{"as_of":"2026-08-18T08:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ebaf7099cf6af2ff815e284c25b1d6cab4afd7fa0c1ad5dabe24e07cd160ba86","coverage":[{"denominator":70,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":70,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T12:36:44.253836Z","state":"measured"},{"denominator":70,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":70,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.10329/citation-record","integrity":"/paper/2607.10329/integrity","json":"/paper/2607.10329/citation-record.json","paper":"/paper/2607.10329"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:99ec9c5bf10b2c6313e313d70bb06c95426b5ab45e20518ebfd5b563cfb395c5","observation_id":"7a83fee4-39c0-4fc5-97e3-fcf2e553397b","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:486cc96ad031719ae40c4e8fbad43cd4236e7fa3c873d409ac2d1cd76ad44e6a","observation_id":"072f6373-5fcf-4cd8-9fe3-f3ed27cdbda7","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1808.04730","last_updated":"2019-02-06T15:45:02Z","snapshot_observed_at":"2026-08-14T18:41:17.969305Z","submitted_at":"2018-08-14T14:58:59Z","title":"Analyzing Inverse Problems with Invertible Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1808.04730","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/1808.04730","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:17e9950f7f597f0d4b8d0f73710b087b34af1a667fac1b19d96b7e84f422ce1f","observation_id":"b28d6a0a-e52d-413b-874a-400b49672e9f","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-08-14T04:17:22.593941Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:12929e6a0de3a46c55f4ce4e068d004053e36a35102b1637c9a51b030128e684","observation_id":"6247183c-8424-4f4a-b37b-73324ba4b113","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:79a086c802b18ce7e2c9ba2340a0de0eff2fb511e6b153dfa7039f1c7d6006bf","observation_id":"9d57fd46-ba89-4906-85ee-ebe5c724038d","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:bec203b12704d49187e05bbeb2db63c168d200f9617f577a01fef33a9d7f767b","observation_id":"31e68a1e-3ec4-4d5f-8454-626e52be030e","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:007d2eec4896d67710caf2a11ac10fe40aece40843023f9f83943699709ecb89","observation_id":"a88a96d1-eb70-458c-9de7-f0c3e8a43573","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:aadc80853686150873ab573a1633cd8524d53714e6cfc918aa530b820ae48edd","observation_id":"1f82c82f-6368-432d-9a4b-92167bece4cb","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:02e570d77601ef9282172408d16033eae4222b0e819c699b33c8c8a3b0a60e96","observation_id":"23f32b3e-10e9-4178-a673-cf9db57a50ad","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:3cd2b11b4e44e4ca2bd4c4ca42f72713b494f969e26890642321312c8534fdd2","observation_id":"e2882d1b-5a2b-4e7b-9e1f-6a1539768c88","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:d9720cf1d592d1378d48a7eecb8e1387e4c5d322159f8962238a7d3f3958b204","observation_id":"82527f04-6407-4a90-999b-da2a38a6552c","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.12598","last_updated":"2022-07-26T01:42:07Z","snapshot_observed_at":"2026-08-14T06:37:15.299690Z","submitted_at":"2022-07-26T01:42:07Z","title":"Classifier-Free Diffusion Guidance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.12598","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2207.12598","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:4fb29fb76760688a78b5d6bbb9b524e7c338505d7efc4c753b27d9bd46988310","observation_id":"3ce4696e-bff3-4d75-a5ad-be160ac890db","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:789b0075c488e38e89b97092e68cc521a2d27f3112a6af7568e222bd96deafcf","observation_id":"02363ccd-18fe-44d2-92f8-8dbbc513e9e7","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:c2f115f1f18cf00bb785eca22d7e1db6d33a8b7986f7eef113911492247bc1ab","observation_id":"225196e9-e2bd-4de2-ace0-19f218057a9a","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:687ee9a91322d4177c928fd5d2d1ec076f3352616e6f52280b90cc6a2a10bef7","observation_id":"26079464-f24d-4f93-a8d5-a02cb0c46947","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:0a089f3e486842b4dbd4ea458998f3378bb1e62a8153c79371628ba5b3d7ee95","observation_id":"aad73901-a007-49bc-8b1b-b0899e6466a6","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:c0265d7ec5083a4d031a0ca5d7f44725e978b5d7f96cb6f20b2a250c30047f03","observation_id":"4e714df7-d2c5-4332-b8f0-3643c42cb35