{"as_of":"2026-08-09T13:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8987f70ad59b695685ee6ee575af9c71784dd845327da8c99d3c662ce997ea58","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T12:15:04.663911Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.21985/citation-record","integrity":"/paper/2507.21985/integrity","json":"/paper/2507.21985/citation-record.json","paper":"/paper/2507.21985"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.698339Z","title":"Nudenet: Neural nets for nudity classification, detection and selective censoring","venue":null,"work_id":"875476cc-a859-445f-b6c2-a46c953f443b","year":2019},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.370564Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:e21c944bb624dcd71b05df5f02f69ba43f59cee8e28b2fb99c6081207e029cd2","observation_id":"dcfc12df-46c0-43d8-99eb-bf2a4db607a7","resolution":{"observed_at":"2026-08-06T12:15:05.704436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.681149Z","title":"Towards making systems for- get with machine unlearning","venue":null,"work_id":"a6e80e26-bab2-4994-94fc-2baa9cc92df0","year":2015},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.376722Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:d629e0c900b3e2121b6f7964c478e85bfdd7f9cd5ca9f7fa4a802c0b8849c3e4","observation_id":"a1cac300-db54-4038-bd57-21b66ae54597","resolution":{"observed_at":"2026-08-06T12:15:05.686657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15241","last_updated":"2024-05-21T11:07:58Z","snapshot_observed_at":"2026-08-02T04:16:08.176028Z","submitted_at":"2023-05-24T15:25:19Z","title":"Robust Classification via a Single Diffusion Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.15241","snapshot_observed_at":"2026-08-06T12:15:04.382570Z","title":"Robust clas- sification via a single diffusion model","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.382570Z"},"links":{"cited_paper":"/paper/2305.15241","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:505e76305b747dab18e8e27cd146f890f4b9aaa51e1e8667970d1a7dc810d307","observation_id":"3acac144-f0c9-42ef-bf78-426f66ebd064","resolution":{"observed_at":"2026-08-06T12:15:04.382570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.663645Z","title":"Internvl: Scaling up vision foundation mod- els and aligning for generic visual-linguistic tasks","venue":null,"work_id":"18fe3505-392a-459a-85da-6589b8be0cdf","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.388105Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:91bda0ed8aa8621d0d4cb1864cad7981ae360be1f9b316ba1b6af0cfe72edcc5","observation_id":"a3d8d438-aece-44bb-9c59-1dba15145f7c","resolution":{"observed_at":"2026-08-06T12:15:05.669114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:04.393736Z","title":"Prompting4debugging: Red- teaming text-to-image diffusion models by finding problem- atic prompts","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.393736Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:011b90f1e610de365c89b433e7ae11b2fcfe7faf150e2c6ba43e50c532ca78d2","observation_id":"65aa8408-070c-4be1-96d0-b0cc1cb2fcfe","resolution":{"observed_at":"2026-08-06T12:15:04.393736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11071","last_updated":"2025-02-06T04:37:01Z","snapshot_observed_at":"2026-08-08T01:37:38.628620Z","submitted_at":"2024-08-18T03:16:59Z","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","version":2},"cited_work":{"arxiv_id":"2408.11071","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.11071","snapshot_observed_at":"2026-08-06T12:15:04.941296Z","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","venue":"cs.CR","work_id":"cc7eb21f-0a40-47bd-9792-5c3aa0e1eb06","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.399305Z"},"links":{"cited_paper":"/paper/2408.11071","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:1583f59b0fc4ddf437b676f638cdda9e2c10b5a4c8162e1f537b14126a33da3e","observation_id":"90f1963a-c042-41e3-ba33-c812608fec97","resolution":{"observed_at":"2026-08-06T12:15:04.947370Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.646616Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"2ef81f6e-5a6e-426a-a3f0-6e202d10fe73","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.405985Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:2c3fe7dc1a64bfbc2475d46ec5e0261cfeac24c37d01d55bf29c35be2ac9fd60","observation_id":"bd43958b-afec-4b89-b28d-120eab871a24","resolution":{"observed_at":"2026-08-06T12:15:05.652013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.629910Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":"987ab5d9-d525-4845-a84e-acd2501df972","year":2021},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.412778Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:338b4b7fc97883b24ca2eacbe1cbdb84526ee9e351105ac9bd136fa00cb1505d","observation_id":"332bf609-323b-442a-87f9-ec921093178b","resolution":{"observed_at":"2026-08-06T12:15:05.635198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01911","last_updated":"2024-04-02T12:57:22Z","snapshot_observed_at":"2026-07-06T17:54:31.739953Z","submitted_at":"2024-04-02T12:57:22Z","title":"VLRM: