{"as_of":"2026-08-19T23:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4cc29ba4521c31be23584825bad7d13a5b1af785cfc9fe067b51bd5fc137de87","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:42:52.464160Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.03696/citation-record","integrity":"/paper/2508.03696/integrity","json":"/paper/2508.03696/citation-record.json","paper":"/paper/2508.03696"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:57.256199Z","title":"Available: https://openai.com/index/ dall-e-3/","venue":null,"work_id":"1596e1da-b7af-4c65-9d3d-c3e7be5a0f4e","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:47.970036Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:b4c081f5806d1be1d36504ca4c5fa80397f1a6c855dbbb5a446c284f3c37f84d","observation_id":"063901a5-f083-4d37-979a-23aac4fdc43d","resolution":{"observed_at":"2026-08-06T17:42:57.348575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:57.125000Z","title":"Available: https://openai.com/index/ gpt-4/","venue":null,"work_id":"aad17c18-3031-46ef-82e1-9ff3ae2e7bad","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.050324Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:a46e40f20890342908fc5d7fd2df779da8bad5d1d8a610700a27717d3e7f5edc","observation_id":"a1626c68-efef-4b1c-b3c5-2080fb5e9dd0","resolution":{"observed_at":"2026-08-06T17:42:57.192526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:57.001998Z","title":"Available: https : / / runwayml","venue":null,"work_id":"35d6b171-5bdd-449b-b36d-90eed7863d48","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.195421Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:131db138a0e82f55c38306c23ea84467408b8233dd11652989a1c9397f15ba02","observation_id":"7a270a45-246f-4d71-9b1a-089d4052125f","resolution":{"observed_at":"2026-08-06T17:42:57.052310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.846117Z","title":"Available: https://designer","venue":null,"work_id":"aeefd06c-0f8e-4103-81ee-81b3e00a91e8","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.294026Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:a5639b79b8bb1fa49bfa66d0ca82438682993d3f9b6f4174f5fe9169e4aabbc1","observation_id":"493c9c2b-ba86-4573-bd9f-b79e1dac2601","resolution":{"observed_at":"2026-08-06T17:42:56.912119Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.691876Z","title":"Available: https://www.midjourney","venue":null,"work_id":"059e7328-9f5b-4f38-8196-3d4bdbace77c","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.467090Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:703b7f571dca91fd576de6853350020a790b732ce41f2f59c13a56d195ea7ec5","observation_id":"2d42bdc9-2ccb-4c60-b344-ba5177e4811f","resolution":{"observed_at":"2026-08-06T17:42:56.754644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.509655Z","title":"Available: https://github.com/PixArt- alpha/PixArt-alpha","venue":null,"work_id":"35179b22-3277-4f1c-8906-b03b9c7cda8c","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.618799Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:946e104ab5d9d213db6af769f12e08c5977ce24cf6d1db7dd8504e0872d79b53","observation_id":"41a0b158-4aed-47c7-9531-c9ff179f7037","resolution":{"observed_at":"2026-08-06T17:42:56.617825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.397645Z","title":"Available: https:// huggingface.co/CompVis/stable-diffusion- v1-4","venue":null,"work_id":"6657c692-e3da-44cd-8094-70f4d971b602","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.733100Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:32feed678abf32278a2e0ccec4a72fdcaea3933edcd6a2ba3f37b54bd854aa10","observation_id":"faf69e01-7acb-4db8-98b0-3830e3df243c","resolution":{"observed_at":"2026-08-06T17:42:56.448036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.272912Z","title":"Available: https: //huggingface.co/stable- diffusion- v1- 5/ stable-diffusion-v1-5","venue":null,"work_id":"3e95d9e2-c60c-4ea3-8d6f-e8057bd664a0","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.820848Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:fdc78e01274c88d0bbf5dce45d61bf42c8ee276a9893c7bddf83914571bafb7a","observation_id":"c3438bb7-748a-4e3c-ba14-89646d1d4b0e","resolution":{"observed_at":"2026-08-06T17:42:56.322817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.134823Z","title":"Available: https://stability.ai/","venue":null,"work_id":"650e876d-d1be-4d10-9bb7-35a21cac414e","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:48.903971Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c9aad210d63a7e1c2adabaa118ec2d020ad5a60f2da1df9a5b14e42628c6b69f","observation_id":"a995a7d2-0e47-4d68-85b6-3dfe54f9f09d","resolution":{"observed_at":"2026-08-06T17:42:56.225753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02025","last_updated":"2024-03-15T15:28:11Z","snapshot_observed_at":"2026-08-17T21:30:25.896581Z","submitted_at":"2023-10-03T13:05:36Z","title":"DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Training","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02025","snapshot_observed_at":"2026-08-06T17:42:49.015546Z","title":"Deepzero: