{"as_of":"2026-08-09T08:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8799b98f1fc480cd4abeba1ee9a5c63c3130ad49d150d2b1b5abc48be171d552","coverage":[{"denominator":77,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":77,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T09:23:52.602450Z","state":"measured"},{"denominator":77,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":77,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.24897/citation-record","integrity":"/paper/2607.24897/integrity","json":"/paper/2607.24897/citation-record.json","paper":"/paper/2607.24897"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.291958Z","title":"T.; Kljun, M.; Quigley, A.; C opi c Pucihar, K.; Grubert, J.; Biener, V.; Leiva, L","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.291958Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:95f78a8fdce3319f4610f1cf270b4b04b1e84f550d9b3e7491b830dcfdc2ce7c","observation_id":"6bdb8ee0-9e63-4cbc-8a81-1d562c3e68ff","resolution":{"observed_at":"2026-07-31T09:23:52.291958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.296831Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.296831Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:bec99bec6c88401aa7e86f35dc8d23d2966f5e27816f312142180f99bb9f5fbf","observation_id":"062a1f10-5598-4ad2-b7c2-bba7c84c63b6","resolution":{"observed_at":"2026-07-31T09:23:52.296831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.299633Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.299633Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:06c138af4b1628d082f4673ad2ce9114047031d8a123a63769f639e4076266d8","observation_id":"b7e5dd13-4546-4294-90b3-6fbd425f9573","resolution":{"observed_at":"2026-07-31T09:23:52.299633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.305914Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.305914Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:d54dd6190979527e79c211d178f8ce0e0232f72c09e76f5585510257f48c7a45","observation_id":"00406c6c-4cf0-4baf-99ee-1af71f299088","resolution":{"observed_at":"2026-07-31T09:23:52.305914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.315074Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.315074Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:257cdfc233d48cda27aca1fe153f6aa0b2893c95d79ea3da96c075bdcfd2a41e","observation_id":"490d41d9-d398-415a-8ed7-5c240c2eb23d","resolution":{"observed_at":"2026-07-31T09:23:52.315074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.317843Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.317843Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:26382cf5970d8f67b597d7ceaa742158bb14d34981a5ded8d14619398e13d7e6","observation_id":"132c6906-b87f-4c74-b16f-316bb64dde50","resolution":{"observed_at":"2026-07-31T09:23:52.317843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.320382Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.320382Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:43340b08b36b6fc555370517cb86cd49d15fe55e0d9032955fce9f20c23019f8","observation_id":"210f1fc6-cb86-4e65-a127-776d3828209f","resolution":{"observed_at":"2026-07-31T09:23:52.320382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.323087Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.323087Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:704e4b823096152791a3070c19dcb1b55e3921b0dd81be001f37b48fd7ae1950","observation_id":"3d810318-82f6-4d5f-82ad-7d1dbad795a2","resolution":{"observed_at":"2026-07-31T09:23:52.323087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-07-31T09:23:52.325664Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.325664Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:0feb9ecfbb5fc10154e7792529307b7caac5a2aaada6760dff522442493946c1","observation_id":"b848ca81-4652-4c11-a7bb-338079de0540","resolution":{"observed_at":"2026-07-31T09:23:52.325664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.328437Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.328437Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:728736e442605cd78e8c3160e0b171b65f16cd003382f0d7fb35c88e357e3b3f","observation_id":"e70b42f4-a965-47af-a3cf-a958e3eb59dc","resolution":{"observed_at":"2026-07-31T09:23:52.328437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12893","last_updated":"2025-02-27T01:32:58Z","snapshot_observed_at":"2026-08-07T18:08:32.968901Z","submitted_at":"2025-02-18T14:29:12Z","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12893","snapshot_observed_at":"2026-07-31T09:23:52.331731Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.331731Z"},"links":{"cited_paper":"/paper/2502.12893","