{"as_of":"2026-08-14T12:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bfcea05370e65e37350ce2068ab9fc3a83cc4211b936c82ac345dfd3fc1f5a55","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T05:32:12.226183Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.01605/citation-record","integrity":"/paper/2508.01605/integrity","json":"/paper/2508.01605/citation-record.json","paper":"/paper/2508.01605"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.047410Z","title":null,"venue":null,"work_id":"5cf8539b-129f-4d0f-a4eb-3de824851c7d","year":2020},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.012250Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:fb33a020ae8ac1e4f69da944a7956838bc4eab47866fadb1595497dd9141893d","observation_id":"8a1ab88a-b469-445d-89fc-7cf6ad384020","resolution":{"observed_at":"2026-08-06T05:32:13.052816Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06125","last_updated":"2022-04-13T01:10:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-13T01:10:33Z","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.06125","snapshot_observed_at":"2026-08-06T05:32:12.016766Z","title":"Ramesh, P","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.016766Z"},"links":{"cited_paper":"/paper/2204.06125","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:61263831113668ae3fd7587c81e603c30d48a988e14f74215ddeb814cca9af06","observation_id":"3ac87962-d02a-4863-b7ac-f4daebcd24a3","resolution":{"observed_at":"2026-08-06T05:32:12.016766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.032782Z","title":null,"venue":null,"work_id":"cfb3a070-ac60-43cf-9bf4-262308201149","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.021719Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:e395d0939ff7f6b37fd4499eabe871a82b7a8a36a6f75fdbbd43573fce281c83","observation_id":"8cf656a7-24f9-4eda-8716-d34d3e7b6a14","resolution":{"observed_at":"2026-08-06T05:32:13.037548Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.018213Z","title":"Rombach, A","venue":null,"work_id":"52821e74-7b9c-4dc0-8fd4-d58a6c7ad5fb","year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.025967Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:3958726bb3acef611aebb9f60bad243e564a3b0f70311586bbf561e7ca15c370","observation_id":"3fded077-b301-4c25-a3f3-d17c17163719","resolution":{"observed_at":"2026-08-06T05:32:13.022607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01952","last_updated":"2023-07-04T23:04:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-04T23:04:57Z","title":"SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01952","snapshot_observed_at":"2026-08-06T05:32:12.030286Z","title":"Podell, Z","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.030286Z"},"links":{"cited_paper":"/paper/2307.01952","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:774febf389bbe26e7e9f8a0a5550bed327b7f9bdefde21d693c5c7963196586f","observation_id":"a1d5778c-c031-461a-b5bc-a1121c71739b","resolution":{"observed_at":"2026-08-06T05:32:12.030286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.11487","last_updated":"2022-05-23T17:42:53Z","snapshot_observed_at":"2026-08-12T12:48:35.419134Z","submitted_at":"2022-05-23T17:42:53Z","title":"Photorealistic Text-to-Image Diffusion Models with Deep Language Understanding","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.11487","snapshot_observed_at":"2026-08-06T05:32:12.034900Z","title":"Saharia, W","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.034900Z"},"links":{"cited_paper":"/paper/2205.11487","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:ff3c900350abb3f110be8c80e51ab56f95a971acc43e4b2f62dbfebd4f24f84f","observation_id":"e4f2e9f8-ebe5-4108-8414-84c0b9055897","resolution":{"observed_at":"2026-08-06T05:32:12.034900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:13.003592Z","title":"cancer