Scaling up zeroth-order optimization for deep model train- ing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.015546Z"},"links":{"cited_paper":"/paper/2310.02025","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:096c90a7dbf905a3162ea1fcb9bc3cc3e45646a295d76f4ef8fc3b1f6fb319e7","observation_id":"8c03a571-4072-4ece-9fa7-e8be4a1c272f","resolution":{"observed_at":"2026-08-06T17:42:49.015546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:56.017618Z","title":"Zoo: Zeroth order optimization based black- box attacks to deep neural networks without training substi- tute models","venue":null,"work_id":"a04d41fb-c514-44b8-a068-6705881ce12e","year":2017},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.139634Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:590b7d00146734f0927889ad53d4aff74be9641c24115f6d045bf6f19c7b2b9f","observation_id":"4489bc2a-d1bd-464d-b9c9-bb36e3b0ac33","resolution":{"observed_at":"2026-08-06T17:42:56.070241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.860975Z","title":"Zo-adamm: Zeroth-order adaptive momentum method for black-box optimization.Ad- vances in neural information processing systems , 32, 2019","venue":null,"work_id":"81750800-6949-4327-9b68-37a41e64198f","year":2019},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.308386Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:334c300ceff11667d3416d0601e083525c667e54d341245bc4a3053924744164","observation_id":"38f51d3d-72d3-4e0c-959d-5ddbe45480ab","resolution":{"observed_at":"2026-08-06T17:42:55.950391Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.731921Z","title":"Gradient-based optimizer (gbo): a review, theory, variants, and applications.Archives of Com- putational Methods in Engineering, 30(4):2431–2449, 2023","venue":null,"work_id":"a365e4bb-8b9a-4716-9dd5-bc699e47d2bc","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.395675Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:7005dfd113102f0607f550f1d7c097cba9e7800e7eacfbe51194a9fd840b7df6","observation_id":"3849baf5-7b27-45b4-8d63-568e1f19d147","resolution":{"observed_at":"2026-08-06T17:42:55.791637Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:49.475618Z","title":"Erasing concepts from diffusion models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.475618Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:6e89d756e14cff3e0c8d0b071cc7cd676143536d61ab70225909a807bd81507c","observation_id":"e31b2771-688a-4e1e-b712-85fb672ac015","resolution":{"observed_at":"2026-08-06T17:42:49.475618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.570396Z","title":"Denoising dif- fusion probabilistic models","venue":null,"work_id":"2c22262c-b28f-4be0-96f8-f4376d5da009","year":2020},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.546843Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:9408f2f9ab0ce55964b87c7f420d7a7acb23429c3680d694006ffcb901e2b716","observation_id":"690ce41f-88dc-4f37-be3a-9deb043dfd07","resolution":{"observed_at":"2026-08-06T17:42:55.646942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.440367Z","title":"Bert: Pre-training of deep bidirectional trans- formers for language understanding","venue":null,"work_id":"28458344-8e1c-4230-ad46-6d74348c7303","year":2019},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.638110Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:65446a6968d93ee3978b27195db1830b3d250751aa6e45dcd9728f9cfdd8dbab","observation_id":"8870deda-0e87-457b-a5dc-aa444899c629","resolution":{"observed_at":"2026-08-06T17:42:55.492903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-08-17T19:26:44.032537Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-06T17:42:49.744177Z","title":"Adam: A method for stochastic opti- mization","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.744177Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c30312e8bbecbfbe1f32266e6787db037cd34ffd792b793ffa2bb25ddf463319","observation_id":"9272964f-f1a3-43c9-960d-f4f890befda1","resolution":{"observed_at":"2026-08-06T17:42:49.744177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.309289Z","title":"Ablating con- cepts in text-to-image diffusion models","venue":null,"work_id":"6a4b05a6-985c-4b03-8316-93f22c1c2224","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.853250Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:707b1dd70c6e3fa71d869e518139a0c485dee639d0b13467ec306ed2bca237bf","observation_id":"4cec8742-fc15-46d3-8b6f-c238782b0023","resolution":{"observed_at":"2026-08-06T17:42:55.378751Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.149387Z","title":"Holis- tic evaluation of text-to-image models","venue":null,"work_id":"d2b514ba-9c49-4c4f-9372-78dae3c8c7e6","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:49.980556Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:7df49a97b87349401ab29ad992b806f5e27feddc2fcd8638be6c61275a6a6bc8","observation_id":"bebe9a38-c3b0-47c3-b839-9ee8559b4b36","resolution":{"observed_at":"2026-08-06T17:42:55.231618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:55.041121Z","title":"Adversarial