Vision-Language Models act as Reward Models for Image Captioning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01911","snapshot_observed_at":"2026-08-06T12:15:04.420614Z","title":"Vlrm: Vision-language models act as reward models for image captioning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.420614Z"},"links":{"cited_paper":"/paper/2404.01911","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:f48e0c4acc69afe8f71412fec9435962aadac5378a0e2f61c9d1554fe4ec16f1","observation_id":"811f7398-0b2c-445b-b4d2-9ad1df5ff3ae","resolution":{"observed_at":"2026-08-06T12:15:04.420614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12508","last_updated":"2024-04-04T07:45:38Z","snapshot_observed_at":"2026-08-03T17:30:25.153454Z","submitted_at":"2023-10-19T06:17:17Z","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.12508","snapshot_observed_at":"2026-08-06T12:15:04.426810Z","title":"Salun: Empowering machine unlearn- ing via gradient-based weight saliency in both image classi- fication and generation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.426810Z"},"links":{"cited_paper":"/paper/2310.12508","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:aaba0a934cd115193cefdc8e274e66b75a9af803a6d88b57a6fa1cbf426485ed","observation_id":"d79045c0-28b5-4157-9dfb-0bff4d346b28","resolution":{"observed_at":"2026-08-06T12:15:04.426810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.610462Z","title":"Erasing concepts from diffusion models","venue":null,"work_id":"292a56f9-1926-45d4-8189-531d4bec8769","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.434446Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:e7cb23423b89bfe90f60009224268a94576fa2dffe58362954c0cbb88ee9817a","observation_id":"74ddda4c-4be2-4e73-87be-9b011bdd4d5e","resolution":{"observed_at":"2026-08-06T12:15:05.616168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.13896","last_updated":"2024-12-15T05:13:26Z","snapshot_observed_at":"2026-08-09T06:10:22.893274Z","submitted_at":"2024-08-25T17:33:40Z","title":"HTS-Attack: Heuristic Token Search for Jailbreaking Text-to-Image Models","version":3},"cited_work":{"arxiv_id":"2408.13896","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.13896","snapshot_observed_at":"2026-08-06T12:15:04.865704Z","title":"HTS-Attack: Heuristic Token Search for Jailbreaking Text-to-Image Models","venue":"cs.CV","work_id":"9e02c3e7-4459-4459-9a0c-ab5df7fac14f","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.441001Z"},"links":{"cited_paper":"/paper/2408.13896","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:0857bd39e6ea70f42ba22a051926d5db459aa7a4bfba52669c9449f1136a84d5","observation_id":"9b2b4ba2-bd34-437a-9093-980873bbbce2","resolution":{"observed_at":"2026-08-06T12:15:04.873199Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:04.448405Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.448405Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:c78d005a1879e6d62ad99eb01df302b57afccf67d9be7b76aeb09ee3222e50f3","observation_id":"f18cb872-5426-4e36-b018-884410a9457e","resolution":{"observed_at":"2026-08-06T12:15:04.448405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.12598","last_updated":"2022-07-26T01:42:07Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-07-26T01:42:07Z","title":"Classifier-Free Diffusion Guidance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.12598","snapshot_observed_at":"2026-08-06T12:15:04.454364Z","title":"Classifier-free diffusion guidance","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.454364Z"},"links":{"cited_paper":"/paper/2207.12598","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:a22d8ed92f63594d0c5067b08348605bf5a4eeab5f8fef583fe5796a071b458e","observation_id":"876f1aa0-4400-4c5a-b7f7-1a2a3e314776","resolution":{"observed_at":"2026-08-06T12:15:04.454364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.579190Z","title":"Model sparsity can simplify machine