{"as_of":"2026-08-09T01:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1a87a38cc9abd3bc37474a2d54b9c597560205643fdd0aaa883c17f373f2da6c","coverage":[{"denominator":73,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":73,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T12:04:28.704262Z","state":"measured"},{"denominator":73,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":73,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19683/citation-record","integrity":"/paper/2607.19683/integrity","json":"/paper/2607.19683/citation-record.json","paper":"/paper/2607.19683"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-01T12:04:21.763247Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:21.763247Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:f30c6c9987ba001fdcc0da7e034421681798affddefa2493c553a5241cae7a56","observation_id":"64260b66-3443-4391-86dc-948dd1d40c07","resolution":{"observed_at":"2026-08-01T12:04:21.763247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-01T12:04:21.922888Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:21.922888Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:9b4982b53f09f5a3a596bc662439e8719578b8cbe3088773af6904b59b347a03","observation_id":"5c1d728a-f8dc-4c7b-8841-9cdb2061e9c7","resolution":{"observed_at":"2026-08-01T12:04:21.922888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:22.089417Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.089417Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:4d028d37b19214f97a9a53f2811f741f8450d9a43d6c6089ed4db65d4ebe8780","observation_id":"50f132be-f32b-488f-aece-bf4054448fa6","resolution":{"observed_at":"2026-08-01T12:04:22.089417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.22830","last_updated":"2026-04-13T15:36:16Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-09-26T18:38:07Z","title":"ChatInject: Abusing Chat Templates for Prompt Injection in LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.22830","snapshot_observed_at":"2026-08-01T12:04:22.323987Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.323987Z"},"links":{"cited_paper":"/paper/2509.22830","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:fb6b7e592aedc190ebae3dab116cb730fe20a3704e5b6c597bdf4e15b8a4ff08","observation_id":"e3a5a35a-f69c-4fc0-aad8-b926a59e219b","resolution":{"observed_at":"2026-08-01T12:04:22.323987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-01T12:04:22.401932Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.401932Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:c8e0842f0a00cb659613b08ac78d3191c8c27b3eb519446ceb9a86c8a4430f05","observation_id":"48ea5d9e-e112-4404-959a-b27db1ee30ae","resolution":{"observed_at":"2026-08-01T12:04:22.401932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:22.510728Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.510728Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:c8c9b2154eb05fae1e78381fef39aff7545e661cbbcf86590f9e0286b5afd3fc","observation_id":"c91aad80-d40b-455a-9a90-7793f3b77934","resolution":{"observed_at":"2026-08-01T12:04:22.510728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:22.622030Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.622030Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:e77f6cf2b85a32f895fc9a8882b86cc37669f438db8fac18f05aa9f7ca0c7536","observation_id":"9a071526-2974-47e9-ae29-b46c795932e9","resolution":{"observed_at":"2026-08-01T12:04:22.622030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:22.750806Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.750806Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:f9e0fa56a3eaf1b39ff4326fc76a6bd7dcd2b149b5e4f73cecea880aa70d1dc5","observation_id":"1f9c4682-cc19-44ed-857f-fd580bce7085","resolution":{"observed_at":"2026-08-01T12:04:22.750806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:22.831124Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.831124Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:d766ec0bb4f61d9f00854f82fc49e640a8ee024b62a2a8e348b5c94b4ac1c7ad","observation_id":"622684f3-52cc-4adb-afa7-83658cb9d34f","resolution":{"observed_at":"2026-08-01T12:04:22.831124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.007963Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.007963Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:1601ab9a7d06f21c645cdf389b2ee3417e13d70055e6848969e8a20a425d9f04","observation_id":"fb047f59-4106-468c-9273-0a1af0d7cca9","resolution":{"observed_at":"2026-08-01T12:04:23.007963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.117232Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.117232Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:2a02a22d6a46bfc0b0fbcb3f5c398c7665578c9776fd47c62efb2d5e01f43c1a","observation_id":"7c46d57f-0e1c-4744-a79f-e3f9fa392ff7","resolution":{"observed_at":"2026-08-01T12:04:23.117232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.264795Z","title":"Hu, Yelong Shen, Phillip Wallis, Zeyuan Allen-Zhu, Yuanzhi Li, Shean Wang, Lu Wang, and Weizhu