{"as_of":"2026-08-11T04:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:703acb8528076ce714a4e66bb81c82d639c7fcfd0700bf95d7f501c0aae07ce1","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:25:55.155325Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.13761/citation-record","integrity":"/paper/2507.13761/integrity","json":"/paper/2507.13761/citation-record.json","paper":"/paper/2507.13761"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2409.18869","last_updated":"2024-09-27T16:06:11Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-27T16:06:11Z","title":"Emu3: Next-Token Prediction is All You Need","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.18869","snapshot_observed_at":"2026-08-06T16:25:54.844681Z","title":"Emu3: Next-token prediction is all you need,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.844681Z"},"links":{"cited_paper":"/paper/2409.18869","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:7de21c498ac9f0697e3419824a4bd0dd701fb8a30d63146560b6e2bdeafb656a","observation_id":"5a6c1927-51ab-4667-b0ca-dec37a605438","resolution":{"observed_at":"2026-08-06T16:25:54.844681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.09818","last_updated":"2025-03-21T05:54:00Z","snapshot_observed_at":"2026-08-09T20:05:31.409634Z","submitted_at":"2024-05-16T05:23:41Z","title":"Chameleon: Mixed-Modal Early-Fusion Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.09818","snapshot_observed_at":"2026-08-06T16:25:54.850906Z","title":"Chameleon: Mixed-modal early-fusion foundation models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.850906Z"},"links":{"cited_paper":"/paper/2405.09818","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:59d21c25ce79bafb2d5b4dde8de6bd6399c80d71be21f4fde2206316e25c89b7","observation_id":"8dd4b622-4023-46f6-bf39-96e13017a4f6","resolution":{"observed_at":"2026-08-06T16:25:54.850906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:54.856451Z","title":"Vision-language models for vision tasks: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.856451Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:fd20b8e2ed38ac3cd25a099a980e1a42a07164d2d19046ab6e2c86c948451258","observation_id":"705331df-483f-455e-8de1-efb72dc79792","resolution":{"observed_at":"2026-08-06T16:25:54.856451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T16:25:54.863135Z","title":"Gpt-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.863135Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:8b88a3fffde81916661d3aebf6fea12c6bb430925ae3bce39df4c855eb7fedc6","observation_id":"df1aeae7-2ad4-4d4e-bda9-fc364eef68cc","resolution":{"observed_at":"2026-08-06T16:25:54.863135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.206985Z","title":"Ruart: A novel text-centered solution for text-based visual question answering,","venue":null,"work_id":"9882ff1f-40db-4da0-9af2-3ea923136ffd","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.867537Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:e2403a6abc597f717b267151830fe5d89185085d3b6910d78af654abc12fd44b","observation_id":"732c6b87-0776-4659-8727-9d9ce696ee0d","resolution":{"observed_at":"2026-08-06T16:25:56.211359Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.192203Z","title":"Linin: Logic integrated neural inference network for explanatory visual question answering,","venue":null,"work_id":"a11af681-2b25-4837-9d1e-aaea36133400","year":2025},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.873672Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:f585d38c811ac69940d4a2c138aa2d5afdef3fc1040a2f36426db629573ee5aa","observation_id":"7a0c4457-cf1a-40ab-ba9b-0aabe9c8bf3d","resolution":{"observed_at":"2026-08-06T16:25:56.196836Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.176581Z","title":"Expllm: Towards chain of thought for facial expression