unlearning","venue":null,"work_id":"b0f202a8-c38d-4cad-8e00-4a5e7b045581","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.460351Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:130c73d77dc6ae19aa74c1fdba56ab696b8e0cde01e6e8842ea52549b38d5c10","observation_id":"c97f7b8c-91dd-49dd-a290-39af2b2f86e0","resolution":{"observed_at":"2026-08-06T12:15:05.585092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.561674Z","title":"Race: Ro- bust adversarial concept erasure for secure text-to-image dif- fusion model","venue":null,"work_id":"6ab148fd-b498-4d36-a6bf-88322fcd40a1","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.465722Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:44dcb9db0dd33fe216836eb9fca7feb7ed1a93137a46aad5f51174c1b8b8fc17","observation_id":"b7aec8a2-4fe9-4985-961f-2f7f866da914","resolution":{"observed_at":"2026-08-06T12:15:05.566872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.545024Z","title":"Ablating con- cepts in text-to-image diffusion models","venue":null,"work_id":"e2c8494c-7a32-4e71-8f95-3a2995c0bd6e","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.472326Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:94a6222610009e9ea70167fe73c8244be76752066abb00e681233c0401e3be1d","observation_id":"94165b14-df68-4d50-bc1d-6641639ca2a3","resolution":{"observed_at":"2026-08-06T12:15:05.550130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.528881Z","title":"Your diffusion model is secretly a zero-shot classifier","venue":null,"work_id":"4832a8bd-ead3-4640-8a6c-85a10df20b87","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.477940Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:67823d0bc203430e7103f23d85124e85c3524b472e03ad44a601d7b40b9c8be3","observation_id":"bcba9a55-26e3-435c-a382-232ad97a01cb","resolution":{"observed_at":"2026-08-06T12:15:05.534277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.512521Z","title":"Blip-diffusion: Pre- trained subject representation for controllable text-to-image generation and editing","venue":null,"work_id":"dd3ff6a9-01d9-40bb-baf0-bbac032cb045","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.484207Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:b200cc50a32bea5c62c6a809322b64daf3361ca85105d841cee097c02345549a","observation_id":"7ccb6cc9-5b8d-402b-a5d5-1f64c3d4ebe3","resolution":{"observed_at":"2026-08-06T12:15:05.517897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00351","last_updated":"2024-02-02T03:27:08Z","snapshot_observed_at":"2026-08-06T09:21:56.303773Z","submitted_at":"2024-02-01T05:35:25Z","title":"Machine Unlearning for Image-to-Image Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00351","snapshot_observed_at":"2026-08-06T12:15:04.493732Z","title":"Machine unlearning for image-to-image generative models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.493732Z"},"links":{"cited_paper":"/paper/2402.00351","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:6c45b035cfe466835ae64688a2a49575722be1af158476661fd5681342041ffa","observation_id":"bedf2af3-b15d-4053-8865-c2dada74b101","resolution":{"observed_at":"2026-08-06T12:15:04.493732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.495754Z","title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","venue":null,"work_id":"ccc399a0-05a8-44f4-9e48-1b721f40be10","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.500315Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:cc13f7fc22597e01827af7b283cf70f834d4ba9c83ff5b9ae3da13a1a209e5b3","observation_id":"165a9624-9576-443b-8820-f6e60e00120b","resolution":{"observed_at":"2026-08-06T12:15:05.501678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.478834Z","title":"Machine unlearning: Taxon- omy, metrics, applications, challenges, and prospects","venue":null,"work_id":"ab8a6da5-3182-40f9-bfec-60e0f333efd1","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.507322Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:de44013277e926cb97905a1792f548cb7ba09172fdbc6410fda9db93a52571f3","observation_id":"840d5885-e51e-4484-887e-ada5e64a9757","resolution":{"observed_at":"2026-08-06T12:15:05.484256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.462197Z","title":"Riatig: Reliable and imperceptible adversarial text- to-image generation with natural prompts","venue":null,"work_id":"605f8e9b-41c1-4b8d-9b0d-ff85cd91a81d","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.514598Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:b2279e8a6f32b71d541f5d0a9ebde0e539b5ddf0323240f3972cfe028700a430","observation_id":"14652e60-42aa-43b4-8c58-a608292f673d","resolution":{"observed_at":"2026-08-06T12:15:05.468018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.445870Z","title":"Threats, attacks, and