{"as_of":"2026-08-10T13:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:39f89a4e59b562863a908176b4b50e3628f546fc182957152604a264f6e728c8","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:07:37.498468Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-22T05:29:52.758898Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T05:31:07.660447Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"cited_work":{"arxiv_id":"2506.05401","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.05401","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2506.05401 , year=","venue":null,"work_id":"6eb7fd2b-2cbb-42ac-99c3-7cc61bc6bc53","year":2025},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-05T13:21:08.142791Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2506.05401","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:c079d7871ffcc90bf0ee6e3f22f7abe85607ee58b76dfb89c284180d345bafbb","observation_id":"e2e9d226-d3c3-4433-a8a1-fde450d50091","resolution":{"observed_at":"2026-05-10T22:05:49.185883Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"cited_work":{"arxiv_id":"2506.05401","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.05401","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2506.05401 , year=","venue":null,"work_id":"6eb7fd2b-2cbb-42ac-99c3-7cc61bc6bc53","year":2025},"citing_paper":{"arxiv_id":"2605.15711","last_updated":"2026-05-15T08:01:32Z","snapshot_observed_at":"2026-07-06T23:26:56.013191Z","submitted_at":"2026-05-15T08:01:32Z","title":"EntropyScan: Towards Model-level Backdoor Detection in LVLMs via Visual Attention Entropy","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-20T19:46:49.000647Z"},"links":{"cited_paper":"/paper/2506.05401","citing_paper":"/paper/2605.15711"},"observation_digest":"sha256:5578d19b4131af96e70bb5baacbeeb811659e5e4b1f90e9bc2611ef179117e18","observation_id":"7c69b674-2df9-42c1-9dcf-c84db03c0512","resolution":{"observed_at":"2026-05-20T19:48:57.434708Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"cited_work":{"arxiv_id":"2506.05401","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.05401","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2506.05401 , year=","venue":null,"work_id":"6eb7fd2b-2cbb-42ac-99c3-7cc61bc6bc53","year":2025},"citing_paper":{"arxiv_id":"2605.22365","last_updated":"2026-05-25T01:50:16Z","snapshot_observed_at":"2026-08-01T15:33:50.569569Z","submitted_at":"2026-05-21T11:58:46Z","title":"TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting","version":1},"reference_index":123,"source":"arxiv_source","source_observed_at":"2026-05-22T05:29:52.758898Z"},"links":{"cited_paper":"/paper/2506.05401","citing_paper":"/paper/2605.22365"},"observation_digest":"sha256:2204f9265ec619f7ffec8493a55b49d2334294fca0845e3cb2937942013f6151","observation_id":"8896ba9e-107e-48bb-bc85-f3776bfec02b","resolution":{"observed_at":"2026-05-22T05:31:07.663218Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.05401/citation-record","integrity":"/paper/2506.05401/integrity","json":"/paper/2506.05401/citation-record.json","paper":"/paper/2506.05401"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.357327Z","title":"Flamingo: a visual language model for few-shot learning","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.357327Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:5868b71d76ce1fa289c92828d511110fe75fd7e2514e2804e20cfc8097958c56","observation_id":"b868d0c8-acc0-4e78-9db4-aaa044a65def","resolution":{"observed_at":"2026-08-07T11:07:37.357327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05425","last_updated":"2023-06-08T17:59:56Z","snapshot_observed_at":"2026-07-06T15:40:24.127663Z","submitted_at":"2023-06-08T17:59:56Z","title":"MIMIC-IT: Multi-Modal In-Context Instruction Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05425","snapshot_observed_at":"2026-08-07T11:07:37.361566Z","title":"Mimic-it: Multi-modal in-context instruction tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.361566Z"},"links":{"cited_paper":"/paper/2306.05425","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:fa5d3c2ac4fddfaabc3b091f29cd6e29c2e775df8dcbd4008387b6f206e32175","observation_id":"6e3f0c30-c293-446c-b31c-1486003f2cbf","resolution":{"observed_at":"2026-08-07T11:07:37.361566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.365712Z","title":"Llava-plus: Learning to use tools for creating multimodal agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.365712Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:fda6472d14c21800f44eff8b486618a65a122c326679d9e6d3ca4670be1644f4","observation_id":"ee69dab6-8745-4afb-82ae-d273463a5777","resolution":{"observed_at":"2026-08-07T11:07:37.365712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.369572Z","title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.369572Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:d455e59ddc62f187de51aa43458533866ceaba2ead2d62c411c1a6af24086c05","observation_id":"b45a841b-6072-4d24-aab5-b61a0c8e4d18","resolution":{"observed_at":"2026-08-07T11:07:37.369572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-07T11:07:37.373024Z","title":"Minigpt-4: Enhancing vision-language understanding with advanced large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.373024Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:52d60865df3a4d2cfa497e33ffa4038f4b6dbb6c406ac004f2d3187e52016179","observation_id":"23ae39c0-a358-4a92-a27a-81743846319c","resolution":{"observed_at":"2026-08-07T11:07:37.373024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.970026Z","title":"Vqa: Visual question answering","venue":null,"work_id":"9dc81251-5acf-4199-85c2-d13052c5a373","year":2015},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.376676Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:140bdf726ca4faee08febc7bd5575f01f5dcedc4d90a4d6b166226a01ec25426","observation_id":"18e7090f-091c-4b21-ae5f-22ba23a9d536","resolution":{"observed_at":"2026-08-07T11:07:37.973390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.959184Z","title":"A comprehensive survey of deep learning for image captioning","venue":null,"work_id":"d31c25ba-51e4-4803-807b-e2c3e8dfedb6","year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.380193Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:348db5b9f4b721d0d6e4629a7529a7c97070f6c3370ea50f5b1feb0a3062c705","observation_id":"4304e154-09c0-46ff-b006-22d2000be5c6","resolution":{"observed_at":"2026-08-07T11:07:37.962698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.948882Z","title":"Visual navigation for mobile robots: A survey","venue":null,"work_id":"69b65b6b-f489-4ffc-89ae-c268a0a0caa9","year":2008},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.383322Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:41df31c8744085e803723865b44f6d9b4836948876c7c3be539a9558b1385661","observation_id":"681306c8-4bfb-40d1-b505-896a2a39e54d","resolution":{"observed_at":"2026-08-07T11:07:37.952455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.10760","last_updated":"2020-08-02T08:38:25Z","snapshot_observed_at":"2026-08-09T12:13:44.628029Z","submitted_at":"2020-07-21T12:49:12Z","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.10760","snapshot_observed_at":"2026-08-07T11:07:37.386575Z","title":"Backdoor attacks and countermeasures on deep learning: A comprehensive review","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.386575Z"},"links":{"cited_paper":"/paper/2007.10760","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:e86820f3a8047e9cb71e4053f96b38c440bd407f9d371a8cc1529e67e324dc27","observation_id":"e55191d2-765f-431f-9d21-c3b2554f12c0","resolution":{"observed_at":"2026-08-07T11:07:37.386575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.938841Z","title":"Badclip: Dual- embedding guided backdoor attack on multimodal contrastive learning","venue":null,"work_id":"c62bb463-3a1c-41df-a81f-5bdff92fcbde","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.390055Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:52156323741d6c746892bacae2d2f2db95ff446334dfb8d5398d2f5a5ca4e703","observation_id":"05021b72-fa5e-4f09-96e4-f59588c51430","resolution":{"observed_at":"2026-08-07T11:07:37.942376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.15172","last_updated":"2023-12-23T05:51:40Z","snapshot_observed_at":"2026-08-07T10:04:56.035119Z","submitted_at":"2023-12-23T05:51:40Z","title":"Pre-trained Trojan Attacks for Visual Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.15172","snapshot_observed_at":"2026-08-07T11:07:37.393240Z","title":"Pre-trained trojan attacks for visual