example does good: Preventing paint- ing imitation from diffusion models via adversarial exam- ples","venue":null,"work_id":"5c738984-8440-41fb-98ae-9cda2866b7d2","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.103028Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:ae111ac76ce852648da430b0e3647d503eafd72d8c288a0900e357915911cba9","observation_id":"692ee038-a9c7-4109-823c-691f454bcc42","resolution":{"observed_at":"2026-08-06T17:42:55.090674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.907201Z","title":"Riatig: Reliable and imperceptible adversarial text- to-image generation with natural prompts","venue":null,"work_id":"05653993-72ef-4ef9-8b83-1f711b2b774f","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.165123Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:3a82786140aa9b843ca28af92fc6d083739ebaedfc013df87238542dabfbac8f","observation_id":"e1dadfd2-59c9-425c-a3a1-3165ec49412a","resolution":{"observed_at":"2026-08-06T17:42:54.974178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00974","last_updated":"2023-11-29T21:50:06Z","snapshot_observed_at":"2026-08-19T11:38:52.506132Z","submitted_at":"2023-06-01T17:59:00Z","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","version":5},"cited_work":{"arxiv_id":"2306.00974","doi":null,"metadata_source":"pith","pith_arxiv_id":"2306.00974","snapshot_observed_at":"2026-08-06T17:42:52.752048Z","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","venue":"cs.CV","work_id":"68a24a3f-6d6e-4afd-bbb2-be1d023743a4","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.321526Z"},"links":{"cited_paper":"/paper/2306.00974","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:f438c92cde8c1c8dc9410c0d88730b931f1dff3b1306b66971cb3742f0a24ead","observation_id":"1221ac06-09d5-47d5-9c54-78ff6db22c40","resolution":{"observed_at":"2026-08-06T17:42:52.786197Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.08031","last_updated":"2024-08-18T18:53:16Z","snapshot_observed_at":"2026-08-16T14:01:38.362241Z","submitted_at":"2024-04-11T17:59:52Z","title":"Latent Guard: a Safety Framework for Text-to-image Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.08031","snapshot_observed_at":"2026-08-06T17:42:50.420749Z","title":"Latent guard: a safety framework for text-to-image generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.420749Z"},"links":{"cited_paper":"/paper/2404.08031","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:eee9cedb8da8a9cba0e351988de75e51d57e9d2cea29c40db86d703b0d3101fd","observation_id":"39a5d987-e454-4bc9-a1b1-8daa0901da5c","resolution":{"observed_at":"2026-08-06T17:42:50.420749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.778838Z","title":"Black box adversarial prompting for foundation models","venue":null,"work_id":"1964b604-89fc-4038-bc08-fb178965997e","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.514413Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:44d0b1591dd071bd3330035006e032326cbcb35f3c2ae7a277c633a5f1885826","observation_id":"00f538af-167f-487f-b98b-73a90d838be9","resolution":{"observed_at":"2026-08-06T17:42:54.855732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01952","last_updated":"2023-07-04T23:04:57Z","snapshot_observed_at":"2026-08-14T22:54:08.184266Z","submitted_at":"2023-07-04T23:04:57Z","title":"SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01952","snapshot_observed_at":"2026-08-06T17:42:50.602966Z","title":"Sdxl: Improving latent diffusion mod- els for high-resolution image synthesis","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.602966Z"},"links":{"cited_paper":"/paper/2307.01952","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:fd7c937733bf80aabdbd190627322452feb81e4ab898546c8fab126a0f4908e7","observation_id":"92a23aba-3783-4918-9459-625d388e01f1","resolution":{"observed_at":"2026-08-06T17:42:50.602966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.657344Z","title":"Unsafe diffusion: On the generation of unsafe images and hateful memes from text-to-image models","venue":null,"work_id":"67bb0d95-f9b7-4edd-a6ec-4c39fe28371d","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.674069Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c8f3cff0fbc8f1505aaee640347b9b957d83a2576134b3ba4c09d72c0d0791f7","observation_id":"9f0d8cf7-f718-4853-93ae-bab2b60daf42","resolution":{"observed_at":"2026-08-06T17:42:54.718348Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:50.766061Z","title":"Learning transferable visual models from natural language supervi- sion","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.766061Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:d61610b61062e97a01709f3b7c230c9b57cf7fcfa26ef56401f40f4ce177743c","observation_id":"e58977e1-2072-460b-ab1a-3185514cdfdf","resolution":{"observed_at":"2026-08-06T17:42:50.766061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.531383Z","title":"Exploring