recognition,","venue":null,"work_id":"dca293f4-e1a5-48f5-80ee-ca9e1f3077ec","year":2025},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.878716Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:13f3425fca5dee8898eb1d88a4bdc12ec917e5820789ee07e630aa02a31526ee","observation_id":"f3eaeb8b-6572-459b-805d-d3e4ac394137","resolution":{"observed_at":"2026-08-06T16:25:56.181461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T16:25:54.883404Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.883404Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:aae8925bf67e0d96bbdb5cac2b0e9a1812fb3a27c8a7d8a9f02e95479cdb79ca","observation_id":"fa31761e-3949-45f7-ae22-ae12307ef775","resolution":{"observed_at":"2026-08-06T16:25:54.883404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.159683Z","title":"Knowledge enhanced vision and language model for multi-modal fake news detec- tion,","venue":null,"work_id":"862b4399-331f-4666-a7e6-6098e4001d9b","year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.887981Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:437222fcae697ffdbe0ad7b6d7d65d2a4419e7663a9f44e9db498e98284fd6b4","observation_id":"19fd6cb6-5199-42b1-a544-74eef5f45091","resolution":{"observed_at":"2026-08-06T16:25:56.165122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:54.891839Z","title":"Llavanext: Improved reasoning, ocr, and world knowledge,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.891839Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:809c3971a1cffd3744c6014fe8eac4e05afe26eee135194c178fd727eeec282b","observation_id":"d7883bfb-5416-46af-9320-1330ee05f87d","resolution":{"observed_at":"2026-08-06T16:25:54.891839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.129900Z","title":"Qwen-vl: A versatile vision-language model for understanding, localization,","venue":null,"work_id":"c9e57953-6cd0-41fa-906f-f542f49a50eb","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.896780Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:02bbb54008c34477f65a0c29967dd99c493c4580530439ef3945ef8c875e6a8e","observation_id":"91690a51-a790-4cb0-b52e-7b3c72d0f213","resolution":{"observed_at":"2026-08-06T16:25:56.135648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.06395","last_updated":"2024-06-03T08:54:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-04-09T15:36:50Z","title":"MiniCPM: Unveiling the Potential of Small Language Models with Scalable Training Strategies","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.06395","snapshot_observed_at":"2026-08-06T16:25:54.901249Z","title":"Minicpm: Unveiling the potential of small language models with scalable training strategies,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.901249Z"},"links":{"cited_paper":"/paper/2404.06395","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:3bcd9035583774fd05c54523a76db780eca4a4085d131adec95b11f7599c08b4","observation_id":"1b6aed19-8c64-4c38-8411-0b45853f4038","resolution":{"observed_at":"2026-08-06T16:25:54.901249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.111000Z","title":"Single-stream multi-level alignment for vision-language pretraining,","venue":null,"work_id":"390c740c-c201-4f7c-b326-f853de5735a6","year":2022},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.905825Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:cc1e66605f55e327be5823517da237739d81a59ca626176e635888cd386528af","observation_id":"8636a464-0b69-4b26-b346-0146e9b89072","resolution":{"observed_at":"2026-08-06T16:25:56.116712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.085611Z","title":"Vilbert: Pretraining task-agnostic visiolinguistic representations for vision-and-language tasks,","venue":null,"work_id":"f044b6ae-e705-4074-a6e3-336b1c48e1a2","year":2019},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.910457Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:b06d3b1711a0b2b90a46228a1f835f09e07e0c8c42e4930073f060c81d5e7a48","observation_id":"af2a794a-b995-438a-a53a-b4fab9baa6f2","resolution":{"observed_at":"2026-08-06T16:25:56.091241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.066509Z","title":"Vision-language pretrain- ing: Current trends and the future,","venue":null,"work_id":"0454a1e6-0541-49cc-be61-8368d545450e","year":2022},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.914945Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:9a5f0ef6bcfac4714e126c5f9648d3369cda21c9890efc3f84aa0cd5c2923787","observation_id":"4f91fc69-fbbc-49fd-b064-376ce816d7de","resolution":{"observed_at":"2026-08-06T16:25:56.071233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.10936","last_updated":"2022-07-16T01:27:59Z","snapshot_observed_at":"2026-07-06T12:40:27.042790Z","submitted_at":"2022-02-18T15:15:46Z","title":"A