21f2c123ce9e69963be64102a5d60d0d","observation_id":"0aa3501a-d4ae-46ab-9dbc-fb8b7f141be9","resolution":{"observed_at":"2026-08-07T12:35:28.220688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06209","last_updated":"2024-04-25T07:12:39Z","snapshot_observed_at":"2026-07-06T17:14:32.455890Z","submitted_at":"2024-01-11T18:58:36Z","title":"Eyes Wide Shut? Exploring the Visual Shortcomings of Multimodal LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06209","snapshot_observed_at":"2026-08-07T12:35:28.325476Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.325476Z"},"links":{"cited_paper":"/paper/2401.06209","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:158a516fe5e1f47eb307909a564d152ae1cf3f6ccc9a19b557eac67b42141440","observation_id":"91e87091-4d6a-46ae-b4f2-9f348ae857a9","resolution":{"observed_at":"2026-08-07T12:35:28.325476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-07T12:35:28.439965Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.439965Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:11e7a337a7d047e96f62f889be2422d8f68e6556a47c6657b0dafd165ea77fa5","observation_id":"0f84160e-c117-47a7-adf9-dc7131e81afb","resolution":{"observed_at":"2026-08-07T12:35:28.439965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.16721","last_updated":"2025-05-01T22:22:43Z","snapshot_observed_at":"2026-07-06T19:56:48.086175Z","submitted_at":"2024-11-23T02:17:17Z","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","version":3},"cited_work":{"arxiv_id":"2411.16721","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.16721","snapshot_observed_at":"2026-08-07T12:35:30.068295Z","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","venue":"cs.CV","work_id":"4bbc7827-ddb2-4d34-98e3-6377754be278","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.553131Z"},"links":{"cited_paper":"/paper/2411.16721","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:3b29acff4418e1e9f0f6cf4007531457f00c9df208878cd3a55b03dff9ca9066","observation_id":"e1749e4a-3499-471e-977b-bffb9a1376c6","resolution":{"observed_at":"2026-08-07T12:35:30.147706Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.349894Z","title":null,"venue":null,"work_id":"484292e6-5a26-408a-bbc7-d0cbc4be06e1","year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.662888Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:66291a1ea288ada56f787d229c66ed36ede1c5bca9496b036e1ae373eeab9320","observation_id":"d05710b4-f375-435f-bf7b-37595393caff","resolution":{"observed_at":"2026-08-07T12:35:31.415390Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-981-96-0151-6_1","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:03:45.533247Z","title":null,"venue":"Communications in computer and information science","work_id":"fd2bd116-b914-4722-b6e7-d9f4cb927c22","year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.772053Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:786021ce024c20983d0cd46cb4bdaae3ab3f9e6b0979efd58df86fd40f993c1f","observation_id":"c64e1a0a-08d5-4cb2-94be-b018a4da1163","resolution":{"observed_at":"2026-08-07T12:35:29.943613Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.178834Z","title":null,"venue":null,"work_id":"4c6c6b8f-c4e7-4795-9559-b821f23fb218","year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.847475Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:8d8134db98898829a172389830846495bcc3a647410cf6dd2a09aab6105abfa0","observation_id":"b8d999a5-3168-44d8-9a4f-025c2ed97d02","resolution":{"observed_at":"2026-08-07T12:35:31.251711Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.01222","last_updated":"2025-05-22T15:55:37Z","snapshot_observed_at":"2026-08-07T17:34:43.114568Z","submitted_at":"2025-03-03T06:40:21Z","title":"Retrieval-Augmented Perception: High-Resolution Image Perception Meets Visual RAG","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.01222","snapshot_observed_at":"2026-08-07T12:35:28.937202Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:28.937202Z"},"links":{"cited_paper":"/paper/2503.01222","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:f0e774004d0659999867ae26b995faf1840a0c9eda30f51c7f091814ed8e1a65","observation_id":"92ed591e-d0b9-442d-9796-31b2a290a10c","resolution":{"observed_at":"2026-08-07T12:35:28.937202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:31.017925Z","title":null,"venue":null,"work_id":"02069e93-253d-45c2-9e99-e04a143c519e","year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.026864Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:694172ce370f80a3b7f32cb401511a402cd9375c2f511a20d671ac9c667eb1bb","observation_id":"16ca3de2-682f-40fc-873e-ac171a18bec1","resolution":{"observed_at":"2026-08-07T12:35:31.101861Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14881","snapshot_observed_at":"2026-08-07T12:35:29.141982Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.141982Z"},"links":{"cited_paper":"/paper/2502.14881","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:18a7b5063f10a547c93c1719ea3030fa4f60c7d95a7b32a79a4627c87b1d5d0e","observation_id":"f8bc47bc-ec44-4cb8-81b7-a155ab253df6","resolution":{"observed_at":"2026-08-07T12:35:29.141982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.10594","last_updated":"2025-03-02T01:19:51Z","snapshot_observed_at":"2026-08-10T05:52:50.722724Z","submitted_at":"2024-10-14T15:04:18Z","title":"VisRAG: Vision-based Retrieval-augmented Generation on Multi-modality Documents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.10594","snapshot_observed_at":"2026-08-07T12:35:29.219653Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.219653Z"},"links":{"cited_paper":"/paper/2410.10594","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:d58eca11cbd95ad7f12128dc591e0e577c03ba7ea04f81fcf43e6de83d5030d4","observation_id":"dbf8ac02-46f5-47c5-ad8e-267831a68839","resolution":{"observed_at":"2026-08-07T12:35:29.219653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10766","last_updated":"2025-03-15T00:49:45Z","snapshot_observed_at":"2026-07-06T17:04:17.738921Z","submitted_at":"2023-12-17T17:02:14Z","title":"JailGuard: A Universal Detection Framework for LLM Prompt-based Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10766","snapshot_observed_at":"2026-08-07T12:35:29.349854Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.349854Z"},"links":{"cited_paper":"/paper/2312.10766","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:7b7e55f794634eead04e77a5f5bca24b4b2e9436a277a61b01ea4b337cc44477","observation_id":"12287ed5-b3a7-4724-a9f0-f073f7520f66","resolution":{"observed_at":"2026-08-07T12:35:29.349854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:35:30.861865Z","title":null,"venue":null,"work_id":"e8d048f2-cca6-4807-9680-5c2803ec9f15","year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.460842Z"},"links":{"citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:48197b9958becc15849afec93cb5d11211719544b2cfc689bb4d7bced2bb1ac0","observation_id":"9db12ec0-468f-4cdd-83ef-c4c15b7458d6","resolution":{"observed_at":"2026-08-07T12:35:30.932001Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.04931","last_updated":"2025-06-27T10:07:29Z","snapshot_observed_at":"2026-08-09T10:00:38.301366Z","submitted_at":"2025-01-09T02:47:01Z","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.04931","snapshot_observed_at":"2026-08-07T12:35:29.600994Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.600994Z"},"links":{"cited_paper":"/paper/2501.04931","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:95e6d9236071d61f428c2990c999e139ae2551ffc2dd6707db2a99dd6c05ee34","observation_id":"c0f28e1f-f415-4b5d-a708-3eea649bc713","resolution":{"observed_at":"2026-08-07T12:35:29.600994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T12:35:29.734144Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:29.734144Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:7608cf62da84ee7770c0fd354a0d5f13083d116f3bbed8d2f8060ac268e6667d","observation_id":"f5cdf2a8-9de9-4834-88b0-95f27cc88802","resolution":{"observed_at":"2026-08-07T12:35:29.734144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T16:33:06.604471Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":33,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2505.24519."}