defenses in machine unlearning: A survey","venue":null,"work_id":"365a5759-2b45-41f1-9576-c9b5350f8c20","year":2025},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.520137Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:d06d7125f241abf8ed6d18eb8fd889bab61629fc2d378996b1ad354740301540","observation_id":"7e00e52f-8126-4f3e-90cb-f0fbe307b840","resolution":{"observed_at":"2026-08-06T12:15:05.451487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.428156Z","title":"Mace: Mass concept erasure in diffu- sion models","venue":null,"work_id":"ef8b56bf-00d0-48ad-8f2e-97565146f5b3","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.526645Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:37c59f0b74d836ed71fa71732350506c6516640769e0400c7234d8dc06c63d72","observation_id":"c62cb3c2-486c-4bfa-87bb-b74cec515bfb","resolution":{"observed_at":"2026-08-06T12:15:05.434130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02928","last_updated":"2025-05-26T11:46:09Z","snapshot_observed_at":"2026-07-06T17:55:16.774337Z","submitted_at":"2024-04-02T09:49:35Z","title":"Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02928","snapshot_observed_at":"2026-08-06T12:15:04.533133Z","title":"Jailbreaking prompt attack: A controllable adversarial attack against diffusion models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.533133Z"},"links":{"cited_paper":"/paper/2404.02928","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:006b12da49dd7ffa8d3cc29b09f856468fbab638706c8612c99f4d1a6603a517","observation_id":"ab2e1941-04ca-4080-a2c7-6c7d9e5914bd","resolution":{"observed_at":"2026-08-06T12:15:04.533133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.409646Z","title":"Coljailbreak: Collaborative generation and editing for jailbreaking text-to-image deep generation","venue":null,"work_id":"145222bd-f56e-4271-8291-4c789f195456","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.539345Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:b9b12730a9f3a1414b178cb2f586cedbbbba821903e29fbcee69b4b38c4c1380","observation_id":"36a399db-1dcc-4575-a183-72590559a394","resolution":{"observed_at":"2026-08-06T12:15:05.415115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.390954Z","title":"Hard to forget: Poisoning attacks on certified machine un- learning","venue":null,"work_id":"7a9b56d3-bf88-4123-8427-f1bb1525c414","year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.547619Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:7fe60dd5d81f360266bdc0a2655cc7ddda57429a75487a5bc694bd18b66e1c54","observation_id":"d53e8e29-7bd4-4e27-96f7-0f2c49490d28","resolution":{"observed_at":"2026-08-06T12:15:05.397491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21035","last_updated":"2025-01-16T08:08:57Z","snapshot_observed_at":"2026-07-06T18:54:37.159782Z","submitted_at":"2024-07-17T08:19:11Z","title":"Direct Unlearning Optimization for Robust and Safe Text-to-Image Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21035","snapshot_observed_at":"2026-08-06T12:15:04.554411Z","title":"Direct unlearning optimization for robust and safe text- to-image models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.554411Z"},"links":{"cited_paper":"/paper/2407.21035","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:7f14791353b3814bab975757cc276ff792c17cd8d1ee6065792585835900f4de","observation_id":"df1ae67e-d57d-4e06-8d9c-36b317e4a272","resolution":{"observed_at":"2026-08-06T12:15:04.554411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.373174Z","title":"Unified prompt attack against text-to-image generation models","venue":null,"work_id":"14376617-36bc-424a-9cb2-c14372dc89ef","year":2025},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.560716Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:53646bcf3be4523616a832bb13e518c0bbdea09e9e70af4c11a6fe29964f27fd","observation_id":"be248eef-d202-4600-90c1-c8a59e0d3315","resolution":{"observed_at":"2026-08-06T12:15:05.378880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.358716Z","title":"Marshall, Niv Cohen, Govind Mittal, and Chinmay Hegde","venue":null,"work_id":"3a515889-30bc-4164-b3c2-80b36cabd499","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.567223Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:6e499628e877fb40f486fe60d6b76c950dc41b93de4df422208b77f0116d552b","observation_id":"6305d0dc-4f4d-42e0-bdae-3970c9b0024a","resolution":{"observed_at":"2026-08-06T12:15:05.363331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.343955Z","title":"Learn- ing