Survey of Vision-Language Pre-Trained Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.10936","snapshot_observed_at":"2026-08-06T16:25:54.920538Z","title":"A survey of vision-language pre-trained models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.920538Z"},"links":{"cited_paper":"/paper/2202.10936","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:2725737f25a39b0627764eb4022386996b8545d975dac698330e20367812e761","observation_id":"186cde67-7b07-4077-919c-ee7175e5e096","resolution":{"observed_at":"2026-08-06T16:25:54.920538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:54.925962Z","title":"Transformers in vision: A survey,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.925962Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:a6b3a1461d459d6c286fe5c91fd0e64efccfd990fcb30c85482adca37f41d4c9","observation_id":"cc414044-ae4e-479d-9620-7aa3391eab6c","resolution":{"observed_at":"2026-08-06T16:25:54.925962Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.035186Z","title":"Cross- lingual adaptation for vision-language model via multimodal semantic distillation,","venue":null,"work_id":"e9d092c2-c5ea-4589-a08e-c24807c5f722","year":2025},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.930301Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:8eb6f507d89c83009672aa691426a14bcca261740ff8040ba105d0f49ec44262","observation_id":"be71c3e6-5392-4787-aecd-32ba8100a00f","resolution":{"observed_at":"2026-08-06T16:25:56.042240Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:56.012639Z","title":"Vlattack: Multimodal adversarial attacks on vision-language tasks via pre-trained models,","venue":null,"work_id":"218e39d6-579c-4251-8a08-8e162e4b7bbe","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.934742Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:de9b948ca0460575ad335e080d450d799a60e75fee711a0bfe5f507afc69ffe1","observation_id":"b1b6e5af-3d42-4610-a470-8477641d84bb","resolution":{"observed_at":"2026-08-06T16:25:56.017957Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.993203Z","title":"Can llms’ tuning methods work in medical multimodal domain?","venue":null,"work_id":"1c74bfd0-f79a-4b7a-91b0-d27998c8086a","year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.939127Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:3e9fc5ac4f2a7fdf7e267c216ed7a0965e82ecc6be616aba2fd64ad9cb94932b","observation_id":"a80673a5-59e8-4f1b-80fb-c3c90d84af93","resolution":{"observed_at":"2026-08-06T16:25:55.998949Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.971178Z","title":"Are aligned neural networks adversarially aligned?","venue":null,"work_id":"2ba7739a-8753-461b-817b-7882cb7c2e8e","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.943548Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:8aab457ae423c4a6611fc1a1c1a313ae75079f1583ff1d3a588ea2ed2dd886d8","observation_id":"53901ce1-f86b-4d32-9791-64d749a30aef","resolution":{"observed_at":"2026-08-06T16:25:55.976007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12803","last_updated":"2024-02-19T02:47:21Z","snapshot_observed_at":"2026-07-06T16:50:42.754354Z","submitted_at":"2023-09-15T01:34:02Z","title":"On Copyright Risks of Text-to-Image Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12803","snapshot_observed_at":"2026-08-06T16:25:54.948412Z","title":"On copyright risks of text-to-image diffusion models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.948412Z"},"links":{"cited_paper":"/paper/2311.12803","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:5836bab2fa0b898aa5eff4a6f3b1ed1f6844b8e37ab88b479ef8c9c706ee7e74","observation_id":"f7dc6641-c263-4060-84e6-747a630c28fa","resolution":{"observed_at":"2026-08-06T16:25:54.948412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.10013","last_updated":"2021-03-18T04:23:21Z","snapshot_observed_at":"2026-08-11T03:28:55.154751Z","submitted_at":"2021-03-18T04:23:21Z","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","version":1},"cited_work":{"arxiv_id":"2103.10013","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.10013","snapshot_observed_at":"2026-08-06T16:25:55.566735Z","