Chen","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.264795Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:268ccc5bd9795015ba3b01f1238096c22038582887a3a5e7b8e3c12c9b899433","observation_id":"483f9fd8-8781-425c-bef2-ce8631330d19","resolution":{"observed_at":"2026-08-01T12:04:23.264795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.332630Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.332630Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:f93220b3cb9bbb3b5f6f7c0594911233c35d2eeeab5af2c02ba440258c3ff571","observation_id":"7191c2aa-4f7a-43c0-a24a-1cdc86ef9869","resolution":{"observed_at":"2026-08-01T12:04:23.332630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.188834Z","title":"InProceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR’17)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.188834Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:2e878564f1606d56bcfe86a712d730eb6adc8eba126b932083acc5f2770cfee0","observation_id":"a49671a7-9283-4032-ab85-fe9910406d59","resolution":{"observed_at":"2026-08-01T12:04:23.188834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.624249Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.624249Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:1ddbabc33e4db4a33e1312451b2c044578421a36f8ee65b8605f184dfd9a6d75","observation_id":"cfb646fc-46ca-4122-803b-944302cccaf5","resolution":{"observed_at":"2026-08-01T12:04:23.624249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.697697Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.697697Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:1743f70ca57f83f0461a79c3c3a28d67dac6566cc4d7f3c607d60a2286667680","observation_id":"72019d8d-ad3e-4fdd-99b2-7ea3bda65ef3","resolution":{"observed_at":"2026-08-01T12:04:23.697697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.774900Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.774900Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:a038d293563980f691ef284ec5be07d5ff283d5185853881732e87443a68f765","observation_id":"963ba4cf-1e61-42dd-93fd-ff614645e1bf","resolution":{"observed_at":"2026-08-01T12:04:23.774900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.515619Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.515619Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:0c6b67102107b564f7293f488f23c7d71b08edafc69e4479f27b0b33e9badcb9","observation_id":"92e806f7-a0c6-4eae-8a1e-e84db7a3f11c","resolution":{"observed_at":"2026-08-01T12:04:23.515619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:24.003354Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.003354Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:4cab91e09abde1a53240a5cb2b0da16d830ff7f452f487d4825403552e5bec97","observation_id":"3eedca59-b1a8-4f34-9086-6b480bec81d9","resolution":{"observed_at":"2026-08-01T12:04:24.003354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.17003","last_updated":"2025-04-07T07:23:33Z","snapshot_observed_at":"2026-08-07T07:23:22.071348Z","submitted_at":"2024-08-30T04:35:59Z","title":"Safety Layers in Aligned Large Language Models: The Key to LLM Security","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.17003","snapshot_observed_at":"2026-08-01T12:04:24.102817Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.102817Z"},"links":{"cited_paper":"/paper/2408.17003","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:89e8a0dcc3453c016e28f59b670e5ff05a478d6ff23429d90f18df00669abd16","observation_id":"f418fcab-282e-49ce-a78c-99e4c6b4dd68","resolution":{"observed_at":"2026-08-01T12:04:24.102817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-01T12:04:24.222643Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.222643Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:04498444ca9843ebfcc7d6f1d795835f3c46916b1dd6346d825be785dd73efaf","observation_id":"baea3237-04d9-4381-8231-0e939261ef22","resolution":{"observed_at":"2026-08-01T12:04:24.222643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.882586Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.882586Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:4df26c8fa4e926137488368b851e44ff50a19709cdb3c9b62923400b5bfd5177","observation_id":"5d668458-5c12-4cdf-9dc1-d990aa3b7808","resolution":{"observed_at":"2026-08-01T12:04:23.882586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08485","last_updated":"2023-12-11T17:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-17T17:59:25Z","title":"Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.08485","snapshot_observed_at":"2026-08-01T12:04:24.460334Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.460334Z"},"links":{"cited_paper":"/paper/2304.08485","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:7ac731c659e2610bde309a791d1d17a4a31a8d7cb84382c72e3be722597e410a","observation_id":"272dca47-956b-4147-8876-d30b726a2d95","resolution":{"observed_at":"2026-08-01T12:04:24.460334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:24.554516Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.554516Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:346dca4dd2e9435e1db47b84b3bbc10e35b93f4d14ba484bb96aa492f608ce72","observation_id":"a095d7ec-902c-4960-ab7d-ee9c80a68800","resolution":{"observed_at":"2026-08-01T12:04:24.554516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:24.661512Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.661512Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:ec3a430026772cfbc11ca7209d6ee2cd2c4cfc6d3cb1736169a0e1583b08d657","observation_id":"ed23339d-44fc-443e-8b11-cd6bcf2a6e97","resolution":{"observed_at":"2026-08-01T12:04:24.661512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:24.344740Z","title":"Lawrence