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:57f3184d37d3328d0a8eb435891df7eff41616b23a6daf1b5cf6eaafd92999dc","observation_id":"307204e9-b59a-4356-95b2-3dfe24443d7e","resolution":{"observed_at":"2026-07-31T09:23:52.331731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.334641Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.334641Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f01f4f256996d8f0a7a39da7dc0e15d361060524503a7843a66817106b2919ef","observation_id":"5b777e41-7422-4d6e-9991-2f77395c7147","resolution":{"observed_at":"2026-07-31T09:23:52.334641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.337242Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.337242Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a8e124958b3384c546507508c97ed8bb4c6efa81894183c13a93643af0952021","observation_id":"f8cd89da-2c0e-40e3-b113-b041309d50bd","resolution":{"observed_at":"2026-07-31T09:23:52.337242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.340008Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.340008Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:f425b4e51b4153811a9091503f537494c698b99310a25fe151ea0bc84ab99de7","observation_id":"d56beffd-b9e9-4717-b051-8a8d802e7017","resolution":{"observed_at":"2026-07-31T09:23:52.340008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.346056Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.346056Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:10205baf495d350975042976247cf05237de0167f80deade11a10431f245229b","observation_id":"96519aa2-bc85-490c-8d0b-4478ffe33297","resolution":{"observed_at":"2026-07-31T09:23:52.346056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.351680Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.351680Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:cf1597cbeee6f90ca249caa8a0d81b5ad44b606aeaca3e105253f76cfbaa9c4a","observation_id":"f5937774-b249-4a7a-8578-d8b5dfc10793","resolution":{"observed_at":"2026-07-31T09:23:52.351680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.354372Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.354372Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:46209bc741d08fc28247b9dd224385d13e8b5aecab006d6af35330522cc41b87","observation_id":"dbf2d95d-1d34-49d3-a800-7f2cbb890486","resolution":{"observed_at":"2026-07-31T09:23:52.354372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.357194Z","title":"W.; Hallacy, C.; Ramesh, A.; Goh, G.; Agarwal, S.; Sastry, G.; Askell, A.; Mishkin, P.; Clark, J.; Krueger, G.; and Sutskever, I","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.357194Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:ea79808728681e9cc29440a466416aa7eab4f2a0aa25d5b25100864d33288da8","observation_id":"956be2b9-59b3-480b-8611-a99a35fa1d9f","resolution":{"observed_at":"2026-07-31T09:23:52.357194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.366327Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.366327Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:1f19cb3b34da7a8ce403c846d28596e8b00733ca3fc96abdebf3018621b5ebdb","observation_id":"f4478bc5-77a0-497d-9c20-6a3ee4f2b863","resolution":{"observed_at":"2026-07-31T09:23:52.366327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.371519Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.371519Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:6e04958e482042f10c70f49e9f4911228585e12c9561fefb915a740e5a4a349b","observation_id":"ebd80c23-26ea-4cf3-9313-bdd772105148","resolution":{"observed_at":"2026-07-31T09:23:52.371519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.374077Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.374077Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:0fffc803f89acee3445ba0c597f0e963d3a21ae377a7985d2be6a5a7a518953b","observation_id":"abc75127-7f1e-4d8c-ae92-ee788edd7b89","resolution":{"observed_at":"2026-07-31T09:23:52.374077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.376553Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.376553Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:5493cb9ad5343746fe6964c5af5f374c481cf97733e80e2ac9a223fe07260d23","observation_id":"43c79373-400b-4a74-9b4a-07dfc6bcd9c5","resolution":{"observed_at":"2026-07-31T09:23:52.376553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.381740Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.381740Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:e77311520e2169bb152d40a2a32bb2815ddd010f54efb546e7fa21edf5a7bcf0","observation_id":"f2399a24-82de-4832-883a-22ce6cfcbd3a","resolution":{"observed_at":"2026-07-31T09:23:52.381740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.386655Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.386655Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:049644f10c6e2ec7cab0748027f287a58ef6aef4c731e08c0854257c8ff22be5","observation_id":"9400e564-f9ef-483c-bb77-3e96a062ed61","resolution":{"observed_at":"2026-07-31T09:23:52.386655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.394158Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.394158Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:8f366e4914f23e0c4fe89dc21a4c41a39e5a0d5f7f0c379c08079ba6228b0f1f","observation_id":"96aade7f-2b7b-4e30-8532-39006d5cff41","resolution":{"observed_at":"2026-07-31T09:23:52.394158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.401816Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.401816Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:38dddcb0aaff4fe86723599b1b251eebcf9b0346c6a896da280fc535343a750d","observation_id":"4352852c-6dcb-445c-99f6-b69badb963bb","resolution":{"observed_at":"2026-07-31T09:23:52.401816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.409372Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.409372Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:17fcc617771e8e22e9dfb95a256ffb17ccc75d228e06e32010bf41efa9d90fb0","observation_id":"519b8494-94ec-45bf-9685-e3e44a8c5816","resolution":{"observed_at":"2026-07-31T09:23:52.409372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.412930Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.412930Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:b3ae2b4995bd4d7a49d2f6062d8194b955d700409d34d8416e4656cf1f4fadda","observation_id":"e67760ea-e28e-4f1c-a38c-695a67ba8da0","resolution":{"observed_at":"2026-07-31T09:23:52.412930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.10730","last_updated":"2026-05-11T15:34:56Z","snapshot_observed_at":"2026-07-06T23:22:37.355450Z","submitted_at":"2026-05-11T15:34:56Z","title":"Qwen-Image-2.0 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.10730","snapshot_observed_at":"2026-07-31T09:23:52.417153Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.417153Z"},"links":{"cited_paper":"/paper/2605.10730","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c19bb4e45d96d0904349bb62ea5e9d7a88848c75462f4eea3de4f7e44c35bdb7","observation_id":"e2764c7d-a22c-4174-87af-8ed6138d3c28","resolution":{"observed_at":"2026-07-31T09:23:52.417153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.428868Z","title":"2026 , howpublished =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.428868Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:ad7f8720811cc898eb46ca05116b69653a6cbd055cc8afdbc7801acf43d33e8d","observation_id":"56d4908e-7ca1-438f-868f-da57938fdc7c","resolution":{"observed_at":"2026-07-31T09:23:52.428868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-07-31T09:23:52.432497Z","title":"arXiv preprint arXiv:2307.15043 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.432497Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:2a7169c354f1ebeeefbe874c769adf3e4935ba66c8902c2746bf29afa32c1bc7","observation_id":"45058d56-6155-42ca-9f3f-002cc223dd47","resolution":{"observed_at":"2026-07-31T09:23:52.432497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.437124Z","title":"Proceedings of the 38th International Conference on Neural Information Processing Systems (NeurIPS'24) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.437124Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:0e587593c1ff44cea46d822d564f57bb344fe7cca340e0ec36a70c3ac9af0e05","observation_id":"9745f57c-b453-410b-bc09-0f0d7a7b64af","resolution":{"observed_at":"2026-07-31T09:23:52.437124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.441696Z","title":"2025 IEEE Symposium on Security and Privacy (S&P'25) , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.441696Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:ae132b7a8e05dfd68f9484450df33f277c7bee275d0c09bb0e2af3afef9b53d8","observation_id":"e1a566b3-effe-4284-b24d-d996b6ad03b4","resolution":{"observed_at":"2026-07-31T09:23:52.441696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07130","last_updated":"2024-11-23T03:07:31Z","snapshot_observed_at":"2026-07-06T17:00:20.655757Z","submitted_at":"2023-12-12T10:04:43Z","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07130","snapshot_observed_at":"2026-07-31T09:23:52.445668Z","title":"arXiv preprint arXiv:2312.07130 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.445668Z"},"links":{"cited_paper":"/paper/2312.07130","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3262e1e92cabbfbdcfd004d33609b19473e8c0107ce292c726875809b7c06992","observation_id":"8ad9c1c4-8664-475a-ac66-fda8934a1792","resolution":{"observed_at":"2026-07-31T09:23:52.445668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.449411Z","title":"2024 