recognition","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.393240Z"},"links":{"cited_paper":"/paper/2312.15172","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:a6113bd782036463d0e4b09a8a9c63c6e8c2aa250a09d209d8c46c9b3982a348","observation_id":"713d62c3-4024-4982-9f7d-ef9dc8244ee7","resolution":{"observed_at":"2026-08-07T11:07:37.393240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11473","last_updated":"2024-02-18T06:31:05Z","snapshot_observed_at":"2026-08-06T02:43:24.834998Z","submitted_at":"2024-02-18T06:31:05Z","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11473","snapshot_observed_at":"2026-08-07T11:07:37.397004Z","title":"Poisoned forgery face: Towards backdoor attacks on face forgery detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.397004Z"},"links":{"cited_paper":"/paper/2402.11473","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:10a607c81c6ace6d42dda8336685349e1afda32668dcd5b9aed339a14e26ed0a","observation_id":"f9d73cf5-804b-47de-9ac9-d87fd398a0fe","resolution":{"observed_at":"2026-08-07T11:07:37.397004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05553","last_updated":"2024-07-01T10:27:42Z","snapshot_observed_at":"2026-07-06T18:11:57.100591Z","submitted_at":"2024-05-09T05:23:34Z","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05553","snapshot_observed_at":"2026-08-07T11:07:37.404099Z","title":"Towards robust physical-world backdoor attacks on lane detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.404099Z"},"links":{"cited_paper":"/paper/2405.05553","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:2740927c1c2b7185ee7a23bf43e49d4dfcd1fe0a7fd676f32a53a73b22b08099","observation_id":"635d9011-ed56-4fa0-9c83-21513e66c517","resolution":{"observed_at":"2026-08-07T11:07:37.404099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.16134","last_updated":"2024-05-30T04:45:11Z","snapshot_observed_at":"2026-07-06T18:19:47.765281Z","submitted_at":"2024-05-25T08:57:30Z","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.16134","snapshot_observed_at":"2026-08-07T11:07:37.407964Z","title":"Breaking the false sense of security in backdoor defense through re-activation attack","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.407964Z"},"links":{"cited_paper":"/paper/2405.16134","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:91332ea166b6cb43538437554dc12323c532c3a106900617a8e38a80fa40eb9a","observation_id":"a7ca5614-e7dd-4bd1-9701-f9fbf69106a6","resolution":{"observed_at":"2026-08-07T11:07:37.407964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18844","last_updated":"2024-12-16T06:59:33Z","snapshot_observed_at":"2026-07-06T18:37:43.309281Z","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18844","snapshot_observed_at":"2026-08-07T11:07:37.411521Z","title":"Revisiting backdoor attacks against large vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.411521Z"},"links":{"cited_paper":"/paper/2406.18844","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:f4b9226ffe75157d0e85f705e5026c0f5a0e89dd61e75c442518ecdfe3730a72","observation_id":"18b3f355-f8f6-46e0-97db-9470e5b3e604","resolution":{"observed_at":"2026-08-07T11:07:37.411521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02882","last_updated":"2024-08-06T01:20:12Z","snapshot_observed_at":"2026-08-06T05:52:42.233415Z","submitted_at":"2024-08-06T01:20:12Z","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02882","snapshot_observed_at":"2026-08-07T11:07:37.414931Z","title":"Compromising embodied agents with contextual backdoor attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.414931Z"},"links":{"cited_paper":"/paper/2408.02882","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:1f6d15f966b7c8d71063349928dd6c8f0f11ecf3f17cf317c3c36ce8583c2001","observation_id":"16fec0e2-bd22-4f0b-b475-0032b4a95ff0","resolution":{"observed_at":"2026-08-07T11:07:37.414931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00746","last_updated":"2024-12-01T09:52:48Z","snapshot_observed_at":"2026-08-08T12:28:14.246595Z","submitted_at":"2024-12-01T09:52:48Z","title":"BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks","version":1},"cited_work":{"arxiv_id":"2412.00746","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.00746","snapshot_observed_at":"2026-08-07T11:07:37.670441Z","title":"BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks","venue":"cs.SE","work_id":"03de9699-e670-4bfb-a05f-1215099e5e64","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.418430Z"},"links":{"cited_paper":"/paper/2412.00746","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:c5aa078d6ac13584c0f147a6120f33170da52ad8b3aefd2f191ee52eda35a0f4","observation_id":"eb13aa0d-ec64-462d-b814-3abe343266cb","resolution":{"observed_at":"2026-08-07T11:07:37.674530Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.05244","last_updated":"2022-12-07T15:45:20Z","snapshot_observed_at":"2026-08-09T09:21:57.013606Z","submitted_at":"2022-09-12T13:37:06Z","title":"Universal