the limits of transfer learning with a unified text-to-text transformer","venue":null,"work_id":"ec6a2541-ae40-48f6-a186-378e496d0586","year":2020},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.836771Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:b8421dc73cbba738f856b78bcbcb1d7bb8ab75d3e778eb0f5aa8564788112ad9","observation_id":"928aeee2-c7ab-4f5d-bdd4-23b6b151e7e7","resolution":{"observed_at":"2026-08-06T17:42:54.576280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-08-19T14:14:31.764537Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-06T17:42:50.883150Z","title":"Red-teaming the stable diffusion safety filter","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:50.883150Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:f9a036a0401f7155062957ddc3ebbe1f8816a39779d0cad8143eaa14c5429189","observation_id":"d30b25dc-9f4c-4de3-884c-2cbb25a12374","resolution":{"observed_at":"2026-08-06T17:42:50.883150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:51.014461Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.014461Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c4a1bca00df87954adeeb838fa48e253d24b605620714876b465765658aa5f70","observation_id":"77cf377b-f499-45c1-a775-ea4f0e1c4724","resolution":{"observed_at":"2026-08-06T17:42:51.014461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:51.128891Z","title":"Photorealistic text-to-image diffusion models with deep language understanding","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.128891Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:8198362da922ade1962caad97cc6d86c08fa5bc24a31fd986f0003bf21c4cfb9","observation_id":"b9f2733e-4ceb-4644-93b3-add87972ef67","resolution":{"observed_at":"2026-08-06T17:42:51.128891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.372127Z","title":"Raising the cost of malicious ai-powered image editing","venue":null,"work_id":"cc14d525-f4b7-420c-8b9a-e9773a22677c","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.254348Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:898d07cdc4ed9315289721bed9347846904a2b61f84635a034f3ead3517b2031","observation_id":"a8876b3f-0ae2-4432-9a6f-67b8793c711c","resolution":{"observed_at":"2026-08-06T17:42:54.452602Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.207227Z","title":null,"venue":null,"work_id":"66ef69e6-0806-48a0-9ba3-7501de584a6e","year":2022},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.420180Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:d3641f208f708fedb6c63d6dcfff4c13e71ceb982a778edefd214b1008860368","observation_id":"e0706ea0-663b-4d2a-86f8-8584b6e9fbb4","resolution":{"observed_at":"2026-08-06T17:42:54.297679Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:54.072981Z","title":"Safe latent diffusion: Mitigating inappro- priate degeneration in diffusion models","venue":null,"work_id":"6afc27f4-fb18-4fd6-8f10-f64016e9b88e","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.518884Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:4c7fb9fe0d316c8eb5363aff6c240f9f772118e302aafb9d0c90d4378e3ed0ec","observation_id":"45e93b59-e40b-492a-a431-769583854207","resolution":{"observed_at":"2026-08-06T17:42:54.140158Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.885457Z","title":"Introduction to stochastic search and opti- mization: estimation, simulation, and control","venue":null,"work_id":"d14005f2-361e-42b4-85a1-75a247396126","year":2005},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.631335Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:18e592a89e641a241f98c6b45cacd606353cca218d3c4a0a3ce487e71efa349e","observation_id":"467330f9-236a-4507-820c-1edc63c5f567","resolution":{"observed_at":"2026-08-06T17:42:53.961806Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.781331Z","title":"Stochastic gradient descent as approximate bayesian infer- ence","venue":null,"work_id":"a20bdd34-d750-4950-b242-5311d9995c17","year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.769123Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:3e76b60f1739651f3ccfa32c2b8636faed16fb057e0cb82c5f792253fb0decc7","observation_id":"b6ae0261-a326-439a-81f2-36746eea530e","resolution":{"observed_at":"2026-08-06T17:42:53.819640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.628892Z","title":"Ring-a-bell! how reliable are concept removal methods for diffusion models? In International Conference on Learning Representations, 2024","venue":null,"work_id":"1fd8a973-ce96-4b21-9543-b8f52fe60268","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:51.930861Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:db84a1944a2fcdded102afda0749c407d6ebb62b208902cbf477b5198eba7c6a","observation_id":"aa34c804-60ad-44a6-85b8-d1126ef0dd81","resolution":{"observed_at":"2026-08-06T17:42:53.723429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.496256Z","title":"Mma-diffusion: Multimodal attack on diffusion