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","venue":"cs.CL","work_id":"546ff07d-1494-4396-a147-f36142d21157","year":2021},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.954689Z"},"links":{"cited_paper":"/paper/2103.10013","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:9cf6843e58fd81a636537fe9643684b6d7c284b62fd7915e228c5e0bdd372922","observation_id":"7d58ed6e-7da7-40da-8584-d3fb9e3af728","resolution":{"observed_at":"2026-08-06T16:25:55.572720Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.04874","last_updated":"2023-06-08T02:07:49Z","snapshot_observed_at":"2026-08-06T13:19:37.403859Z","submitted_at":"2023-06-08T02:07:49Z","title":"Expanding Scope: Adapting English Adversarial Attacks to Chinese","version":1},"cited_work":{"arxiv_id":"2306.04874","doi":null,"metadata_source":"pith","pith_arxiv_id":"2306.04874","snapshot_observed_at":"2026-08-06T16:25:55.542333Z","title":"Expanding Scope: Adapting English Adversarial Attacks to Chinese","venue":"cs.CL","work_id":"63ab9c24-e0ac-4838-a450-10e443553616","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.959971Z"},"links":{"cited_paper":"/paper/2306.04874","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:1b7b30d5c60ee9d1ed5a61dcbeb39682a68be2d91ca5fde32c0afd770a28fe9a","observation_id":"7e635d3c-7930-45cd-a37b-b5358f81ed5b","resolution":{"observed_at":"2026-08-06T16:25:55.547598Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.11136","last_updated":"2021-05-25T08:24:19Z","snapshot_observed_at":"2026-07-06T11:12:04.788175Z","submitted_at":"2021-05-24T07:35:56Z","title":"Using Adversarial Attacks to Reveal the Statistical Bias in Machine Reading Comprehension Models","version":2},"cited_work":{"arxiv_id":"2105.11136","doi":null,"metadata_source":"pith","pith_arxiv_id":"2105.11136","snapshot_observed_at":"2026-08-06T16:25:55.517919Z","title":"Using Adversarial Attacks to Reveal the Statistical Bias in Machine Reading Comprehension Models","venue":"cs.CL","work_id":"f0d4a85e-4244-401c-abe0-4eb971cb554e","year":2021},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.964818Z"},"links":{"cited_paper":"/paper/2105.11136","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:2e6e4b4caefc8f8b85bab60982e4ead463efc617f60fe37ea9103c190bb9c98c","observation_id":"82d50c74-e9a1-4e10-84a4-005db90a5202","resolution":{"observed_at":"2026-08-06T16:25:55.524211Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:54.971698Z","title":"Adversarial attacks on deep-learning models in natural language processing: A survey,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.971698Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:b2d0de05effc8e431a1e44ee5b8ce14b89f56fa1524136629d68ce9ccc78dcaf","observation_id":"c640f369-dca2-470e-8be3-0374fbec7979","resolution":{"observed_at":"2026-08-06T16:25:54.971698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.943651Z","title":"Many-shot jailbreaking,","venue":null,"work_id":"29f18c2a-8a90-4815-8358-24e74a9145ca","year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.976890Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:615492ca2e36077a0e8e61ad3d19a1b7f7bc84c9bbc582cdaa848d6c9c63d8fe","observation_id":"7320f61b-dcd2-4c9c-babf-55d5cc4b1c8c","resolution":{"observed_at":"2026-08-06T16:25:55.948101Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.927096Z","title":"Initial response selection for prompt jailbreaking using model steering,","venue":null,"work_id":"0f37cca7-a5f9-47ea-8856-20c7d6641138","year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.981804Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:ef893bd6a1de25aea67cea19f4e864da2b26ecefda069dc163a2b1f6551f451a","observation_id":"41958f57-8d55-4563-899c-645a5bff8932","resolution":{"observed_at":"2026-08-06T16:25:55.932049Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.908409Z","title":"Beavertails: Towards improved safety alignment of llm via a human-preference dataset,","venue":null,"work_id":"17ed03a3-5a88-4ee2-b08c-9799db3b9752","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.988144Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:59d0a2abbfef32a8d543b923a2e381816bce4e81cd461adaf54587815c2db4e1","observation_id":"3758d75c-3d22-417f-9c75-4ed65546a083","resolution":{"observed_at":"2026-08-06T16:25:55.914971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.883040Z","title":"Recent