survivor","venue":null,"work_id":"01217de9-100a-4c93-ae03-a227e4f1db8f","year":2025},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.039729Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:8c45c16a152f93f7c412e1a57ea47adb3c1e9c020bce4620b97c1e5331ba670b","observation_id":"e8d6aa47-0e18-491e-bf6d-937dda01e981","resolution":{"observed_at":"2026-08-06T05:32:13.008312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.988253Z","title":null,"venue":null,"work_id":"eb7018d1-832a-4bec-9eb8-bdcabf2eb4fb","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.044054Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:e78f48846b37c7d9969e8fe83327ce6a9792a0632c85e98e3ef44cb2e10174c1","observation_id":"e75d94f7-a6c9-4638-bcfa-c85b04ae7462","resolution":{"observed_at":"2026-08-06T05:32:12.993012Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.972812Z","title":null,"venue":null,"work_id":"fe87f788-8fe7-43f5-a6c0-53f863b2a518","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.048284Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:202cc220f7029eadbd5463c8afffb5fbcd45c67dc0daf37e02479906fa25b8ee","observation_id":"6727d550-643f-4bc6-aa4a-ee41e4439f70","resolution":{"observed_at":"2026-08-06T05:32:12.977807Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12617","last_updated":"2024-10-23T06:28:19Z","snapshot_observed_at":"2026-08-14T07:31:11.654639Z","submitted_at":"2024-02-20T00:51:05Z","title":"Generative AI Security: Challenges and Countermeasures","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12617","snapshot_observed_at":"2026-08-06T05:32:12.052212Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.052212Z"},"links":{"cited_paper":"/paper/2402.12617","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:17927844ae3a2a6fc107b0c4ffcb51642a38fcb5bd7b3924e890b4c3c679a68c","observation_id":"6c1da230-3aea-4950-b478-aa8847102d52","resolution":{"observed_at":"2026-08-06T05:32:12.052212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.957139Z","title":null,"venue":null,"work_id":"05154c2b-3475-4e62-a17f-db885e0f1c61","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.056594Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:6cfcfb9f33bada67f56a07b52825cafc068951948ca2b8d649c7c44f008e1a3e","observation_id":"b648a029-db78-43ca-8a88-8a32d97edb2f","resolution":{"observed_at":"2026-08-06T05:32:12.962656Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.11441","last_updated":"2025-02-28T04:36:39Z","snapshot_observed_at":"2026-08-13T17:53:50.163316Z","submitted_at":"2024-12-16T04:47:55Z","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","version":3},"cited_work":{"arxiv_id":"2412.11441","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.11441","snapshot_observed_at":"2026-08-06T05:32:12.422653Z","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","venue":"cs.CR","work_id":"bbb2da1b-636c-4248-a048-19ca395fd09c","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.060888Z"},"links":{"cited_paper":"/paper/2412.11441","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:c0b677421b9757f4393e7a9a458212c96002620ba8ac81dc67e2784c56e67bdc","observation_id":"9823155a-a9f4-4565-924d-9e16c70dfafa","resolution":{"observed_at":"2026-08-06T05:32:12.427666Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.941749Z","title":"Chou, P.-Y","venue":null,"work_id":"94449cdd-728f-4ed6-a71b-2542bd860c0f","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.065432Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:9e1c0492420a557970cf6788e69d7331e38cc85d8b471ef928aa27680939508c","observation_id":"5e4b1347-cc38-49d0-b425-1329a020cca3","resolution":{"observed_at":"2026-08-06T05:32:12.946723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.926372Z","title":null,"venue":null,"work_id":"12e710c1-9a57-45d8-b4c8-5a373a74ffda","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.069692Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:7e1d2194cc0199d6d127a764b8afa90cc5b27b73fd5ff8d0939499980b9c3122","observation_id":"575cfbbd-996c-4848-96e8-e0de94265c4d","resolution":{"observed_at":"2026-08-06T05:32:12.931102Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.910804Z","title":null,"venue":null,"work_id":"5baa3457-bed7-4e85-9ec5-d174617babe2","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.073718Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:84d83bc309ac6c42727371257e007da0fee900241a2af22b657164581061d71c","observation_id":"7889afdd-737f-42b7-8cb3-da9d6bca0b83","resolution":{"observed_at":"2026-08-06T05:32:12.916217Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.895248Z","title":"Struppek, D","venue":null,"work_id":"554e10f2-dc67-48b6-b747-2078dca44a20","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.077938Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:87103bdde35239691864f10802bee5d3bd1279d47a49ceaa6c5e11fe86b722ff","observation_id":"c9879c3d-b910-4a78-b48d-d4c2c8e56497","resolution":{"observed_at":"2026-08-06T05:32:12.899942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.880561Z","title":"Chou, P.