e","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:f9f5c5afb7d70df2745df297b9abb88166c4e8e0c6b53aecba984d25b2b40d33","observation_id":"f512475e-9b8f-4957-afe7-60a942d196fa","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:95b69b046b232a53e117337859c5c9673570fc7b6d1878e611fbd4e16e6a13e9","observation_id":"d545774a-2cc4-4ccf-808c-0bebba814f16","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:b0815ed90c33adb86d8df8d14daab7e274b35166c844b8340e7f53f1ff9c9144","observation_id":"0e205a1b-b3ef-407d-9bdb-abe2cca703cf","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:edc4eaf4f1d682b5763837b701134ff0aaa48ddede38f491baa9c7eabb35fedc","observation_id":"c8d8665d-de63-47f8-9282-a148667baaf9","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:1fd8120ed7c3af066e677aac3a0ade468eb341ee0f5baea16c7d4b6ca758d018","observation_id":"b5d1d48f-f3c0-4cca-a15c-68a5763ea8e0","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:219ab4d74f8944d5303133eee8856543f2923a39a6dbb3a122078738c55a602b","observation_id":"66ec1f64-8592-4427-853c-b7ba0038039d","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:ea112c54d10cce92146efca6df32bb5cea7b5cad1f1d43a4a0f455551a26dc63","observation_id":"ef0e2561-cb12-46bd-9c63-75ecd2a7c5a5","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:43015c1f561055c6ba7a7fea586b612432f3670edfa070480e1058d13364270f","observation_id":"ed069697-d88a-418b-8c72-0390f5fc2a03","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:434c90add47a064ae062c94d09aae56b19790f42fc55a69036adaaf1eccee7ae","observation_id":"7752f546-7231-41b9-8784-924733b0ca07","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.09734","last_updated":"2021-11-18T14:49:15Z","snapshot_observed_at":"2026-08-16T17:40:54.088104Z","submitted_at":"2021-11-18T14:49:15Z","title":"ClipCap: CLIP Prefix for Image Captioning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.09734","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2111.09734","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:34ebcef3b0fdf658517318584f676a966fc3e216f5f942f5710618ed9558fc76","observation_id":"a5b94a51-91e3-4fd7-a8e7-d2225fc2f004","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:e297c41df337e020621f4ea5b584b77ed15d25e143817d77bde4978cb7cb0ddf","observation_id":"1b424a1a-c819-445f-ae0c-03bebfd7a774","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.00768","last_updated":"2018-06-27T21:06:06Z","snapshot_observed_at":"2026-08-14T21:36:55.675026Z","submitted_at":"2016-10-03T22:04:07Z","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.00768","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/1610.00768","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:b8445f768116c9f91e642f0492022226cf46e108dd22b25aa7c4acd2c1512dd8","observation_id":"a5241056-de11-431a-9fa3-5d9606837866","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:3d5b2ffc8b1978fd15cc558fb9bfaf6b430f6b5e95bffbdddd6bc832b80be05f","observation_id":"d09b5615-0772-4468-9244-9d36e490b6b5","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:dba6c28faf23f005e00a9b5f20d20040a39d840cdf18bb446201244407488771","observation_id":"208350c1-7a78-4b6a-87bc-996bf5025a5b","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:28ae23b582710f3e92c7474bcbea131edb86eee1a25724558cc95f5a2fdce661","observation_id":"363de134-925d-4fb6-96e7-acefdd107e31","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.00512","last_updated":"2022-06-07T09:17:35Z","snapshot_observed_at":"2026-08-12T01:14:44.484432Z","submitted_at":"2022-02-01T16:07:25Z","title":"Progressive Distillation for Fast Sampling of Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.00512","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2202.00512","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:299d26737dabdb1426ec1ee77661e1d629b9e4cc039ee80ccc7d96010d993210","observation_id":"3a1fb6a8-fe7f-44d7-aa27-2f909facf7a6","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:ac62699a5e5d9a6320300a5ae1baca7f99b90161086b37061b22dbaa1790c71b","observation_id":"de6babb8-52eb-4a53-9bbf-03149346e001","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-08-11T15:38:14.931716Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:0d87844f0e836dede769493a46d0e96c346a7ae594f8600de9070cd0ed6cd18f","observation_id":"d48cf84e-8336-4040-998e-f00f7ca67ca1","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:d9448097fc4873e9635ac58c06b69a5df