advances in online hate speech moderation: Multimodality and the role of large models,","venue":null,"work_id":"39762856-25e1-4a5b-9887-4a19c89f1927","year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:54.993015Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:c5870b3a38554dde45bdaa15fa4a1d8315d7bd3248fcff83256c6e7dfbb16f04","observation_id":"204ed18b-7f22-424f-8299-047e8f6a7c45","resolution":{"observed_at":"2026-08-06T16:25:55.888833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.20541","last_updated":"2026-07-25T04:46:02Z","snapshot_observed_at":"2026-08-10T23:16:12.541960Z","submitted_at":"2024-12-29T18:16:28Z","title":"SAFE-MEME: Structured Reasoning Framework for Robust Hate Speech Detection in Memes","version":2},"cited_work":{"arxiv_id":"2412.20541","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.20541","snapshot_observed_at":"2026-08-06T16:25:55.488145Z","title":"SAFE-MEME: Structured Reasoning Framework for Robust Hate Speech Detection in Memes","venue":"cs.CL","work_id":"6a9a55bb-59e5-45ca-8ebe-c2ea25ee141d","year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.000600Z"},"links":{"cited_paper":"/paper/2412.20541","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:9e955e8a8927196a58938f2a31a0ca3b6e04f4bf5954e3171334ccaafebe5768","observation_id":"b8b60f64-dcbb-491e-81ac-adf098b03351","resolution":{"observed_at":"2026-08-06T16:25:55.496056Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.013375Z","title":"Visual instruction tuning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.013375Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:28626544b7a9d658793b046e55391b4c3f629794549f2871f6ee686a0de82e2d","observation_id":"ef930ae3-308a-4479-ae13-6f773fe41427","resolution":{"observed_at":"2026-08-06T16:25:55.013375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.019936Z","title":"Improved baselines with visual instruction tuning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.019936Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:3aa3678f8718fcd4485a2fb83f0de3438f979e23818a07e14d001341b995dc7b","observation_id":"85ef221a-2284-4b52-afe7-5acdb8aeec56","resolution":{"observed_at":"2026-08-06T16:25:55.019936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-06T16:25:55.025146Z","title":"Minigpt-4: Enhancing vision-language understanding with advanced large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.025146Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:c6d42d9892bbe2b88458df50560728a38e3578cd2e6f211f0b640e3bc92618fb","observation_id":"be409a53-35c4-4ce7-9730-8bd847b04c7a","resolution":{"observed_at":"2026-08-06T16:25:55.025146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.15140","last_updated":"2023-12-14T06:22:51Z","snapshot_observed_at":"2026-08-03T19:47:58.067345Z","submitted_at":"2023-10-23T17:46:07Z","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.15140","snapshot_observed_at":"2026-08-06T16:25:55.036577Z","title":"Autodan: interpretable gradient-based adversarial attacks on large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.036577Z"},"links":{"cited_paper":"/paper/2310.15140","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:0fd36430f4df18ca498a917114b74dfaebce0fbeb85ffb54faea0e18e9830a1f","observation_id":"b1c5ce87-f4d7-4fd6-ba0a-a17814a1e47c","resolution":{"observed_at":"2026-08-06T16:25:55.036577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.832905Z","title":"Automatically auditing large language models via discrete optimization,","venue":null,"work_id":"1000b31c-7a6f-47ba-bc34-1a769f638eb6","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.043708Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:dd902baffd4e823594cab5fe24c44389d2ac692e6b7b52473b01f0656ae22588","observation_id":"0b62fd4d-4d61-4d67-ac3e-35de3395c7f4","resolution":{"observed_at":"2026-08-06T16:25:55.839054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.815933Z","title":"Sensitivity of adversarial perturbation in fast gradient sign