-Y","venue":null,"work_id":"ad9549c5-3342-4b56-84d3-bbd35e08c2bc","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.082163Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:708779106e7b1e4f70b5412155524bcf15ad6495ee4d409c15059cca3d064764","observation_id":"d6f8f200-f862-4876-bb27-c0fc98278a82","resolution":{"observed_at":"2026-08-06T05:32:12.885324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.865418Z","title":"Huang, F","venue":null,"work_id":"c8db72e4-86ec-4373-9338-42ec5d7a7f9b","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.086368Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:9b0febee9ca42fd8df5df21bb1fe5d9c1cc21131dac0f569f739c9e06a282f75","observation_id":"e3c0ddac-3033-4bd5-a78b-583c8ada22cd","resolution":{"observed_at":"2026-08-06T05:32:12.870400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.849847Z","title":null,"venue":null,"work_id":"5cd7db6b-8cc4-405a-847f-a91b6a5712ce","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.090402Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:da83660513fdaa0ec93c6928b2b24b7bc0c446dfcba2a728e38ceced3eeef002","observation_id":"ac7fcfd6-f0f9-4a01-9e77-ad0c3d7323b1","resolution":{"observed_at":"2026-08-06T05:32:12.854771Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.835324Z","title":null,"venue":null,"work_id":"edd8893d-42e9-4138-9d51-b019d88ad776","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.094496Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:0d7dab6e01f23f221a33a7d10baed9a34d49f961aa383f825ab7136e9c773f1e","observation_id":"1ffe6d0d-0c37-443b-bf2e-d4aa1e381661","resolution":{"observed_at":"2026-08-06T05:32:12.839875Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10718","last_updated":"2023-08-23T13:56:52Z","snapshot_observed_at":"2026-08-13T10:30:26.901623Z","submitted_at":"2023-08-21T13:39:04Z","title":"Backdooring Textual Inversion for Concept Censorship","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.10718","snapshot_observed_at":"2026-08-06T05:32:12.098732Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.098732Z"},"links":{"cited_paper":"/paper/2308.10718","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:7f4cc48bd8efb07fdbf43c503aafbc767eb8ef661a4eab25a5db2ab1990368ba","observation_id":"74fbb961-182f-4fb7-9150-2d1a5fae3182","resolution":{"observed_at":"2026-08-06T05:32:12.098732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.820462Z","title":null,"venue":null,"work_id":"56531db3-4d1b-44a5-a030-d7977c5773be","year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.103002Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:0ddbd81b9926eaef8e17e5b1735b51f3bd9130528d93871f87605ae22c0496a7","observation_id":"8138b3a4-7e0b-4cbc-add7-248648cf2f1c","resolution":{"observed_at":"2026-08-06T05:32:12.825512Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02739","last_updated":"2024-02-05T05:46:31Z","snapshot_observed_at":"2026-08-13T04:27:04.810876Z","submitted_at":"2024-02-05T05:46:31Z","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","version":1},"cited_work":{"arxiv_id":"2402.02739","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.02739","snapshot_observed_at":"2026-08-06T05:32:12.384625Z","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","venue":"cs.CR","work_id":"2efe3f04-1e7e-4f40-a7c3-cdc20826b39f","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.106811Z"},"links":{"cited_paper":"/paper/2402.02739","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:30da58d3a73279075395eab6d8722dbf4cc7ab14462293c5fddaca66ed9e2092","observation_id":"1f0ed2a3-8281-4b5a-8b1f-9f862355aa39","resolution":{"observed_at":"2026-08-06T05:32:12.390433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.805949Z","title":null,"venue":null,"work_id":"32960ed0-b3fd-42b4-a7c6-16aad3f919dd","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.110797Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:63b2ec216ce042855f0398e3d2c1b6eb78870ed3d199f73349d41d8821255c76","observation_id":"e8995aa3-9d64-4dae-8f76-43fce179e859","resolution":{"observed_at":"2026-08-06T05:32:12.810555Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.790025Z","title":null,"venue":null,"work_id":"a16b123a-d7b6-47b1-8a8c-e571c23b8eb3","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.114935Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:01b4781e4565f19bab4a5254e81315875c5dd1d1f203b9717bfae4614826cf11","observation_id":"045cc1f9-ba1f-43f6-8f31-8a545bc7b5ec","resolution":{"observed_at":"2026-08-06T05:32:12.795162Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15721","last_updated":"2024-08-28T11:36:43Z","snapshot_observed_at":"2026-08-14T02:41:52.281188Z","submitted_at":"2024-08-28T11:36:43Z","title":"Defending