models","venue":null,"work_id":"48373130-4873-448d-86e7-2f1feaaf7ea5","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.032967Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:9485d4720051f58a07d33c8b1947b8d052736437f1bc3696c0b033e0202d04c5","observation_id":"e50eaccb-ada0-4b20-95ce-25a54e47e21b","resolution":{"observed_at":"2026-08-06T17:42:53.565636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01446","last_updated":"2024-10-30T05:56:30Z","snapshot_observed_at":"2026-08-16T14:13:22.901576Z","submitted_at":"2024-03-03T09:04:34Z","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","version":2},"cited_work":{"arxiv_id":"2403.01446","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.01446","snapshot_observed_at":"2026-08-06T17:42:52.579790Z","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","venue":"cs.CV","work_id":"d2987fbb-e0b1-4e91-a844-acd29a1ee87e","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.132859Z"},"links":{"cited_paper":"/paper/2403.01446","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:52d86a4d5fe1bbac7be7e65314d1ce26a53158128b99a87307ef123d0782aeb8","observation_id":"c80bec2f-1902-442b-89c8-b6d8dbb8a43c","resolution":{"observed_at":"2026-08-06T17:42:52.628693Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.312176Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":"dd7df38b-fbe6-4a63-841d-e3930519c8d0","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.188077Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:c910207af28ef1dc1cfd863093deb76e4a5dee01f806ea121f907ee243c81928","observation_id":"366d2565-c5ae-470b-919a-d9b275359518","resolution":{"observed_at":"2026-08-06T17:42:53.418154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.188537Z","title":"Forget-me-not: Learning to forget in text-to-image diffusion models","venue":null,"work_id":"49a965bb-9169-4614-9740-13b15f2ba94b","year":2024},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.230415Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:e21e8c7b53e5e5846c15c23f5adffd2129bf2e60e951f02c4c34cea9bc84ba58","observation_id":"d2aa8b83-e33c-408a-8983-92714e29458d","resolution":{"observed_at":"2026-08-06T17:42:53.250004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.08257","last_updated":"2023-06-14T05:47:15Z","snapshot_observed_at":"2026-08-16T15:24:05.688375Z","submitted_at":"2023-06-14T05:47:15Z","title":"On the Robustness of Latent Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.08257","snapshot_observed_at":"2026-08-06T17:42:52.277702Z","title":"On the robustness of latent diffusion models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.277702Z"},"links":{"cited_paper":"/paper/2306.08257","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:dcbe6276563196ad5cb31443e99a9308123069f1b364f0c1d38131960951a166","observation_id":"5ee77b2b-2460-49c1-a2a4-5bcd26ac6466","resolution":{"observed_at":"2026-08-06T17:42:52.277702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.11868","last_updated":"2024-07-07T23:10:59Z","snapshot_observed_at":"2026-08-19T21:18:06.855844Z","submitted_at":"2023-10-18T10:36:34Z","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.11868","snapshot_observed_at":"2026-08-06T17:42:52.349485Z","title":"To gener- ate or not? safety-driven unlearned diffusion models are still easy to generate unsafe images","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.349485Z"},"links":{"cited_paper":"/paper/2310.11868","citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:12353c76a6d9bd9777cfafb1f1ad33757ce888c015d36612355ca0d76e6f547a","observation_id":"615fcfd1-3c5e-437e-a0ae-cc0ac3553150","resolution":{"observed_at":"2026-08-06T17:42:52.349485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:53.066256Z","title":"Random learn- ing gradient based optimization for efficient design of photo- voltaic models","venue":null,"work_id":"72cbe64f-df8e-4cdc-b1f6-008fda909329","year":2021},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.383644Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:6efdfe7b33ef15d9fc4d7850568bd5f0ab75863a1ac084d82162de67e7d36107","observation_id":"94b28126-2f9f-4dc8-897f-09e5a25baa82","resolution":{"observed_at":"2026-08-06T17:42:53.118301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:42:52.957178Z","title":"A pilot study of query-free adversarial attack against stable diffusion","venue":null,"work_id":"28e12c25-4437-43f7-a4ba-e9b1fa4a1fd5","year":2023},"citing_paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:52.464160Z"},"links":{"citing_paper":"/paper/2508.03696"},"observation_digest":"sha256:6607a9f2ef39f1ff698fd83049e2b67089cf34874be08121388e718eb84bb93b","observation_id":"915b913b-1088-43fa-98bf-99b78b17c389","resolution":{"observed_at":"2026-08-06T17:42:52.996915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.03696","last_updated":"2025-07-14T11:57:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T14:15:25.445940Z","submitted_at":"2025-07-14T11:57:16Z","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":2,"verified_fuzzy":31},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2508.03696."}