method,","venue":null,"work_id":"e382740b-9302-4791-9a91-7c7fcdba1b8a","year":2019},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.049108Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:3c9c9cb856bf9f6621b33238f5fe36951e7b1840a2093774cc26f46f7aa1490d","observation_id":"21bc42eb-3179-4d34-b1a2-5d6df52742d0","resolution":{"observed_at":"2026-08-06T16:25:55.820693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-07-06T15:59:03.095461Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-06T16:25:55.054008Z","title":"Jailbreak in pieces: Compositional adversarial attacks on multi-modal language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.054008Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:e85e2f9bfe8447333cc76f4482e9ace2af5bb608bd5fecd04a34db22a0e4437c","observation_id":"6565244e-3082-400d-8c66-a9983a9a5b07","resolution":{"observed_at":"2026-08-06T16:25:55.054008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04782","last_updated":"2023-12-08T01:41:36Z","snapshot_observed_at":"2026-08-09T19:54:55.776897Z","submitted_at":"2023-12-08T01:41:36Z","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04782","snapshot_observed_at":"2026-08-06T16:25:55.059952Z","title":"Make them spill the beans! coercive knowledge extraction from (production) llms,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.059952Z"},"links":{"cited_paper":"/paper/2312.04782","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:39ccd1b1492cfb9d162a6459349016e8a0bc620275865ed71b63247241802f9f","observation_id":"42587ae5-54d0-43ec-827f-d5f42df8fa1d","resolution":{"observed_at":"2026-08-06T16:25:55.059952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04127","last_updated":"2024-02-23T07:32:27Z","snapshot_observed_at":"2026-08-11T03:07:30.734637Z","submitted_at":"2023-12-07T08:29:58Z","title":"Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreak","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04127","snapshot_observed_at":"2026-08-06T16:25:55.064809Z","title":"Analyzing the inherent response tendency of llms: Real-world instructions-driven jailbreak,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.064809Z"},"links":{"cited_paper":"/paper/2312.04127","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:00502c326b03232917f4b91c39d3b194b654b2730d146a95571152ca082bfaf0","observation_id":"e935f0d9-eb2b-400a-96d5-da4ed0bfeee9","resolution":{"observed_at":"2026-08-06T16:25:55.064809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02949","last_updated":"2023-10-04T16:39:31Z","snapshot_observed_at":"2026-08-07T11:20:01.991656Z","submitted_at":"2023-10-04T16:39:31Z","title":"Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02949","snapshot_observed_at":"2026-08-06T16:25:55.069605Z","title":"Shadow alignment: The ease of subverting safely-aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.069605Z"},"links":{"cited_paper":"/paper/2310.02949","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:4a6950308d3b0dae0f3032d8e048a91c7d950f2681dfade1748521cef45313ac","observation_id":"916ad6f6-f012-41d2-8414-a9fbb17f21ee","resolution":{"observed_at":"2026-08-06T16:25:55.069605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03693","last_updated":"2023-10-05T17:12:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-05T17:12:17Z","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03693","snapshot_observed_at":"2026-08-06T16:25:55.075571Z","title":"Fine-tuning aligned language models compromises safety, even when users do not intend to!","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.075571Z"},"links":{"cited_paper":"/paper/2310.03693","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:1d27a77f8e003f632e6a8287720ea28ee92c19ff2f6893ec9727491b4b79b637","observation_id":"12c20f4d-b595-436c-a237-9586189e6994","resolution":{"observed_at":"2026-08-06T16:25:55.075571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.20624","last_updated":"2024-05-22T08:39:46Z","snapshot_observed_at":"2026-08-02T03:56:52.247351Z","submitted_at":"2023-10-31T16:55:06Z","title":"LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.20624","snapshot_observed_at":"2026-08-06T16:25:55.084303Z","title":"Lora fine-tuning effi- ciently undoes safety training in llama 2-chat 