Text-to-image Diffusion Models: Surprising Efficacy of Textual Perturbations Against Backdoor Attacks","version":1},"cited_work":{"arxiv_id":"2408.15721","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.15721","snapshot_observed_at":"2026-08-06T05:32:12.359388Z","title":"Defending Text-to-image Diffusion Models: Surprising Efficacy of Textual Perturbations Against Backdoor Attacks","venue":"cs.CV","work_id":"1c8cc149-7860-4621-9e88-2f249acd85bb","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.118776Z"},"links":{"cited_paper":"/paper/2408.15721","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:2100c5746afcb55d9882154383aefeba870c52ac16432c4274ee4b792a97b345","observation_id":"d42e9b51-cfcc-4b8f-bf48-9e468202bc5e","resolution":{"observed_at":"2026-08-06T05:32:12.367025Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.775020Z","title":"Radford, J","venue":null,"work_id":"ef76351f-ae19-4cc8-a930-fb9b2989d001","year":2021},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.122808Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:a21152180fe57d8c09faaf953050306c90b7b42675e8f3acecee6a802b5c2a01","observation_id":"f7953152-c8a2-48f7-99d9-0173f9cfca7c","resolution":{"observed_at":"2026-08-06T05:32:12.779526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.760165Z","title":"Sohl-Dickstein, E","venue":null,"work_id":"48cda8ac-0f16-41fa-8afb-ad28e779332b","year":2015},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.126980Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:e06fef2d0db35c2d287596d7faf9164453d84f203c00c896ef9f53ddb05525f5","observation_id":"0fb43350-e52c-4b93-a76f-9402b857fc2e","resolution":{"observed_at":"2026-08-06T05:32:12.764628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00637","last_updated":"2023-09-29T05:32:46Z","snapshot_observed_at":"2026-08-14T03:17:26.305151Z","submitted_at":"2023-06-01T13:00:53Z","title":"Wuerstchen: An Efficient Architecture for Large-Scale Text-to-Image Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.00637","snapshot_observed_at":"2026-08-06T05:32:12.130886Z","title":"Pernias, D","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.130886Z"},"links":{"cited_paper":"/paper/2306.00637","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:0c0ad88d6ecd5e827c02e5f55404b5e24d95d50253a263ee5417aec9cbbe46ca","observation_id":"386213fd-5a87-40b0-8cca-0cb1cd43deb3","resolution":{"observed_at":"2026-08-06T05:32:12.130886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.745509Z","title":null,"venue":null,"work_id":"b876de9d-1e11-4701-8d7d-ec1960713cdb","year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.135165Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:33a0b1b96d4de0f05b37d9cb139f6be43b4f063ecfcdc2c6866d88f6b53ab86b","observation_id":"83c7282e-d168-4b2c-8143-b5bab02368b3","resolution":{"observed_at":"2026-08-06T05:32:12.749909Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-06T05:32:12.139185Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.139185Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:555aed04ef47e5c1993fd7b6ca5a0c2edb9ce0cbd20af70e9c36f8236bb937c7","observation_id":"62e858b5-c526-4f33-bcb5-2e86bbd48dc6","resolution":{"observed_at":"2026-08-06T05:32:12.139185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.731109Z","title":null,"venue":null,"work_id":"c06905b9-2717-4008-a4cd-963b2e66ec4b","year":2018},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.143357Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:e821d9fd75223bdf94c03b0c6ef7d97a1a605fcb8304c17f48945e185c3765d7","observation_id":"0f482e94-c295-4e64-b7ec-3a6c33f4d3fa","resolution":{"observed_at":"2026-08-06T05:32:12.735546Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.716881Z","title":"An, S.