{"as_of":"2026-08-10T07:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:75659cd9f7bc998545a6bd736a2d58770273cc44ce7f9ca763377e51a9687a78","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:41:18.574211Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.13205/citation-record","integrity":"/paper/2506.13205/integrity","json":"/paper/2506.13205/citation-record.json","paper":"/paper/2506.13205"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:16.122277Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.122277Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:aeb182608c04d754cb45d72d8c2b017672e9dbc40943b4caa3f3e4efc3adb13d","observation_id":"71527a2e-caed-4e15-a9e0-98e6f1ebf195","resolution":{"observed_at":"2026-08-07T00:41:16.122277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:16.203281Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.203281Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:a41196be4618439b28ccc1455af4a25cab8df0540345f15319208ca4fe387ef1","observation_id":"0c2ba7ac-3ca8-48aa-80e9-22d2300d174a","resolution":{"observed_at":"2026-08-07T00:41:16.203281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.14198","last_updated":"2022-11-15T23:07:37Z","snapshot_observed_at":"2026-07-06T13:05:12.350238Z","submitted_at":"2022-04-29T16:29:01Z","title":"Flamingo: a Visual Language Model for Few-Shot Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.14198","snapshot_observed_at":"2026-08-07T00:41:16.316084Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.316084Z"},"links":{"cited_paper":"/paper/2204.14198","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:b109360d399b06ad5246a431d6782720bfdc5534b2d56774d4a87dec559873fe","observation_id":"047da159-882b-4a99-82a3-4ae4a11b850c","resolution":{"observed_at":"2026-08-07T00:41:16.316084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.239325Z","title":null,"venue":null,"work_id":"7f2fecbd-a6c2-4a3b-9cf6-40ee22a771b6","year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.426143Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:2f2ef9176324c79378fde79944298080ee55d419c59d42cbf836aff44a515d2f","observation_id":"f559a777-556a-4a7e-a75f-46817e059f45","resolution":{"observed_at":"2026-08-07T00:41:19.244305Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.227615Z","title":null,"venue":null,"work_id":"b93d7974-cf6d-4383-9240-1a816f7d8534","year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.540308Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:cbfef0a03051b98e04c1f97a74f3ccaadeeda9a572ae0f22d842480bf0964bbd","observation_id":"30b1a136-5a95-4b84-b526-68421a40936a","resolution":{"observed_at":"2026-08-07T00:41:19.231700Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.214525Z","title":null,"venue":null,"work_id":"c0c703a3-5461-4a9b-8ff6-4514e8a936dd","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.656154Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:cdb6fa0bb81b49188577585451aed1ffa8f6bfdc0dc07cb0c7460883a646ed2c","observation_id":"f48c211c-d971-4c6d-8b28-7132066f2350","resolution":{"observed_at":"2026-08-07T00:41:19.218959Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.10760","last_updated":"2020-08-02T08:38:25Z","snapshot_observed_at":"2026-08-09T12:13:44.628029Z","submitted_at":"2020-07-21T12:49:12Z","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.10760","snapshot_observed_at":"2026-08-07T00:41:16.805250Z","title":"G.; Zhang, Z.; Ma, S.; Zhang, J.; Fu, A.; Nepal, S.; and Kim, H","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.805250Z"},"links":{"cited_paper":"/paper/2007.10760","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:758bbe0b4b655ab269eb4b5fdd08cbaf1bf60d105b0f789dd37a2f03ca8d56bc","observation_id":"fd977ed3-8e55-4362-b665-ed04b9859aa6","resolution":{"observed_at":"2026-08-07T00:41:16.805250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.201665Z","title":"H.; Huang, W","venue":null,"work_id":"76ac3401-00d9-446e-a7bc-f725b95dea45","year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.899091Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:a0076c4ae4ba3d0b56aa5d23fbae50a5c19205144bde94b5447b13a12eb6475c","observation_id":"fe7a3e3a-ec04-4b8f-ab34-906f12f4be50","resolution":{"observed_at":"2026-08-07T00:41:19.205878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.187497Z","title":null,"venue":null,"work_id":"e01de745-a585-4404-8e95-b52c74154bbb","year":2019},