Backdoor Attacks Detection via Adaptive Adversarial Probe","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.05244","snapshot_observed_at":"2026-08-07T11:07:37.421870Z","title":"Universal backdoor attacks detection via adaptive adversarial probe","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.421870Z"},"links":{"cited_paper":"/paper/2209.05244","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:d060564d9e2a63c6b3468832a8ed1f0c55e71f63571721ca43034f5c522c4c61","observation_id":"067e887d-1b90-4fc6-9a5d-90c63825849f","resolution":{"observed_at":"2026-08-07T11:07:37.421870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.928298Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks","venue":null,"work_id":"fa859df7-7970-4592-92af-e675ea517ecb","year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.425732Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:e60e29eeb55d0bd8e41088e3af5ff63176c6951221c8778532cf8c561a001bf3","observation_id":"f3ef40e5-d86e-4de6-9b10-da8f03abdf49","resolution":{"observed_at":"2026-08-07T11:07:37.931945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.917128Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":"6603dded-0932-46be-a1c7-0d803f50350b","year":2018},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.428755Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:3f14dea7a52f79717d6e89bd7f2b66abdfc407ec8d699c70e0bda8ebede5e719","observation_id":"03b5b41a-55c7-4de8-aea3-21819cccd7d5","resolution":{"observed_at":"2026-08-07T11:07:37.920651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.432133Z","title":"Strip: A defence against trojan attacks on deep neural networks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.432133Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:90b4f74724779092e227d461d148970300f60d25d8457a67ce7f84c5569252ec","observation_id":"0b6e993a-f242-456d-be55-a22b672db3a5","resolution":{"observed_at":"2026-08-07T11:07:37.432133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.899991Z","title":"Cfbd: Coarse-to-fine detection of backdoor attacks in multimodal contrastive learning","venue":null,"work_id":"88ab19cd-d681-4c7b-9008-bb10d62bc1fd","year":null},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.435329Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:98bfa10b0d24ebce20f5b817c2f0c0b73e084a655a7c044c5c38dea79a1b27a2","observation_id":"81876ca6-3fb0-4a50-9b38-1696379ded55","resolution":{"observed_at":"2026-08-07T11:07:37.903901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09093","last_updated":"2025-04-22T08:46:20Z","snapshot_observed_at":"2026-08-09T00:19:36.933732Z","submitted_at":"2024-08-17T04:43:26Z","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","version":3},"cited_work":{"arxiv_id":"2408.09093","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.09093","snapshot_observed_at":"2026-08-07T11:07:37.643482Z","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","venue":"cs.CR","work_id":"90972c6c-3c0c-4a9a-a810-c33ea1220c0f","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.438756Z"},"links":{"cited_paper":"/paper/2408.09093","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:632899c80c8019aa3a3638e9aee7a4b32d25227a36fa44dad12253b1d8747c38","observation_id":"c999a4cf-7cc7-4cbd-9cd1-c37cfface173","resolution":{"observed_at":"2026-08-07T11:07:37.649786Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06500","last_updated":"2023-06-15T08:00:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-05-11T00:38:10Z","title":"InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06500","snapshot_observed_at":"2026-08-07T11:07:37.442346Z","title":"Instructblip: Towards general-purpose vision-language models with instruction tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.442346Z"},"links":{"cited_paper":"/paper/2305.06500","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:0ecf05f2d79a8c2f6e7ae3a9efdd4042e25fe038ad3007d35e822ce26782874a","observation_id":"2dbaafcd-0772-44ee-9063-6cb6aa03aa0b","resolution":{"observed_at":"2026-08-07T11:07:37.442346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.888721Z","title":"Badnets: Evaluating backdooring attacks on deep neural networks","venue":null,"work_id":"98d59d81-fe1c-4281-90c5-a9f1e5841d72","year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.445757Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:ad1928c4d197efa6b74c056001b9075ab758aeb1f96e764c5244c80a64b80695","observation_id":"ac7878de-ab01-4ce2-b298-dc3e60e33923","resolution":{"observed_at":"2026-08-07T11:07:37.892582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.877458Z","title":"Invisible backdoor attack with sample-specific triggers","venue":null,"work_id":"b730e75c-cf33-486f-8b86-bf1150926247","year":2021},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.448854Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:442f075a7121fd1cf840c0bee9c7224877e4785d2155c0ba7e620cc2ffe2e5e5","observation_id":"9fdac35d-809b-486d-b4c6-be5f37ba56b2","resolution":{"observed_at":"2026-08-07T11:07:37.881155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.866111Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks","venue":null,"work_id":"a2bd0fce-649a-4eea-99f2-844727b73bf2","year":2020},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.452293Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:3e62db0c5dafaa5ccd808b2b0a30ea6942ccf31ff8776673aa9db2f95a6ac65f","observation_id":"34519cc7-c44f-47f4-b087-b9832d010b3e","resolution":{"observed_at":"2026-08-07T11:07:37.869990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.10991","last_updated":"2021-11-30T03:25:52Z","snapshot_observed_at":"2026-07-06T12:10:42.498280Z","submitted_at":"2021-11-22T05:13:12Z","title":"Backdoor Attack through Frequency Domain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.10991","snapshot_observed_at":"2026-08-07T11:07:37.455570Z","title":"Backdoor attack through frequency domain","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.455570Z"},"links":{"cited_paper":"/paper/2111.10991","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:71a0bbea9f4fc20b0e6a6fb9c1a0a28fc714a1ad959ca200f14945e5767bbe56","observation_id":"188e2eea-dc96-444e-9cdf-8a53e1f92ddd","resolution":{"observed_at":"2026-08-07T11:07:37.455570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.855171Z","title":"Badclip: Trigger-aware prompt learning for backdoor attacks on clip","venue":null,"work_id":"5b49fbf4-db0a-4bfa-b4aa-59d1963cd425","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.459086Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:4b5d650673a6624e14ca236cce8875f607605883db1c6c2c9e1e701f244da390","observation_id":"f9453b33-e959-4fec-a970-4fc9962a2a5e","resolution":{"observed_at":"2026-08-07T11:07:37.858949Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-07T05:50:34.189767Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-07T11:07:37.462457Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.462457Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:9e8e8bf7d66b7678e258d7ec5da24753bf5a0eba522ee344aa3ca303a0ff218f","observation_id":"c4ee062e-5b6e-47f2-aeca-55edf2c1d653","resolution":{"observed_at":"2026-08-07T11:07:37.462457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.465496Z","title":"Defending multimodal backdoored models by repulsive visual prompt tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.465496Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:cc3818f70cc4f1b776d4a350cdaa992d03d3e1324b86e6eaa2f51cd4918461ed","observation_id":"3f2a7be7-8073-4578-881b-cf7c0ceffe10","resolution":{"observed_at":"2026-08-07T11:07:37.465496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-07T11:07:37.468693Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.468693Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:e35c55dba0a1d4a403bf27421e09bf2624f234ee9616308d0207c32c3e211a86","observation_id":"ce754955-4d2a-41fc-ae46-6198ee1d6c37","resolution":{"observed_at":"2026-08-07T11:07:37.468693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.844755Z","title":"Spectral signatures in backdoor