Zitnick","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.344740Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:e751a5ca8f36a60240ae86ee8aa4f0c0874cc48ee8a6cc383bb87033de069bb9","observation_id":"b1e58dd0-efaf-4438-a2a9-98a903880e42","resolution":{"observed_at":"2026-08-01T12:04:24.344740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:24.839468Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.839468Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:cd102c0b1ed0d4ff904375a0ba2675a09674e7cf6c67e93c256989f24e9d16e7","observation_id":"1009a89a-1f74-4172-958d-e1dca92b03cd","resolution":{"observed_at":"2026-08-01T12:04:24.839468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:24.954544Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.954544Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:b210c4715a0775cb7e4823804cc0ffea7e096cfd3e3b3c7b75ac7f9fd4dd0f38","observation_id":"c4748c27-f628-49b8-a33d-2a96017ddfe0","resolution":{"observed_at":"2026-08-01T12:04:24.954544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.040196Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.040196Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:c4d040b61be5fa135dba68e7bbbf0df7f230a15315ff02f8d9dc26869fe67a07","observation_id":"2b2fcb92-d769-4515-899e-c54a1f78f269","resolution":{"observed_at":"2026-08-01T12:04:25.040196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:24.753339Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.753339Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:27325fa52928daa1cd5c2410b1618d49852a3106edf16939ee57b05654bf7e2f","observation_id":"6da524e7-233e-42c3-a78f-289383e88c18","resolution":{"observed_at":"2026-08-01T12:04:24.753339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.221881Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.221881Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:7ea55e2badbf1f4a4a5c934d772088124a34f8dfcf81083f907b10d8b7c41da4","observation_id":"41433758-3952-48a5-8488-de3599ed8b7e","resolution":{"observed_at":"2026-08-01T12:04:25.221881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.339116Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.339116Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:a082592f0b4e9632d04209e24ac47d83714d70aedb1549feb4b7f11357fc375c","observation_id":"86967ffb-67ab-49de-8e6f-e5d68061d735","resolution":{"observed_at":"2026-08-01T12:04:25.339116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.01914","last_updated":"2026-05-29T01:57:38Z","snapshot_observed_at":"2026-08-03T05:36:39.984862Z","submitted_at":"2026-02-02T10:19:52Z","title":"Towards Long-Horizon Interpretability: Efficient and Faithful Multi-Token Attribution for Reasoning LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.01914","snapshot_observed_at":"2026-08-01T12:04:25.427632Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.427632Z"},"links":{"cited_paper":"/paper/2602.01914","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:47f42a072d7b491ac5d4d76e0812b2fb8c0440d6864275a03d83fd14fd933b73","observation_id":"7491ebde-a102-4d7e-bbbf-65bb717967b5","resolution":{"observed_at":"2026-08-01T12:04:25.427632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-01T12:04:25.128314Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.128314Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:1bbc343db910514a36cedf9f9343aa388daf6641b0bfc851cad5b07029659d52","observation_id":"d02d2446-a4b9-4375-bf38-a3d0eeffb508","resolution":{"observed_at":"2026-08-01T12:04:25.128314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.624494Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.624494Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:4f39febaa4f3037da607506a3c9912f3f4aa1362fd8ba4ba5cf330178dab02e5","observation_id":"08b2f156-1b85-469c-a1b8-5367083f861f","resolution":{"observed_at":"2026-08-01T12:04:25.624494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.718889Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.718889Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:a4f630af6fe3f315a4235820d4eda3870d4763290e4e4304d3c71a2d1cf25bc0","observation_id":"0114d4fd-93dc-4dac-bbbb-89ee1294d861","resolution":{"observed_at":"2026-08-01T12:04:25.718889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.866443Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.866443Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:9000aba7127a69139e03f2f308d9996709a52338208bfea8453c70e870fbc5fe","observation_id":"73fca423-0cd0-4572-a66d-2ba74ffec7b0","resolution":{"observed_at":"2026-08-01T12:04:25.866443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.528440Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.528440Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:b935262b77ada856db3973c589825b4077c6ee34e3f4c65f1ba8ccd8a1ad0901","observation_id":"61c57d36-0ad6-4ace-a533-254aeaedcf15","resolution":{"observed_at":"2026-08-01T12:04:25.528440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:26.045926Z","title":"Bernstein, Alexander