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:16.906934Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:051bc26ee1de472b3d62c2bcb6e4d384e5b53286763529bd2f9e420302c36053","observation_id":"8cd1fc27-94eb-4bac-a002-8f8e9320cc30","resolution":{"observed_at":"2026-08-07T00:41:19.192259Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.172147Z","title":null,"venue":null,"work_id":"03671e06-42fe-4a05-a7d4-2a2e070888fe","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.035686Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:90606be5dc6fc8bb79258376d2c8c77ff055fd228d7c16970f692638b37e653b","observation_id":"05567f60-673e-4560-94a0-2a28d88406b8","resolution":{"observed_at":"2026-08-07T00:41:19.176938Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.157635Z","title":"R.; Geiping, J.; Fowl, L.; Taylor, G.; and Goldstein, T","venue":null,"work_id":"f85f473e-46d5-4103-98f8-8cb692efc521","year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.176670Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:a8b532cfcb8d5ea6791bcb967e9fb3a9718e6aead51b770b159272704143ff34","observation_id":"b1ffaa13-825f-4d38-956a-0220a1cd981f","resolution":{"observed_at":"2026-08-07T00:41:19.162735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.143970Z","title":null,"venue":null,"work_id":"d1c1fb53-661c-4e01-ae31-753229b5594e","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.229084Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:dd040d65b33fde179a6f24e35eefa494cc271a29452558639d20ecbc60e9a22a","observation_id":"12fb763a-e467-4558-a99f-4d1798bee74e","resolution":{"observed_at":"2026-08-07T00:41:19.148956Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:17.282335Z","title":"S.; Knox, W","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.282335Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:81ab4af2342797ae5ae818d9b33ac6cca5d0365091889976e611021af49ab57b","observation_id":"852e8dac-7d3e-49cc-b8aa-4d9becc15057","resolution":{"observed_at":"2026-08-07T00:41:17.282335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16660","last_updated":"2025-07-21T02:55:09Z","snapshot_observed_at":"2026-08-04T12:26:21.610975Z","submitted_at":"2024-04-25T14:56:32Z","title":"Benchmarking Mobile Device Control Agents across Diverse Configurations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16660","snapshot_observed_at":"2026-08-07T00:41:17.321712Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.321712Z"},"links":{"cited_paper":"/paper/2404.16660","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:6f9b1e567a58bc54415cd67c3217669e5fce7ef27723bd87fc6c9b69bc23007a","observation_id":"e7c7becf-7277-4fe9-91e6-bf3a04c8bdb4","resolution":{"observed_at":"2026-08-07T00:41:17.321712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.12597","last_updated":"2023-06-15T07:57:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-01-30T00:56:51Z","title":"BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.12597","snapshot_observed_at":"2026-08-07T00:41:17.364681Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.364681Z"},"links":{"cited_paper":"/paper/2301.12597","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:8d89cc0cc379134dee8e7161f5113577754ee707a77dcc7590d20424485afc06","observation_id":"2590e9a0-22d1-41d3-9e73-0835c4902d5e","resolution":{"observed_at":"2026-08-07T00:41:17.364681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.129714Z","title":null,"venue":null,"work_id":"d35f36f6-ebaa-4c97-91f8-9f3585903654","year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.469579Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:7cd84eb8170ffd0ed6e9037817d361c305412f05fa1581e0c5342802866d4cdc","observation_id":"0b43a751-bbf9-43e8-9a6f-6f57eb772b7c","resolution":{"observed_at":"2026-08-07T00:41:19.134878Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.116125Z","title":null,"venue":null,"work_id":"e5d74363-a759-4593-aedb-e71470d3dc2b","year":2017},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.591178Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:10df78688bceee83785dcf8fb481ca1277cb4b2afe75cbb0e77b4464a324b447","observation_id":"9d17126a-29cf-49fa-b05d-e2ae646f4325","resolution":{"observed_at":"2026-08-07T00:41:19.121076Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:17.650179Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.650179Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:5cdae139ef3ce53a32bd3c16d522d1d1cb3