attacks","venue":null,"work_id":"654f80b1-51ac-4c8a-ba05-ca4edf01b961","year":2018},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.471985Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:f75fdab0be1a003b8d0fb210f2fc7089ad9547de072224b85e3afb970d900e7a","observation_id":"753507c0-c02a-48c0-a87c-73ec5a8856db","resolution":{"observed_at":"2026-08-07T11:07:37.848310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.834813Z","title":"Dual-key multimodal backdoors for visual question answering","venue":null,"work_id":"dcd0c4fa-e860-4fdf-b83b-658a119d6960","year":2022},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.475061Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:c0fff7bf3b62d97da7ba6af19ea501a6f463fbf2cec2f24972b0e37afe7e78c1","observation_id":"966ac803-6b86-43a5-ac73-1d3d92e32a9e","resolution":{"observed_at":"2026-08-07T11:07:37.838206Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.478573Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.478573Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:5738bca013075bd1833a3ee0f586299d1d7b319b1cf307afdcab1eed2cac4e05","observation_id":"0cc2925d-277d-4185-8c7f-3f9fd9b4523c","resolution":{"observed_at":"2026-08-07T11:07:37.478573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.818783Z","title":"Flickr30k entities: Collecting region-to-phrase correspondences for richer image-to-sentence models","venue":null,"work_id":"cc969714-e17b-444c-a181-9b04a75b067c","year":2015},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.481798Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:bc2c6e3f96ad808f08facf68e3ddd24a2170d45e0f328d17259816e4aa9a5824","observation_id":"3e842ba6-34e9-4432-9627-2bd1bfdf124c","resolution":{"observed_at":"2026-08-07T11:07:37.822513Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.485067Z","title":"Bleu: a method for automatic evaluation of machine translation","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.485067Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:c7111f6974f199a3a29c6ba3adb3a599b8298ae9d430e6a9aca473a936a23186","observation_id":"3326d994-afe6-48f8-815f-39099d32b923","resolution":{"observed_at":"2026-08-07T11:07:37.485067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.803146Z","title":"Meteor: An automatic metric for mt evaluation with improved correlation with human judgments","venue":null,"work_id":"c325f138-7dfa-4fc3-aaba-db6c0771d66a","year":2005},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.488380Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:ba7efb818783d11d388fcca1030f81a4f69de9523aeccbad51a981b6b7d29538","observation_id":"987ed5fc-9422-49bc-972c-e74b452debf8","resolution":{"observed_at":"2026-08-07T11:07:37.806633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.491797Z","title":"Rouge: A package for automatic evaluation of summaries","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.491797Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:ec9ecf29f4d19ea0662909ed4b766b0d6bd2f01fac07e23e6ae69fd10705fb1f","observation_id":"81ef931a-4170-4744-a5ec-87778dac1241","resolution":{"observed_at":"2026-08-07T11:07:37.491797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.785704Z","title":"Cider: Consensus-based image description evaluation","venue":null,"work_id":"e5fe41e0-39c5-4123-a34a-35ee5d953bd6","year":2015},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.495089Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:064b6736de27c8d70f4bd76af0342dd7c7fa1f92bfa0b397d21f51ddcc5e9a2e","observation_id":"e4ff05ae-21b0-455e-9826-b62d20728772","resolution":{"observed_at":"2026-08-07T11:07:37.789269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.775037Z","title":"Spice: Semantic propositional image caption evaluation","venue":null,"work_id":"4b7df536-bbdc-42fe-8820-20ffade02d78","year":2016},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.498468Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:273699a47eea2e092337f77d6a727f3b246b6ea37ff97eefb400fe9bb66972d3","observation_id":"cc02b70a-9ec0-417b-ba73-e2b75d1cd714","resolution":{"observed_at":"2026-08-07T11:07:37.778853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T09:22:18.724369Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":2,"verified_fuzzy":17},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 3 inbound Pith citation observations for arXiv:2506.05401."}