C","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.045926Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:65928af81c35aa591ab21aa91c45c0a946582f5bc225be7af655b9c1f0ec6736","observation_id":"fe4b345f-22ac-4b68-b129-527347e6d0e1","resolution":{"observed_at":"2026-08-01T12:04:26.045926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.09050","last_updated":"2024-09-05T21:17:13Z","snapshot_observed_at":"2026-07-06T18:45:13.949715Z","submitted_at":"2024-07-12T07:18:05Z","title":"Refusing Safe Prompts for Multi-modal Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.09050","snapshot_observed_at":"2026-08-01T12:04:26.134427Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.134427Z"},"links":{"cited_paper":"/paper/2407.09050","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:5c425fb33049b04647f5367d022ccb66e72a82bf739a1a5322778958848dabb2","observation_id":"0884a2c9-d0c8-410f-9f5f-84e0541c9f2b","resolution":{"observed_at":"2026-08-01T12:04:26.134427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:26.248537Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.248537Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:549ee79b1ecd4d7ab353a9a2397f3092ca5b1baee1fa7ad67c99c51651a2e227","observation_id":"666a624c-2a3e-4d7e-9541-9d3ac8f57d65","resolution":{"observed_at":"2026-08-01T12:04:26.248537Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:25.958112Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:25.958112Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:3c661cc4fb7c6439640a3881d612ea77c49d3bafe31348ae1ca836e524cd94d1","observation_id":"fcdf3810-7342-4ff0-b703-4fea7647823a","resolution":{"observed_at":"2026-08-01T12:04:25.958112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:26.425452Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.425452Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:14622a24b6be55657810062c20cbb1e60f79c9ebf02d22bb4f4f98d12238f8b5","observation_id":"4a3391af-f76a-4d5e-a400-5e8c325e2aae","resolution":{"observed_at":"2026-08-01T12:04:26.425452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-01T12:04:26.546447Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.546447Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:45c5c8c2c5f099b7dcb5c047c04058c50d9e79a49a1ca4dc1806e50b4528fd3c","observation_id":"22fab79f-4adc-4d2d-b308-3cd5a5d50a81","resolution":{"observed_at":"2026-08-01T12:04:26.546447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:26.631473Z","title":null,"venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.631473Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:934a93fa3ec65fff9ac7c062e639caba43bf6ec5654e23cc682700d11da592f6","observation_id":"b0406d07-9a1e-41ae-afa3-6dd4d8718ebd","resolution":{"observed_at":"2026-08-01T12:04:26.631473Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:26.338236Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.338236Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:09104473ed4abdfe325d3099ff26020b47d445ac3619961127a1242123ceb942","observation_id":"1d7cf897-b0f5-4e20-9871-45cf757a65b4","resolution":{"observed_at":"2026-08-01T12:04:26.338236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:26.811892Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.811892Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:a2e1e53ea5c663cc6559c6b83619637d359f2b781d5c1e150a8293986b054171","observation_id":"5b5c5777-b4de-499f-986e-0f6c5e394f1a","resolution":{"observed_at":"2026-08-01T12:04:26.811892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:26.926661Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.926661Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:892267ebb3722453df37c4b186d18621abe50255d3864118ec1bf1365d4488a0","observation_id":"c7ed8535-d92e-4d99-aa6a-ad714ac69199","resolution":{"observed_at":"2026-08-01T12:04:26.926661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:27.016587Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.016587Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:bf5937b2e426953d0d13079105993b9ea990cc314ee09b00300ef408f462e40e","observation_id":"f0ae726e-004e-48d4-960c-e2bc404f5507","resolution":{"observed_at":"2026-08-01T12:04:27.016587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21073","last_updated":"2024-07-29T09:07:29Z","snapshot_observed_at":"2026-08-05T09:55:43.398103Z","submitted_at":"2024-07-29T09:07:29Z","title":"Enhancing Adversarial Text Attacks on BERT Models with Projected Gradient