f01efab76fd94418ad40de0d16bdf","observation_id":"fe9bb3b5-cb11-49d0-8840-557356e91df3","resolution":{"observed_at":"2026-08-07T00:41:17.650179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18844","last_updated":"2024-12-16T06:59:33Z","snapshot_observed_at":"2026-07-06T18:37:43.309281Z","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18844","snapshot_observed_at":"2026-08-07T00:41:17.724760Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.724760Z"},"links":{"cited_paper":"/paper/2406.18844","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:e65e935e4ee67eeb3c7aad2cafcc5e4d110ef8df834c82439038e09ee5910160","observation_id":"6f46186f-673f-48bb-a3cf-67794586aeb1","resolution":{"observed_at":"2026-08-07T00:41:17.724760Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02234","last_updated":"2023-10-13T23:43:15Z","snapshot_observed_at":"2026-08-07T04:14:00.052600Z","submitted_at":"2023-10-03T17:43:24Z","title":"MIS-AVoiDD: Modality Invariant and Specific Representation for Audio-Visual Deepfake Detection","version":2},"cited_work":{"arxiv_id":"2310.02234","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.02234","snapshot_observed_at":"2026-08-07T00:41:18.727647Z","title":"MIS-AVoiDD: Modality Invariant and Specific Representation for Audio-Visual Deepfake Detection","venue":"cs.CV","work_id":"612c9498-cf26-49c2-8b67-6f1084822202","year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.844641Z"},"links":{"cited_paper":"/paper/2310.02234","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:b6e2b3a210b45fabacac0d3b75d887172dafdf2ee898250eabede405d07b9562","observation_id":"042b83e8-ab2a-460b-9818-f4055291f251","resolution":{"observed_at":"2026-08-07T00:41:18.735316Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08485","last_updated":"2023-12-11T17:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-17T17:59:25Z","title":"Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.08485","snapshot_observed_at":"2026-08-07T00:41:17.872548Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.872548Z"},"links":{"cited_paper":"/paper/2304.08485","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:637a60bf0cd4d309a999deb249762d4c346426d2ec836395462665fd70bf65d5","observation_id":"b935ded7-16e6-4fc5-bd1f-0ac7ac32744b","resolution":{"observed_at":"2026-08-07T00:41:17.872548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.085896Z","title":"F.; Craft, M.; Situ, J.; Yumer, E.; Mech, R.; and Kumar, R","venue":null,"work_id":"feffca7c-6ee0-410d-bfb2-29c2a801cc41","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.876422Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:49ae18e7b46d0f031b031ecff22255c8f6d9b1ceff79568157631648528c6a06","observation_id":"81dd343f-693a-49ac-b385-ec6bd5c03380","resolution":{"observed_at":"2026-08-07T00:41:19.097921Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.073140Z","title":null,"venue":null,"work_id":"a0234643-aa74-4cde-b7f5-50c4b86d5636","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.892811Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:3a6b5bc77ee9ff05a195e8f1c2e27b2270cbf65458247eca7a498efd0af70344","observation_id":"d4ccf8c1-e379-4f98-9f10-60bca8101441","resolution":{"observed_at":"2026-08-07T00:41:19.078090Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14034","last_updated":"2024-05-20T04:01:08Z","snapshot_observed_at":"2026-08-04T12:43:29.089406Z","submitted_at":"2024-02-21T04:11:28Z","title":"AgentScope: A Flexible yet Robust Multi-Agent Platform","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14034","snapshot_observed_at":"2026-08-07T00:41:17.973029Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:17.973029Z"},"links":{"cited_paper":"/paper/2402.14034","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:2b549dc5871e0242c592aaa7387b670125d125b052602823735dd2bdfe4d025a","observation_id":"36bb6d2c-5470-4a9d-9045-7f8d1f6517c1","resolution":{"observed_at":"2026-08-07T00:41:17.973029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-02T13:52:44.392403Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T00:41:18.032579Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.032579Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:67774e934d6c90119eed575d7b95de24391d9411591fb890525f03476fb9697a","observation_id":"469bd970-a01a-49fe-9887-88f135acdc93","resolution":{"observed_at":"2026-08-07T00:41:18.032579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