transferable visual models from natural language super- vision","venue":null,"work_id":"adac2622-1173-4e83-8d6c-ae6c0fbda725","year":2021},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.572636Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:b3dd17653f55f81496216477e9babcadff22aaf0e5b036c9aac89ce72291fe0c","observation_id":"bdd5f607-5c4b-4dc9-be09-511de9e0bfdd","resolution":{"observed_at":"2026-08-06T12:15:05.348725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.327870Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":"a9e4bfc1-0e76-4846-8a7d-7b87c5b09d64","year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.577679Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:3c98a367d4fc9375922a5f0b079a75f318ae2d170db93f1276eb78ba851bc955","observation_id":"85c4c143-ace1-4198-902b-26c3bbfff2b3","resolution":{"observed_at":"2026-08-06T12:15:05.333501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1505.00855","last_updated":"2015-05-05T01:25:26Z","snapshot_observed_at":"2026-07-06T04:16:54.272660Z","submitted_at":"2015-05-05T01:25:26Z","title":"Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Feature","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1505.00855","snapshot_observed_at":"2026-08-06T12:15:04.583168Z","title":"Large-scale classifica- tion of fine-art paintings: Learning the right metric on the right feature","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.583168Z"},"links":{"cited_paper":"/paper/1505.00855","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:12601b2ca29ed39c97102892f8161f548403dc786506145cf7835470f3e193f9","observation_id":"c4b06e6d-cdc5-4a1d-956c-529194770dee","resolution":{"observed_at":"2026-08-06T12:15:04.583168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.309427Z","title":null,"venue":null,"work_id":"a8b0d5dc-0fde-4a61-9414-eabb5de3c266","year":2022},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.588142Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:df356133b269dd462dcc8de396ca23b5bfda4619834f25eaf9a6cf2a614a9f87","observation_id":"8c0f2f63-ef7f-4551-b295-ba153e558c5f","resolution":{"observed_at":"2026-08-06T12:15:05.316383Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.287026Z","title":"Safe latent diffusion: Mitigating inappro- priate degeneration in diffusion models","venue":null,"work_id":"d056e92e-dc0d-4d99-98c8-766b728daefb","year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.595102Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:5b272ccf15b611d2761c049001ddd8dc06ec5bd26bd9e58ef6b42592a649a0b1","observation_id":"e37833cc-d08c-4987-b7f2-45dc621769c3","resolution":{"observed_at":"2026-08-06T12:15:05.292578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06360","last_updated":"2024-02-01T01:07:22Z","snapshot_observed_at":"2026-07-06T15:25:43.815339Z","submitted_at":"2023-05-10T12:02:18Z","title":"Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06360","snapshot_observed_at":"2026-08-06T12:15:04.600890Z","title":"Exploring the landscape of machine unlearning: A comprehensive survey and taxonomy.(2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.600890Z"},"links":{"cited_paper":"/paper/2305.06360","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:5d5b5a054befb02b2054edc55ff97fc5505869289f65fbefdbc95af7a106e400","observation_id":"da10a04e-33df-405e-843e-f407fc9a8cfa","resolution":{"observed_at":"2026-08-06T12:15:04.600890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.258276Z","title":"Attacks and defenses for generative diffusion models: A comprehen- sive survey","venue":null,"work_id":"2e2161fd-bed4-4200-a167-fd31761e81bb","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.606837Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:075dbdc58483c5957421725b1db91c869d872748506b4025f7cb4f714c530568","observation_id":"1a43bb60-706b-4841-b493-91e8653defd5","resolution":{"observed_at":"2026-08-06T12:15:05.265718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10012","last_updated":"2024-06-07T02:48:59Z","snapshot_observed_at":"2026-07-06T16:33:26.145691Z","submitted_at":"2023-10-16T02:11:20Z","title":"Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10012","snapshot_observed_at":"2026-08-06T12:15:04.611643Z","title":"Ring-a-bell! how reliable are concept removal meth- ods for diffusion models? arXiv preprint