IEEE symposium on security and privacy (S&P'24) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.449411Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c54f14d3f057328c95c50fceb4f741c9eebdf6be01f7fb3340f7baf4e08b999a","observation_id":"ca8a2a74-3f32-40d1-a2d7-4238227ede7d","resolution":{"observed_at":"2026-07-31T09:23:52.449411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.453067Z","title":"Knowledge-Based Systems , volume=","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.453067Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:0d59b1a845a5bcf097595614306ad72c6c818477b40c1b800dec4dadadeb38a8","observation_id":"09ff4305-1809-4505-a764-1e2dc6cfc6f1","resolution":{"observed_at":"2026-07-31T09:23:52.453067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.457027Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.457027Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:37403d5b31af33c8ba3de0bbdc1a651b9695e7acdba3ce588e6055de028dd8cc","observation_id":"e9700e31-b891-4a6c-b70d-3e7bc64eaaa0","resolution":{"observed_at":"2026-07-31T09:23:52.457027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.461584Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'22) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.461584Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:4f374e72b5db87f438ddd51447e1215260777909d4e269612acfb1650b9b762d","observation_id":"209746ca-f33f-47c1-962a-340c1676b516","resolution":{"observed_at":"2026-07-31T09:23:52.461584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06125","last_updated":"2022-04-13T01:10:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-13T01:10:33Z","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.06125","snapshot_observed_at":"2026-07-31T09:23:52.465758Z","title":"arXiv preprint arXiv:2204.06125 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.465758Z"},"links":{"cited_paper":"/paper/2204.06125","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:9aaf4226f7fa8526d9bae45261e76c217b53738168d848cfc0c2bb9f376e016e","observation_id":"c32b76d9-33fd-43bc-891e-4470d8a8725b","resolution":{"observed_at":"2026-07-31T09:23:52.465758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.11487","last_updated":"2022-05-23T17:42:53Z","snapshot_observed_at":"2026-07-06T13:12:59.688989Z","submitted_at":"2022-05-23T17:42:53Z","title":"Photorealistic Text-to-Image Diffusion Models with Deep Language Understanding","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.11487","snapshot_observed_at":"2026-07-31T09:23:52.469975Z","title":"arXiv preprint arXiv:2205.11487 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.469975Z"},"links":{"cited_paper":"/paper/2205.11487","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:743b6035f429ace19ddf18d33a702b0d2731d904b6d5778bf274e3bfab2066c7","observation_id":"51bb5ece-cf6d-4077-ae22-a996def1b350","resolution":{"observed_at":"2026-07-31T09:23:52.469975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.473756Z","title":"Advances in Neural Information Processing Systems (NeurIPS'23) , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.473756Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:21c5aeb232f8baa3a9ec999d1a6c8abd82231bdf16eb926e6fc50ade69590e6b","observation_id":"16bb53dd-f52e-4777-8577-aae0260e8e01","resolution":{"observed_at":"2026-07-31T09:23:52.473756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15245","last_updated":"2024-11-22T03:31:56Z","snapshot_observed_at":"2026-07-06T19:55:42.238611Z","submitted_at":"2024-11-22T03:31:56Z","title":"AnyText2: Visual Text Generation and Editing With Customizable Attributes","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15245","snapshot_observed_at":"2026-07-31T09:23:52.477918Z","title":"arXiv preprint arXiv:2411.15245 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.477918Z"},"links":{"cited_paper":"/paper/2411.15245","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:02b1a0f228f06399bf836e21adc38dcaf2799f7888de0327bab3d3becc4854d2","observation_id":"6bd279e6-6444-4b2a-85b5-81d7aafdc2b9","resolution":{"observed_at":"2026-07-31T09:23:52.477918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18979","last_updated":"2026-05-23T07:45:54Z","snapshot_observed_at":"2026-08-07T14:20:18.070444Z","submitted_at":"2025-05-25T05:13:06Z","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18979","snapshot_observed_at":"2026-07-31T09:23:52.481380Z","title":"arXiv preprint arXiv:2505.18979 