83a5c798dc0239cb9beab3489ebeb9f","observation_id":"a7aeae05-866d-4a18-ab8a-8b4075e26a2c","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:a376f3a99620d9738e38a01e7131e4fd831ac114c89a7610b4d7181d6ccfafbc","observation_id":"af818daa-43da-4356-ab0d-211ea28f6d81","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:b0b6fa67537a949264753cd990033a45403cb1a2d322fdba9db960e4a9ed96cd","observation_id":"032a8d17-c86a-4389-9a8d-dea43b8b73e5","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:85f50d71c590ad87c451cd4ec78ed0c75fe98a5918bbc24c138dfde7552994c6","observation_id":"153a0146-2df1-471f-8b7c-e56267517aaf","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.07298","last_updated":"2024-05-06T15:52:03Z","snapshot_observed_at":"2026-08-16T14:53:09.624434Z","submitted_at":"2023-10-11T08:32:46Z","title":"Beyond Memorization: Violating Privacy Via Inference with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.07298","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2310.07298","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:1040a92598019cf2edab9864e3fd69c94f81706d6441c08ab87f3c1e6d5fbe18","observation_id":"31228cb5-3373-4f2d-8378-d2baca2e22a6","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:8e44bc3e744c62427e030a4bfa99a2994705f0045578b0e98d473fd3d28339cf","observation_id":"ffb8629a-dc8b-4d02-afeb-dc5ceaa628f7","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:9209de2c4ec1fb6d9a5f8f115a9c59406721554958cd26469f429310e21e4940","observation_id":"d6b6565a-a4d1-431c-a343-95d44ab1f130","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18265","last_updated":"2025-08-27T14:39:45Z","snapshot_observed_at":"2026-08-17T12:32:16.575866Z","submitted_at":"2025-08-25T17:58:17Z","title":"InternVL3.5: Advancing Open-Source Multimodal Models in Versatility, Reasoning, and Efficiency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.18265","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2508.18265","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:896fe80d545f599992cbfdde7eaed0f0ffada5a6f36ed4385d6a06e9a0446145","observation_id":"086b4fc2-e1e3-4f26-9957-cf97c0e25d6b","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:7cf5dd55af3f16011c67039162d8155ed6e8c03d2dd2a2b357758543e2d1d199","observation_id":"6503f132-6f10-4bfc-b678-8c4ea12ef4c4","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:d53d034341177153f0fbed3c463fd28e6ea9eb2b47c79b2bb9e2c499b6e85a1a","observation_id":"7aa11a99-2ca0-4c0a-b697-70a4eee21279","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:6ad5447ab0bb20a32a3d9da5f317b4de81082fbf7043758034f42f7f1e761a38","observation_id":"17ccfb22-a1cf-4c02-a34b-359c4ca047b3","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":"InProceedings of the IEEE/CVF international conference on computer vision","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:f6d0dc6258d2f493bf30d2cc998b18f680953e61da7111673c0571a648271866","observation_id":"80da7a87-1fb2-456e-96e7-8654511846c6","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:ca553975c048f95be177c49bc396a86a8eebe3a5bb8ef5024cb41f3a7645080c","observation_id":"2839f5cd-962b-48a9-ae02-90fb83b1bd93","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:9b69959802c7d001a3ec0f71c4caad985ea36ff3388cb8919fc486d0db3e9a06","observation_id":"a3a2fbe5-8798-47a0-b14b-f76ee1bcccc9","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:c786e8037e8f9652e75f017cf2699f2762fecdb37953f0eb9848f51739306fb6","observation_id":"0d463611-0405-4641-b233-2accd49860aa","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.22552","last_updated":"2026-04-24T13:45:11Z","snapshot_observed_at":"2026-08-14T13:47:58.584985Z","submitted_at":"2026-04-24T13:45:11Z","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.22552","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2604.22552","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:07aba74abfd739b14548a61ee64eae744a32eaa44b264bfb8fffc14d61d88a3d","observation_id":"28f1f2c2-fb84-458d-b482-ea6a7b142920","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-13T17:30:33.422266Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23828","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2505.23828","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:30ffff91a013f527086f64ba1d7ce8b26e050ce20affae3a2cdbd80d60fe9abd","observation_id":"92160704-b664-48cc-9512-28fbb974dd52","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