-Y","venue":null,"work_id":"a9518516-6df9-49d2-b054-6840fa1dbfe5","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.147389Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:5ba4af4f8b09d533ddb370b8f4d64643dd602dfef85ae08075c4a568f1121cc5","observation_id":"51494fbc-eeec-4292-a008-ba53ac1e3bfe","resolution":{"observed_at":"2026-08-06T05:32:12.721324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.702406Z","title":null,"venue":null,"work_id":"3d388998-55b2-4efd-bd3e-cc6d870e6bb7","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.151713Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:eca9e59e9eaa86ad01aa77f19dd440df1203ca3e3db326ad58dc1067683535fa","observation_id":"a999f37b-bd35-480b-8b99-faa2d2c27dc0","resolution":{"observed_at":"2026-08-06T05:32:12.707127Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.688523Z","title":"Vaswani, N","venue":null,"work_id":"0a526cd2-c986-4cee-bb80-ad42c09808df","year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.155584Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:18861a77d03b9739de416aa10759188144b68b20b9bdccf980fdb3ba0ccc7592","observation_id":"bab6ce5e-8557-4792-ac33-b2eaa1f8d614","resolution":{"observed_at":"2026-08-06T05:32:12.692793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-13T14:19:26.598265Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-06T05:32:12.159626Z","title":"Dosovitskiy, L","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.159626Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:4d1ecd20fd85c63bae76609932a656bd54a7ab49c14e394d60606d36df6b81a7","observation_id":"1ac4efb7-622f-4e32-9864-4a306db17d33","resolution":{"observed_at":"2026-08-06T05:32:12.159626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.674358Z","title":null,"venue":null,"work_id":"42afd32d-a9e2-4b68-ac26-3ed6a88103c3","year":2016},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.163845Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:9922d9131feee0d2961a1bf9c40945cc294a6936d097f79bfe88b4f42db9ceda","observation_id":"a70b095b-e2db-4414-a192-7b3a50a190fa","resolution":{"observed_at":"2026-08-06T05:32:12.678885Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T05:32:12.168002Z","title":"Madry, A","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.168002Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:41a48e27820bf48858c78956a7f452dc14c38bf9a42c197a0335aecd11d94757","observation_id":"6c099b5a-9637-483b-925c-f0fea15b538c","resolution":{"observed_at":"2026-08-06T05:32:12.168002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.659563Z","title":"Team, ``Flux.1: Next-gen text-to-image model,'' https://fluxdev.net/flux-1-dev, 2024","venue":null,"work_id":"b972c294-2ba0-4c5a-baeb-7cc137d3cfec","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.172343Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:9b07ba53347341d3d35bd4ec5b185cb2071d82ca216f508209048485121f59f0","observation_id":"7b3f10fe-88bf-43f0-aea2-a3b0620bcbac","resolution":{"observed_at":"2026-08-06T05:32:12.664420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.642579Z","title":null,"venue":null,"work_id":"f5d0067d-2b15-43d5-8c34-6ec825c01030","year":2009},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.176461Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:8c8573c63ab98493bd0d77dcfcb6164bcf8f9eb7b3f84a12f10c64ea6c9f079c","observation_id":"66618bf3-ed13-4969-886c-331344d3b127","resolution":{"observed_at":"2026-08-06T05:32:12.649560Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.627379Z","title":"Zhang, P","venue":null,"work_id":"eec674da-81c4-4b46-94ad-f42ecd8f89b8","year":2018},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.180683Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:7aed4b0a7da2673f5439e433874d79bc3895458d0f7ef81fb82c36ed5f386300","observation_id":"be49e92c-124c-49b3-bd27-9a1972dd50b9","resolution":{"observed_at":"2026-08-06T05:32:12.631937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.612681Z","title":null,"venue":null,"work_id":"50f66202-4415-4530-a0df-811419007fbf","year":2004},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.184876Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:644890a3c8dd3c1f9a22c720360b580803014ccd63624e909e03f48efe394ba3","observation_id":"89fbe24a-f6a6-4c16-ab93-323e72f72746","resolution":{"observed_at":"2026-08-06T05:32:12.617096Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.597423Z","title":null,"venue":null,"work_id":"23f2b7df-6cd2-4607-9dc6-ca5361144845","year":2003},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.189139Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:849eb72fd346dcdebb50643602b1e4b233af075fc9b4c079b595f2d58d8e2abf","observation_id":"b15caa99-e7b8-433b-b66e-4fa9e2fd0f0d","resolution":{"observed_at":"2026-08-06T05:32:12.602297Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.580906Z","title":"Heusel, H","venue":null,"work_id":"212daf8b-5fab-480f-9be0-e51e54e63b61","year":2017},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.193233Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:074