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.481380Z"},"links":{"cited_paper":"/paper/2505.18979","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:192c14d5eff1c9fb07e1a7298ba1a0a10641e1a5e0123b80754934ee22edb90a","observation_id":"7812e5d9-539d-45bd-8353-6ed3a23385ed","resolution":{"observed_at":"2026-07-31T09:23:52.481380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.17870","last_updated":"2023-05-23T04:07:00Z","snapshot_observed_at":"2026-08-07T22:11:51.398507Z","submitted_at":"2023-03-31T08:06:33Z","title":"GlyphDraw: Seamlessly Rendering Text with Intricate Spatial Structures in Text-to-Image Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.17870","snapshot_observed_at":"2026-07-31T09:23:52.484829Z","title":"arXiv preprint arXiv:2303.17870 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.484829Z"},"links":{"cited_paper":"/paper/2303.17870","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:01e79753b12d79c9ea1c677d4b476f701c60732f077e0df27cd2c1c3df9344cb","observation_id":"78485eab-73b9-4794-840a-b74f8cb90123","resolution":{"observed_at":"2026-07-31T09:23:52.484829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.489499Z","title":"arXiv preprint arXiv:2504.20376 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.489499Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c4af95006126188a14d798835f73b007152a89833a997f4989d2844f0a7da9a1","observation_id":"c0377ada-5677-462e-9597-e0af00be30fa","resolution":{"observed_at":"2026-07-31T09:23:52.489499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-08-09T06:08:06.497420Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-07-31T09:23:52.492793Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.492793Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:e397f60e8d963109c7612a307dd709c25460863ea809cd3712d25d6a0c8f0991","observation_id":"d1e860ea-16ee-43f7-bec3-4b0c4c30aa4a","resolution":{"observed_at":"2026-07-31T09:23:52.492793Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.495922Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'23) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.495922Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:0a9e79498524eba8fc9c9bea90174251b509b78b93528957a8179bd271ccd098","observation_id":"14d6aa7b-5315-457e-9a4d-e4dbf474f626","resolution":{"observed_at":"2026-07-31T09:23:52.495922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.499507Z","title":"Computer Vision -- ECCV 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.499507Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:6bc64f8c934b3db8075aecd6d39518b08e8a2e02e4451b3d2129928da5ab3a0f","observation_id":"953d3b1b-e820-4a79-abc3-0c821791cab4","resolution":{"observed_at":"2026-07-31T09:23:52.499507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.503135Z","title":"arXiv preprint arXiv:2503.17987 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.503135Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c692d38cb9ca6a1d259806f37dc46b046531a71abd8cb6e056ead8fc97fe5192","observation_id":"b2da54af-552a-46ef-a499-ed48f3fa4e44","resolution":{"observed_at":"2026-07-31T09:23:52.503135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-07-31T09:23:52.506268Z","title":"arXiv preprint arXiv:2310.08419 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.506268Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:51c5a71ed42a2ea2e04bcc3d3b52620376286ef4d20add2166efe80f9f3cea8d","observation_id":"b5bfedd4-da29-41ae-9b32-d7cf3b2306d4","resolution":{"observed_at":"2026-07-31T09:23:52.506268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-07-31T09:23:52.509403Z","title":"arXiv preprint arXiv:2312.02119 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.509403Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:2c136db3d8574df2742715d26d7ee7b086c9140648fe5b19eee1de00aee619d0","observation_id":"dfef2595-b7b2-444e-9fcd-9f672a9e48f9","resolution":{"observed_at":"2026-07-31T09:23:52.509403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-07-06T19:29:14.335016Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-07-31T09:23:52.512490Z","title":"arXiv preprint arXiv:2410.05295 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.512490Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:b969fd7aa4237dc51b3d7bae0b9fcbd0a3b0fb9273e941ef67f57823cc1daaa5","observation_id":"f68d1564-7e93-463c-a149-57ccdd4cd73f","resolution":{"observed_at":"2026-07-31T09:23:52.512490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.515521Z","title":"Proceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency , pages =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.515521Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c9c8cda2734e328bf623f4d94ea2fc3ce9ac55eb91f7efd7a615cbe334ac9a40","observation_id":"621ac1fe-2323-40ac-b96e-57388b455268","resolution":{"observed_at":"2026-07-31T09:23:52.515521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-07-31T09:23:52.519313Z","title":"arXiv preprint arXiv:2309.10253 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.519313Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a2aad775ac81036144c21934fa84f2b68dcbf14d8cbc8b4c84da151c66b53c83","observation_id":"a0659be3-8d15-460a-9b39-e79d3ae145cc","resolution":{"observed_at":"2026-07-31T09:23:52.519313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.522359Z","title":"International Conference on Learning Representations (ICLR'24) , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.522359Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:bb88921ac3da34a05908848a045a33460f619fa824fe3ccd241a9944af4dca66","observation_id":"b5fe98e0-0159-48b3-b712-9bbead0b5b89","resolution":{"observed_at":"2026-07-31T09:23:52.522359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.526083Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.526083Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:08fd327361c47ea8c16fd7dd6e034da03359c58ba19705810ebd5c83a352285b","observation_id":"33245419-4a00-4707-8c8b-84a1de732e52","resolution":{"observed_at":"2026-07-31T09:23:52.526083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.530223Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.530223Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3e94a46a75cce5ac766c0e595e4e87b2b49a6eab62892c164e987bcd3d8518d7","observation_id":"124913a1-5ca9-4a95-9832-64132f74e958","resolution":{"observed_at":"2026-07-31T09:23:52.530223Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.534087Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.534087Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:e15899d302f022d2bd237b797739c07c02d601004cea5afbd59c7beec4b89ce4","observation_id":"b2986a47-134c-4daf-8390-27e3d71492a0","resolution":{"observed_at":"2026-07-31T09:23:52.534087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.537731Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.537731Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:36d43fe93652a0031f0192fa39ae0d03bc785c43520164c153b2a1d3632427d3","observation_id":"640aaff7-d3ac-4a81-9555-a0cf21c164ec","resolution":{"observed_at":"2026-07-31T09:23:52.537731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.541288Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.541288Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:e9701da39cc200dade1410684c72f0e550a37a134acf2f345d909e51382bdc37","observation_id":"7f614e66-756d-49a8-9411-e67157124dc1","resolution":{"observed_at":"2026-07-31T09:23:52.541288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02527","last_updated":"2025-05-05T10:08:31Z","snapshot_observed_at":"2026-08-07T15:56:22.631851Z","submitted_at":"2025-05-05T10:08:31Z","title":"Text to Image Generation and Editing: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02527","snapshot_observed_at":"2026-07-31T09:23:52.544901Z","title":"arXiv preprint arXiv:2505.02527 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.544901Z"},"links":{"cited_paper":"/paper/2505.02527","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:4529918de4c4bc725ea6319e99a605cc882ddcbea1f7e8801c9d3b507022fb21","observation_id":"c50f1462-d9a1-4287-8136-762a9e967822","resolution":{"observed_at":"2026-07-31T09:23:52.544901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.548416Z","title":"Proceedings of the 30th International Conference on Intelligent User Interfaces (IUI'25) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.548416Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:944cf52d7158e5525d3ff192a9022481caee61b07355b940c098c07eb2da1cc9","observation_id":"87c33e6a-8d1a-45c9-96a9-54d96d5c30c3","resolution":{"observed_at":"2026-07-31T09:23:52.548416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.552052Z","title":"Proceedings of the 2022 CHI conference on human factors in computing systems , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.552052Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:6441ffe2b49cd3dc8b9843fa603d83130c6b210e373bc2ec71e8fa7696450977","observation_id":"6356859c-070e-46e2-8e64-cd90c90f3539","resolution":{"observed_at":"2026-07-31T09:23:52.552052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.555613Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (ACL'25) (Volume 1: Long