Descent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21073","snapshot_observed_at":"2026-08-01T12:04:26.726440Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:26.726440Z"},"links":{"cited_paper":"/paper/2407.21073","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:3547dd1f12551ca06b8c33eb9f3ba35af640557e9b3be0173be236a76c4e0f90","observation_id":"390052c1-ef15-47fd-a27e-74849261bb33","resolution":{"observed_at":"2026-08-01T12:04:26.726440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:27.197441Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.197441Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:d1b44fe8d70b7e678d14f6ee1d16852ee9d8f9321899cdc58f006b7267b8a16e","observation_id":"c79364de-b099-419c-8f8c-6b1625522b93","resolution":{"observed_at":"2026-08-01T12:04:27.197441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:27.308276Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.308276Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:a166f165ca46ac08c634de747709790b54435d62ce8fc77e5c7adfaab29cdc47","observation_id":"15120f14-1bb5-475f-9045-96520f05c522","resolution":{"observed_at":"2026-08-01T12:04:27.308276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13294","last_updated":"2024-06-19T07:32:55Z","snapshot_observed_at":"2026-07-06T18:33:28.511600Z","submitted_at":"2024-06-19T07:32:55Z","title":"Enhancing Cross-Prompt Transferability in Vision-Language Models through Contextual Injection of Target Tokens","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13294","snapshot_observed_at":"2026-08-01T12:04:27.370700Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.370700Z"},"links":{"cited_paper":"/paper/2406.13294","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:bd277509b60f81dd439755b755c3715cb50c186613fc3f2801c081c84e5ceb5c","observation_id":"122dfec8-1f73-4e3d-af47-8ae25650d400","resolution":{"observed_at":"2026-08-01T12:04:27.370700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.01718","last_updated":"2026-06-26T03:32:10Z","snapshot_observed_at":"2026-08-06T19:09:15.755369Z","submitted_at":"2026-05-03T05:19:21Z","title":"Dual-branch Robust Unlearnable Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.01718","snapshot_observed_at":"2026-08-01T12:04:27.107547Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.107547Z"},"links":{"cited_paper":"/paper/2605.01718","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:26380c4c275b503f50da57e1c8acc1ea946ffb8169384786df3734f24c0fd5b1","observation_id":"4fae6092-3c75-47fa-b839-7f38f6c127ab","resolution":{"observed_at":"2026-08-01T12:04:27.107547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04031","last_updated":"2024-07-01T14:25:23Z","snapshot_observed_at":"2026-08-05T18:40:45.767406Z","submitted_at":"2024-06-06T13:00:42Z","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04031","snapshot_observed_at":"2026-08-01T12:04:27.555375Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.555375Z"},"links":{"cited_paper":"/paper/2406.04031","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:f55b2e8f16bda7a6cb39c1d762d64341d8c251de706d2bf6939efff3515da3b7","observation_id":"e2c429a6-3c47-4176-8030-153b619f6b56","resolution":{"observed_at":"2026-08-01T12:04:27.555375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:27.640524Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.640524Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:d2a839a00c9e0ba819c9b25739bd6e4a661c12ef2c3eec31062d2b5b0c925170","observation_id":"fc98e3d8-36cd-46b8-8f97-9786eadb9c71","resolution":{"observed_at":"2026-08-01T12:04:27.640524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:27.702042Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.702042Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:faf058582971978e1e852faf1c26cbe7bb716b3b39691d4ac67a66c200cf1fb2","observation_id":"721875ea-3b79-419a-b787-8338a0cd7494","resolution":{"observed_at":"2026-08-01T12:04:27.702042Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:27.450011Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.450011Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:ecfc14cf033c8eb07aaba7cc5e08835ad07d17ef1861743c71e35163e6fdead8","observation_id":"cd726d86-d32f-4f54-8fde-e32f659b742c","resolution":{"observed_at":"2026-08-01T12:04:27.450011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:27.869950Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.869950Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:c0c1be129a97ed06a982a84ec4a84d2230dbada31440427ffdb92cae6c009ee2","observation_id":"b49370f5-6c82-4b2c-897c-453a108efa3e","resolution":{"observed_at":"2026-08-01T12:04:27.869950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10783","last_updated":"2024-09-26T02:44:29Z","snapshot_observed_at":"2026-07-06T15:18:14.909173Z","submitted_at":"2023-04-21T07:19:41Z","title":"Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10783","snapshot_observed_at":"2026-08-01T12:04:27.977548Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.977548Z"},"links":{"cited_paper":"/paper/2304.10783","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:8e6e3d13c30adeae39c93d9c482705cd858bcca49f1781424e99d1338724b5df","observation_id":"f4d5112c-f8b1-40aa-9104-c78c2b534606","resolution":{"observed_at":"2026-08-01T12:04:27.977548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.041820Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.041820Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:9074b6433674a961f4fe74f6d8ca4b63d6dbb245113721f5cad2f5d7fe4e62a5","observation_id":"f79a660d-f736-4e2c-83e1-4948d91fae89","resolution":{"observed_at":"2026-08-01T12:04:28.041820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11357","last_updated":"2024-08-15T13:02:41Z","snapshot_observed_at":"2026-07-06T18:01:36.241985Z","submitted_at":"2024-04-17T13:12:14Z","title":"Detector Collapse: Physical-World