504148768bda1d0d08fd7bc16f124563e55e5b326b885046243a188ac742b","observation_id":"5e72579b-b592-44f3-8efe-78e7556d3ec8","resolution":{"observed_at":"2026-08-06T05:32:12.586531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.563510Z","title":null,"venue":null,"work_id":"53765ff7-3a79-4fe7-bae9-3cd8d931b3ff","year":2014},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.197421Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:e1f5bf257a345ed6bf418938a20c6edfba558ae9e06edf51631aaabeb5e55fc7","observation_id":"641cbed8-63df-4c24-af99-94dd7a3dd351","resolution":{"observed_at":"2026-08-06T05:32:12.568909Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.547165Z","title":"Seitzer, `` pytorch-fid: FID Score for PyTorch ,'' https://github.com/mseitzer/pytorch-fid, August 2020, version 0.3.0","venue":null,"work_id":"5b4ef294-4af2-4924-9ae6-dce10d8eeea0","year":2020},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.201509Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:9a7fd16844d7bccb11e26c2b7a28af227be80e33564578145fa76ad0bc63c946","observation_id":"0207e73c-1995-4559-8c5d-5b1670c35c77","resolution":{"observed_at":"2026-08-06T05:32:12.552685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.04037","last_updated":"2024-09-12T19:54:37Z","snapshot_observed_at":"2026-08-13T13:25:36.025760Z","submitted_at":"2022-12-08T02:21:47Z","title":"Demystifying Prompts in Language Models via Perplexity Estimation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.04037","snapshot_observed_at":"2026-08-06T05:32:12.205549Z","title":"Gonen, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.205549Z"},"links":{"cited_paper":"/paper/2212.04037","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:65540c95d8d91fd77022b7bb6e2999105aa0818dfbcf1d9f7e4d7675e81c811e","observation_id":"2fff2e03-5f19-446d-8d9d-055967915801","resolution":{"observed_at":"2026-08-06T05:32:12.205549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.531100Z","title":"Dholakia, ``betterprompt: Test suite for llm prompts,'' 2022","venue":null,"work_id":"43d65d33-6215-42bb-9449-e23828c2f556","year":2022},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.210071Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:22f6a317f7733abbb1b64066eb7c9aaec5c7849f51be8198a80baa131de2ee8a","observation_id":"d6ea3227-344d-478d-9879-da3c7b1ebad1","resolution":{"observed_at":"2026-08-06T05:32:12.535981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.05909","last_updated":"2020-10-05T00:10:24Z","snapshot_observed_at":"2026-08-11T01:22:00.653882Z","submitted_at":"2020-04-29T21:33:35Z","title":"TextAttack: A Framework for Adversarial Attacks, Data Augmentation, and Adversarial Training in NLP","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.05909","snapshot_observed_at":"2026-08-06T05:32:12.214353Z","title":null,"venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.214353Z"},"links":{"cited_paper":"/paper/2005.05909","citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:79cc9ac3d18095df8dd91c00018078a4581694970586ab11ab4154e4f75e3acb","observation_id":"28e3c9ee-2ecf-4ca4-a0bf-7e76b20cf39e","resolution":{"observed_at":"2026-08-06T05:32:12.214353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.516059Z","title":"Tiedemann, M","venue":null,"work_id":"01a17a15-47ef-4ca9-a5ac-6d136b56deb4","year":2024},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.218870Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:a8f04b242a9c816e47d2266503f519e5dc311cf9a4cfa3e1f40fcda3f5cf15e6","observation_id":"8da11a1a-974b-4852-b46e-b98e8331ac20","resolution":{"observed_at":"2026-08-06T05:32:12.520539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:32:12.500643Z","title":"Tiedemann and S","venue":null,"work_id":"235f3eba-bc2e-4f8b-b5a3-ac298163935f","year":2020},"citing_paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-06T05:32:12.226183Z"},"links":{"citing_paper":"/paper/2508.01605"},"observation_digest":"sha256:ae30ee3c95a253cea2ab24f60cad96dd0281785c064b069d7e88065da1a611e7","observation_id":"4f73f094-5e68-4c75-b331-2f6975854663","resolution":{"observed_at":"2026-08-06T05:32:12.505509Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.01605","last_updated":"2025-08-03T05:42:20Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T01:12:46.928596Z","submitted_at":"2025-08-03T05:42:20Z","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":3,"verified_fuzzy":17},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:2508.01605."}