.059715Z","title":null,"venue":null,"work_id":"ff89cedf-c0cf-4cad-b15f-0e9fc4979e9c","year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.092200Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:54dff5b2eb0a9f383fa34741bea41bbb7d24c2352639c8c8168b56ec549c0f3d","observation_id":"7bddd1bb-5689-49e0-a790-a70ba2823422","resolution":{"observed_at":"2026-08-07T00:41:19.064656Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.046959Z","title":null,"venue":null,"work_id":"eea0569c-237b-4217-a094-b4f9fc453a02","year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.227823Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:00952717da7f938f3d2dc563abed41ce0ca5a10d7330c791b736d41e6480d368","observation_id":"09f46101-0cee-4bc7-89a3-2301a620a09e","resolution":{"observed_at":"2026-08-07T00:41:19.050888Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.030399Z","title":null,"venue":null,"work_id":"6cd0e9d3-80f7-4377-b894-d5b5b89a99c4","year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.335842Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:fa760df75335e8a0d82bc1da472c95a15af03458d044b961643be5ce95aa86c7","observation_id":"0869596f-3c64-45a0-9296-a1a22c1c7722","resolution":{"observed_at":"2026-08-07T00:41:19.034562Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.017154Z","title":null,"venue":null,"work_id":"f4e36b03-1e6e-4b55-a97f-1385b27b3ea2","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.410414Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:23a80a7ce5ead78b4da6f6195153fee9aa4f4701dbbc3e080add0a2522f541a2","observation_id":"db6a696d-8445-4965-961c-2ab73dd4cbbe","resolution":{"observed_at":"2026-08-07T00:41:19.021031Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.003644Z","title":null,"venue":null,"work_id":"e43b78e7-9743-4d84-bf7c-7c8762bcc67c","year":2018},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.472374Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:af06015214722fd391be408b1e40b5153350bbd7c6123b71eeb708951c46a8e6","observation_id":"cd9ffedf-7d3a-453d-b0d0-80e93b14bec2","resolution":{"observed_at":"2026-08-07T00:41:19.008842Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.16158","last_updated":"2024-04-18T06:53:38Z","snapshot_observed_at":"2026-08-05T03:22:24.562938Z","submitted_at":"2024-01-29T13:46:37Z","title":"Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.16158","snapshot_observed_at":"2026-08-07T00:41:18.507084Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.507084Z"},"links":{"cited_paper":"/paper/2401.16158","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:16c2d3962849591d5af1caaa3ce519e081f61db3df28bf0b01a7ca1538977922","observation_id":"2d2c4f0d-959e-4331-a295-bbc88e9a4af5","resolution":{"observed_at":"2026-08-07T00:41:18.507084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.989908Z","title":null,"venue":null,"work_id":"fb09f0c3-5f67-47c3-a68a-98e6c24dd2ed","year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.512552Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:d21b06c74aab0f625f76cdb5667cb496d6d2e2928441ecce0dd94e23c3971b05","observation_id":"e3826458-78bc-4a43-8699-a7a884c0282d","resolution":{"observed_at":"2026-08-07T00:41:18.995486Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.11733","last_updated":"2025-01-28T16:58:02Z","snapshot_observed_at":"2026-08-07T18:11:16.595464Z","submitted_at":"2025-01-20T20:35:46Z","title":"Mobile-Agent-E: Self-Evolving Mobile Assistant for Complex Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.11733","snapshot_observed_at":"2026-08-07T00:41:18.527132Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.527132Z"},"links":{"cited_paper":"/paper/2501.11733","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:3cdd78ab5266eb86c9fe0e51c1dd192ce7f5479ae0af781d121d865b09568aa0","observation_id":"9d88c985-f126-4681-98e2-28a5645b11ca","resolution":{"observed_at":"2026-08-07T00:41:18.527132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-08T18:11:45.725753Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-07T00:41:18.531498Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.531498Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:0d34cf71a6041e465139bb0ccf5407e6fb11984d9ead7bd05f1f6cb8aa744294","observation_id":"99bd5595-e0aa-4e31-b3a2-56a93b045cc4","resolution":{"observed_at":"2026-08-07T00:41:18.531498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-08-07T00:41:18.539302Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.539302Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:be533adf868ad01982a6039dbbdcb3d0f8218fbd778af56f476b706123e7bd4d","observation_id":"99386c66-31b8-4dae-9717-110984556b4d","resolution":{"observed_at":"2026-08-07T00:41:18.539302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.975374Z","title":null,"venue":null,"work_id":"c2ef0edb-0b2b-4757-a514-123b1790d67d","year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.543490Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:ec793333e5917c9e3f913ea856c0b1c63e261e5f9349063a376a23531699ea9f","observation_id":"16fb44d1-9eaf-465d-89a0-46f9917664db","resolution":{"observed_at":"2026-08-07T00:41:18.979986Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.09295","last_updated":"2025-03-16T07:13:53Z","snapshot_observed_at":"2026-08-09T21:02:10.848000Z","submitted_at":"2024-07-12T14:30:05Z","title":"Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.09295","snapshot_observed_at":"2026-08-07T00:41:18.547648Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.547648Z"},"links":{"cited_paper":"/paper/2407.09295","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:3857251945d2477d3266622ec0d4a587f5c7de3f614b2bad4008ac70160eadd4","observation_id":"23a05e30-c1cc-4189-9e85-486f791a6025","resolution":{"observed_at":"2026-08-07T00:41:18.547648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.962538Z","title":null,"venue":null,"work_id":"0c23f9b2-1b8c-4f2b-ab81-4a6b304facd2","year":2022},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.551875Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:a28b5db4a785e59ab81bb68e3ef547ac7fe84913e7654661237e30b419c26f28","observation_id":"dbbba48e-6d31-4a6e-aca3-8652e5927198","resolution":{"observed_at":"2026-08-07T00:41:18.966781Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.949269Z","title":"M.; and Jia, R","venue":null,"work_id":"3c2d2065-eb33-42e7-a288-67f2d6da423c","year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.556129Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:907c84cc330ca6ba894130f99781a41dbdd931570584d1c0945e25c8e91c6470","observation_id":"666ae75f-0ce3-427d-8ee3-2ee2b394d6a8","resolution":{"observed_at":"2026-08-07T00:41:18.953891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.936846Z","title":null,"venue":null,"work_id":"043fb889-f41e-4b00-83dd-d242ac26e340","year":2025},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.560872Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:6babd408a59784482f7ef0bb6e9889afb44a6ef74870d85e9ed0993f4b0a779d","observation_id":"0f79d009-b553-4cc4-a968-4649b3e79710","resolution":{"observed_at":"2026-08-07T00:41:18.941166Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.923956Z","title":null,"venue":null,"work_id":"6e5b621f-68a8-4e08-9917-a09bdf24462f","year":2020},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.565839Z"},"links":{"citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:a8987018702cf968cc616eaec505141a11d7e929af031a156bfda8a2cfa0000f","observation_id":"6190e828-d1b0-430d-8cd1-810923b20c19","resolution":{"observed_at":"2026-08-07T00:41:18.928123Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07972","last_updated":"2024-05-30T08:55:12Z","snapshot_observed_at":"2026-08-09T01:39:11.956106Z","submitted_at":"2024-04-11T17:56:05Z","title":"OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07972","snapshot_observed_at":"2026-08-07T00:41:18.569925Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.569925Z"},"links":{"cited_paper":"/paper/2404.07972","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:dc9da08c8bffc598c4829159b0cea26c891ce7f92b3390fb35dceb7122a690ef","observation_id":"bc31b950-ecb2-4d67-aa18-e3b9c59d6dfd","resolution":{"observed_at":"2026-08-07T00:41:18.569925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-07T00:41:18.574211Z","title":"C.; Liu, Y.; Liu, S.; Wang, Y.; Xu, C.; et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.574211Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:324e96c986a247544099c80112cfe742b73058f69387e3809fb12ebfff345109","observation_id":"d9c4fd39-0ecc-4900-9bd5-4723a34e3b89","resolution":{"observed_at":"2026-08-07T00:41:18.574211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","latest_version":6,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":1,"verified_fuzzy":4},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2506.13205."}