Backdooring Object Detection to Catastrophic Overload or Blindness in Autonomous Driving","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11357","snapshot_observed_at":"2026-08-01T12:04:27.789946Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:27.789946Z"},"links":{"cited_paper":"/paper/2404.11357","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:2b2ccc00e6979e2bf46980699fb78301b6f5a14d27e7f0724cd826be403a7060","observation_id":"3f32eec9-8194-4f77-99bb-7a604416bc3a","resolution":{"observed_at":"2026-08-01T12:04:27.789946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.180254Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.180254Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:a757c581de3c368fca2dd5e134fd7185b70a1caa743bbdda91dcb2c1bc7da0c4","observation_id":"ceaa0c29-bfb8-4da3-8d7d-b64ea9c37d55","resolution":{"observed_at":"2026-08-01T12:04:28.180254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.321404Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.321404Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:6f6e3687e141e3bafe8073870858ec300331eab89be54d578c3d48ed20bc5290","observation_id":"3b69b352-4a30-45f9-a769-3b9146b8588f","resolution":{"observed_at":"2026-08-01T12:04:28.321404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.387056Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.387056Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:67094d8cd9e1c7b9b00bddb7fce0eab4c14884762a2e0a0964bfc83408263ac5","observation_id":"8e23514f-01fe-4de5-af74-6f99091dc740","resolution":{"observed_at":"2026-08-01T12:04:28.387056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.095700Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.095700Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:e7fe68d877cc1efd4c36a3c37019765f698afab44b5092064fd83a2cfa51b389","observation_id":"5e8344c8-78fa-4376-add1-a9c0d1646b5e","resolution":{"observed_at":"2026-08-01T12:04:28.095700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.585156Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.585156Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:68fe2d1b95f9494db252c925c749c3fbefc92fac47f086ae6c549da6ba64ed4e","observation_id":"793be7be-a1d3-43b9-a2e2-b85a5c886195","resolution":{"observed_at":"2026-08-01T12:04:28.585156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.657903Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.657903Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:335797dcf98606b33483c7d810ea48fe8843192f125f44ac2d1866f051c86258","observation_id":"0bb46ade-7c57-4ec4-a663-4ed2d4c34135","resolution":{"observed_at":"2026-08-01T12:04:28.657903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-01T12:04:28.704262Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.704262Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:f12b2541ddbe955c879b9f61e7c738f977de62c448c8fa9101ae6d63c126b693","observation_id":"35209e4c-f045-4541-b9f6-553277213891","resolution":{"observed_at":"2026-08-01T12:04:28.704262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:28.471092Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:28.471092Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:1f635315af88fb9cacf642fb6fcb90c3ff498b72f22ef0e17d2377890c678e02","observation_id":"b61ebe2a-dcc8-4add-9b8d-5d82449cefe9","resolution":{"observed_at":"2026-08-01T12:04:28.471092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T12:04:22.203566Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.203566Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:354c3b4c456a9639a77deebd6784b549f5a03151efd1adddb1afeca583dc7481","observation_id":"c16ade4f-ab1a-47c3-8c4f-a1071f44d936","resolution":{"observed_at":"2026-08-01T12:04:22.203566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.17034","last_updated":"2025-05-21T16:47:23Z","snapshot_observed_at":"2026-07-06T20:11:46.794148Z","submitted_at":"2024-12-22T14:18:39Z","title":"Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.17034","snapshot_observed_at":"2026-08-01T12:04:22.904927Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.904927Z"},"links":{"cited_paper":"/paper/2412.17034","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:46871147bed87d83b3f1dd0a530fe2a5ec6ccc1e43ad3b020732c40092b9e5d5","observation_id":"edfb52eb-3352-40f1-a6cf-383f38025d43","resolution":{"observed_at":"2026-08-01T12:04:22.904927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T12:04:23.407688Z","title":"InProceedings of the 42nd International Conference on Machine Learning (ICML’25)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:23.407688Z"},"links":{"citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:fd282a9caaec82868350811cbd8a36653f4f906e934aef29aafaa40f4e3ef316","observation_id":"b7b5da4a-f22b-4766-93d4-8b27717d9cc5","resolution":{"observed_at":"2026-08-01T12:04:23.407688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models"},"reference_resolution":{"displayed":73,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":73,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":73},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 73 of 73 outbound references and 0 inbound Pith citation observations for arXiv:2607.19683."}