:e6111bef024670ee57098111afac1df4b5fe43b0dcc6d555d3fe81ea9f096f84","observation_id":"fa5e1858-088c-41d0-983f-e4441c4b1b56","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:9953c822c9adfac5497ff3a25f15fad70279afee2b5e8c23e9bd71882687b731","observation_id":"38ef2787-bc2a-42df-ac26-4ab14a2a0bec","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:cd30419f9e933d5ae0ba5ff78654ad61d9d7a72f41282e867fc55c827f0bc009","observation_id":"6339e9cf-1e95-46c3-8912-79fdf6d75977","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:074ba0dccaed93156e447815a6ba55f39f98541fe4a15ef8cab865d9b889b9ef","observation_id":"a8c63edd-d79f-41e2-a273-4a12eb97b092","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:ec4e9bbb9eb4e7819a6698b5f94e1d84fe749a027ea0cf6b96e2e7471d558149","observation_id":"8c673099-e47b-49a7-8682-5b89d090bfa0","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":"InProceedings of the IEEE conference on computer vision and pattern recognition","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:cbf7cb20090881f5c4a97e0153e3df8f61834a182090a3076b162cdbecaf02a8","observation_id":"9ceca98d-5892-4a21-9b71-f2cbfe7835b8","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:f6fcd4dc7443f96d21f0cad7ce1b0e64851c22ebc8e3e03b3da01958e5e46000","observation_id":"761e8265-ab77-4ff6-93ac-6963b20dbb07","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:a88c0f3e46a9f7e75e676c2eaf76deb3269debe9587806c706d1387ac4f9c92d","observation_id":"ccc1e3da-e92e-43d4-bae1-c52b2b8ebd7c","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:304373bc5cc34e25b8b510bdd126183c99cd0e2ef1de22ff38a158520db28ef0","observation_id":"6f40fb91-30e9-4128-9ebd-6c91875e3c22","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:2d9492eeb08749bda16e77c38378f43601690d38ddda5279021933f85aaedba6","observation_id":"10271188-c12a-43cf-87a7-28aeed33d242","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:00ed1e69ecc47c556b935806441d853d8df41f7e84c05ff2ebfa8026ef8b47cf","observation_id":"2c2cff30-a7d5-482e-a089-576401602b28","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:1c5e1401d19ebce10285bd23d7566818d14f3ea4ee064c7b68843c45ec50b291","observation_id":"e502ccae-4b2f-4e2a-83a6-dd2f73e9557a","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:cd8b4bee7b8df7391c717fcebf1cfdbff881f7327dcce088ab3ebfe9115243fb","observation_id":"78515a65-0712-4b11-921d-11e0d4787a42","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:23ed7e6fcf8739a1b31f887fa05acc10d35c1c5da29acb4694b37b7103a9bda7","observation_id":"f350bcad-edf0-481b-a21a-e12006f5a341","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:74377114ec13e54eb5c42fbaa6012da5a927849f6c5339c76b1596fa56ee748f","observation_id":"ff7a903b-a518-4f72-a152-42198daa9301","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":"InProceedings of the 32nd ACM International Conference on Multimedia","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:5a72c57e2bc8d17e1b3545e5aab16f7541b367950adca203e2fe57f10daf7214","observation_id":"2dab71f0-f87b-4c83-bdbf-3e46162f4724","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:bd230025f10be5d637ab78fd6a9cc09054ebc931a25fee4fa332d28224ed3d35","observation_id":"6de25c8c-650e-4c19-8183-b06cd3e28b74","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23105","last_updated":"2026-04-25T02:00:01Z","snapshot_observed_at":"2026-08-12T16:16:21.157877Z","submitted_at":"2026-04-25T02:00:01Z","title":"Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23105","snapshot_observed_at":"2026-07-14T12:36:44.253836Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-07-14T12:36:44.253836Z"},"links":{"cited_paper":"/paper/2604.23105","citing_paper":"/paper/2607.10329"},"observation_digest":"sha256:6738b39af4bbe86d7668480948f812a76db7dc017753171c3aba909e41590d12","observation_id":"cff64766-ec38-4680-8ce7-76da8ca5d333","resolution":{"observed_at":"2026-07-14T12:36:44.253836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.10329","last_updated":"2026-07-11T14:13:10Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-15T09:53:51.217047Z","submitted_at":"2026-07-11T14:13:10Z","title":"Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection"},"reference_resolution":{"displayed":70,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":70,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":70},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2607.10329."}