70b,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.084303Z"},"links":{"cited_paper":"/paper/2310.20624","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:4a3daf59555088ba163e2507cfd11ff73ca21fd32f689a3d858f4ca90cb34b89","observation_id":"30f57e83-21f8-4faa-998b-68177e063140","resolution":{"observed_at":"2026-08-06T16:25:55.084303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-04T19:12:56.970085Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-06T16:25:55.089780Z","title":"Deepinception: Hypnotize large language model to be jailbreaker,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.089780Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:ce734e4e41fa89e23e7738c496dcd0a4634306c75c722c2583596054b30dee72","observation_id":"9d65a151-61fa-4fea-bf6d-bd0608ce2dbd","resolution":{"observed_at":"2026-08-06T16:25:55.089780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-06T16:25:55.095257Z","title":"A wolf in sheep’s clothing: Generalized nested jailbreak prompts can fool large language models easily,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.095257Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:f541416856774a0c5c0b8c483a032515d68f30bbad648a51ee73271250617a44","observation_id":"23bb944b-9264-4f3b-a8fb-8369d3702ef7","resolution":{"observed_at":"2026-08-06T16:25:55.095257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-06T13:25:52.403871Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-06T16:25:55.100347Z","title":"Jailbreak and guard aligned language models with only few in-context demonstrations,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.100347Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:e3c337d8b9f5a7eaffaa4ff3a692cc7c5928d3b36806accaa642c3511b6dc055","observation_id":"bf2e2b86-141e-493b-a58e-0e75f00be4e4","resolution":{"observed_at":"2026-08-06T16:25:55.100347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14950","last_updated":"2023-10-14T05:03:53Z","snapshot_observed_at":"2026-08-10T21:04:13.221893Z","submitted_at":"2023-05-24T09:40:56Z","title":"Adversarial Demonstration Attacks on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14950","snapshot_observed_at":"2026-08-06T16:25:55.105777Z","title":"Adversarial demonstration attacks on large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.105777Z"},"links":{"cited_paper":"/paper/2305.14950","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:4f13684022f929c9817e526df3460a7a61e0b7a996655a282c2b58fc64ba9922","observation_id":"1005bcbf-d5d3-4f4b-aa65-4bb452d31ace","resolution":{"observed_at":"2026-08-06T16:25:55.105777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.797010Z","title":"The hateful memes challenge: Detecting hate speech in multimodal memes,","venue":null,"work_id":"e130c430-7838-49d3-a093-ee120b1a4e3e","year":2020},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.110483Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:80ef01519534646e4bab00929639719b1360489b04d162c3c1c10f95d2b7fa4f","observation_id":"95f20048-6976-4cde-bcf2-2af1c69c0214","resolution":{"observed_at":"2026-08-06T16:25:55.803319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.02199","last_updated":"2025-03-04T02:21:07Z","snapshot_observed_at":"2026-08-07T17:31:49.776715Z","submitted_at":"2025-03-04T02:21:07Z","title":"Words or Vision: Do Vision-Language Models Have Blind Faith in Text?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.02199","snapshot_observed_at":"2026-08-06T16:25:55.114952Z","title":"Words or vision: Do vision-language models have blind faith in text?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.114952Z"},"links":{"cited_paper":"/paper/2503.02199","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:8fd30cb68c19be2da9c2881236b507689b3d30e462d89a44c6b9295de42112d3","observation_id":"4f818ba9-efa0-41f6-a64f-7df6b755f483","resolution":{"observed_at":"2026-08-06T16:25:55.114952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.121467Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.121467Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:3f142b73fc7da669e34f53b71a188210727077985159c160ba4e6c2ca0264851","observation_id":"3082215d-6c67-40cf-9f02-11bea55c8486","resolution":{"observed_at":"2026-08-06T16:25:55.121467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.06450","last_updated":"2016-07-21T19:57:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-07-21T19:57:52Z","title":"Layer