arXiv:2310.10012,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.611643Z"},"links":{"cited_paper":"/paper/2310.10012","citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:50c38297264211439cce9ea9ba56d47a7262356e1399dcd11eb4c627b0563b91","observation_id":"09975981-bd5a-40f9-8a58-594145693e2b","resolution":{"observed_at":"2026-08-06T12:15:04.611643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.236921Z","title":"Review of large vision models and visual prompt engineering","venue":null,"work_id":"0e11fdf7-4c84-4e25-83e4-6c0e892a9bb0","year":null},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.617199Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:51c40db44f8de2f139b928bcba0ea163f4686122b631a84de10f4376f1f8eeed","observation_id":"f75bcf99-f1a1-413b-a044-ea0efe7ffe9a","resolution":{"observed_at":"2026-08-06T12:15:05.243927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.211969Z","title":"Machine unlearning: Solutions and challenges","venue":null,"work_id":"a59fb805-a157-45ed-82d5-85c8d8e5dfff","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.624324Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:fccceafe383a6c7e4377994bce9a2a42edba653e9d08dd173b3aa8e3729bb11f","observation_id":"de1e0b1e-4d4c-4f8b-8438-adf87ac983bf","resolution":{"observed_at":"2026-08-06T12:15:05.222072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.193192Z","title":"Prompt- driven contrastive learning for transferable adversarial at- tacks","venue":null,"work_id":"96200dd5-29a3-49ab-993c-ac10f07fa840","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.635587Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:5b73ee24b09034a2fe34957ba51a47483c07004494db3947aa376941c8afcdad","observation_id":"f2d82b77-866c-4e2d-81d6-df022262b0a2","resolution":{"observed_at":"2026-08-06T12:15:05.199217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.172412Z","title":"Mma-diffusion: Multimodal attack on diffusion models","venue":null,"work_id":"869a0f7a-fea5-4b9a-8b95-51dd6b2cb6fb","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.641457Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:0c3dda0095ab6101d998f4afd51eaf3811f321cbfe708ba516845840d01c7f33","observation_id":"1626b2b1-9027-4aa9-b8ad-cb312ee7ad55","resolution":{"observed_at":"2026-08-06T12:15:05.178061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.148433Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"b38e8f71-4295-483e-a4b5-6cfa6afa39b2","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.648078Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:6b5b570202acbad21898388223b356573dc972a5c1bea3e66a8fddbdd30a5843","observation_id":"b6a34e31-5b15-4a94-9e97-50164c1a1eed","resolution":{"observed_at":"2026-08-06T12:15:05.155709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.129087Z","title":"Forget-me-not: Learning to forget in text-to-image diffusion models","venue":null,"work_id":"45f43cb5-18ee-4432-a8a0-7537d2792239","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.653282Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:86ce1997f2e02d9d96b204b04e83157c647fc19ab7fdf113508b64ff3416f395","observation_id":"12378b51-dc71-4fc0-b9bf-dcca4dd7797c","resolution":{"observed_at":"2026-08-06T12:15:05.135344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.111452Z","title":"Defensive unlearning with adversarial training for robust concept erasure in diffusion models.Advances in neu- ral information processing systems, 37:36748–36776, 2024","venue":null,"work_id":"80cbea0f-abd1-433b-9dfb-622a357fc972","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.659168Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:fad5f7652204d520abe3e37ef8da502700c1ea6b2b2e3d809d5615856c6e5372","observation_id":"e4dc5a63-1986-4ec9-9bc6-105415da8c28","resolution":{"observed_at":"2026-08-06T12:15:05.117293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:15:05.082584Z","title":"Holding a sword,","venue":null,"work_id":"b27ce3ca-becf-4830-b954-e86fa587e704","year":2024},"citing_paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T12:15:04.663911Z"},"links":{"citing_paper":"/paper/2507.21985"},"observation_digest":"sha256:5e4055702f31b6ac2d001802b1da560786bf78197d408dbd0b4fac6b46f7d3ef","observation_id":"06ba92fe-a740-43fc-b4a9-a9beb506c535","resolution":{"observed_at":"2026-08-06T12:15:05.099083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.21985","last_updated":"2025-07-29T16:36:01Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T08:29:54.951303Z","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":2,"verified_fuzzy":32},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2507.21985."}