Normalization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.06450","snapshot_observed_at":"2026-08-06T16:25:55.126609Z","title":"Layer normalization,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.126609Z"},"links":{"cited_paper":"/paper/1607.06450","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:9d43d28390fc4466c8be73d8b8d294a27b2b054ab3fe2ac72716998a3118992f","observation_id":"e9d8afc5-bf34-40b6-8d5b-86660bb79f8f","resolution":{"observed_at":"2026-08-06T16:25:55.126609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.12405","last_updated":"2024-10-16T09:38:13Z","snapshot_observed_at":"2026-07-06T19:34:27.813248Z","submitted_at":"2024-10-16T09:38:13Z","title":"ProSA: Assessing and Understanding the Prompt Sensitivity of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.12405","snapshot_observed_at":"2026-08-06T16:25:55.131501Z","title":"Prosa: Assessing and understanding the prompt sensitivity of llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.131501Z"},"links":{"cited_paper":"/paper/2410.12405","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:fb6c8d653ae24df3ab215bea6b5ad5f59713ced1e4ed2e02129b3832b4fa263b","observation_id":"af35e8b4-42d9-4e80-be8b-aa6374db1b08","resolution":{"observed_at":"2026-08-06T16:25:55.131501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11865","last_updated":"2024-08-17T17:40:52Z","snapshot_observed_at":"2026-08-11T00:30:57.611366Z","submitted_at":"2024-08-17T17:40:52Z","title":"How Susceptible are LLMs to Influence in Prompts?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11865","snapshot_observed_at":"2026-08-06T16:25:55.136843Z","title":"How susceptible are llms to influence in prompts?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.136843Z"},"links":{"cited_paper":"/paper/2408.11865","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:3839c93bb367b93d901f33cf2fb01a142c97ce2a41ac589e22eba34f060a9396","observation_id":"377bc4c5-136a-4e59-a5a0-545925f4f1c5","resolution":{"observed_at":"2026-08-06T16:25:55.136843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.767263Z","title":"Jailbroken: How does llm safety training fail?","venue":null,"work_id":"a94790a2-eec5-4cb6-87fa-e8192a78b03c","year":2023},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.143655Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:7bdb32e27368eddd6093c32281347cf9c5a019e6b218145f427fe612d07a2959","observation_id":"166ab120-6489-4650-9969-ea61dc7597cd","resolution":{"observed_at":"2026-08-06T16:25:55.771711Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11717","last_updated":"2024-10-30T18:57:07Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-17T16:36:12Z","title":"Refusal in Language Models Is Mediated by a Single Direction","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11717","snapshot_observed_at":"2026-08-06T16:25:55.149269Z","title":"Refusal in language models is mediated by a single direction,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.149269Z"},"links":{"cited_paper":"/paper/2406.11717","citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:d68db798fb1fed10ae26940deca9cdbe6283168b163dbaaa1e6adef08d5c3541","observation_id":"cf7506da-f3c4-48d6-a15b-a5a6cff5a767","resolution":{"observed_at":"2026-08-06T16:25:55.149269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:55.751995Z","title":"The llama 3 family of models,","venue":null,"work_id":"bce5e865-228d-41db-9652-740e37ee6e49","year":2024},"citing_paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:55.155325Z"},"links":{"citing_paper":"/paper/2507.13761"},"observation_digest":"sha256:1f4b6907e6baf629057153a6bdce4457778f7f4d92a38bfec1dccc2d75fd0e58","observation_id":"d5e1b1f2-e691-4c03-bb59-cd18192effab","resolution":{"observed_at":"2026-08-06T16:25:55.757084Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.13761","last_updated":"2025-07-18T09:13:05Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T17:23:00.228187Z","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":4,"verified_fuzzy":21},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2507.13761."}