Papers) , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.555613Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:a310c4a747ab7efd8c0e4e4b5289fc82291cb3858e9a119e0590f4e2c262aea7","observation_id":"1a13540b-7deb-4b52-86dc-95b34b72dbaa","resolution":{"observed_at":"2026-07-31T09:23:52.555613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.559535Z","title":"Proceedings of the 42nd International Conference on Machine Learning (ICML'25) , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.559535Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:3d6d91e8e33db9466c5ef35dc6cb68b88bfa0a2bb80c04fbff2f0185af926e4c","observation_id":"370cd00e-4b3f-48a5-b9b5-5e7247385edd","resolution":{"observed_at":"2026-07-31T09:23:52.559535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.563320Z","title":"Proceedings of the 38th International Conference on Machine Learning (ICML'21) , pages =","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.563320Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:1ca7df66f11d7fc68fc6b7ad1ca258177084b5fc6734fcd96a3aef32a798a133","observation_id":"f0f4cffe-a288-4d4c-9aa7-972689cba8a8","resolution":{"observed_at":"2026-07-31T09:23:52.563320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.567297Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.567297Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c858ab72441af78039b07116ee0d5c304b4664b603d800a5746478746729bb15","observation_id":"bcffcbf5-397b-458d-a2e1-7338d0f9696d","resolution":{"observed_at":"2026-07-31T09:23:52.567297Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.570901Z","title":"2025 , doi =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.570901Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:c62effa619f05528806b80434adc624b37df9d3769b2aeae3014f63fd12eee3f","observation_id":"202c6a93-7f9e-4f3b-907e-f5a95b4b3f0d","resolution":{"observed_at":"2026-07-31T09:23:52.570901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.574488Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.574488Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:82d06c904cdbbd353bbe3a836f743e74ff9feaffc8b9e730db7f0d32a8ded0ad","observation_id":"13b79b83-824e-4ce6-950c-5cba9122b9f0","resolution":{"observed_at":"2026-07-31T09:23:52.574488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.578170Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.578170Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:85c07fa9458b04b9d466dcf3b155bd9db969c257ee7fdc744bea9adc642b1996","observation_id":"ccbf26b3-887b-43a4-b90f-82fdc9cd57d2","resolution":{"observed_at":"2026-07-31T09:23:52.578170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.581531Z","title":"Applied Mathematics and Computation , volume=","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.581531Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:00804a5b295b2a9209d4065a036bba64aa0334d19bbf62f178a9af6a799c419b","observation_id":"0e60a442-00f2-4a4d-ad51-fac42d8d425c","resolution":{"observed_at":"2026-07-31T09:23:52.581531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.584952Z","title":"Proceedings of the Ninth International Conference on Document Analysis and Recognition (ICDAR'07) , volume =","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.584952Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:b8ffe5a892af2208d52b9d42c31ffa3f9a84d25b0e5d16378d8825f7b689c428","observation_id":"aedf8940-9da7-4c37-987a-187ebc416f46","resolution":{"observed_at":"2026-07-31T09:23:52.584952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.588720Z","title":"arXiv preprint arXiv:2606.19348 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.588720Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:2beb2cd6a6cecf7192fc6163aa4b10a2d39042cda5528608ade26f767fe98254","observation_id":"755d5c12-522e-486c-b364-a1b4b4f3052f","resolution":{"observed_at":"2026-07-31T09:23:52.588720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.592018Z","title":"35th USENIX Security Symposium (USENIX Security 26) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.592018Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:d260b94ae1bcb997531860bd7258b0dfece78c6104b856d8642d6a03f609d622","observation_id":"d701c809-0911-43e6-b219-2d808d7080bc","resolution":{"observed_at":"2026-07-31T09:23:52.592018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.595864Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.595864Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:41af21db855f435682b36a83b08c94af76252074240305ac366d91acecee754c","observation_id":"ed434098-05cc-474a-a556-0fd37779f3fc","resolution":{"observed_at":"2026-07-31T09:23:52.595864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.599475Z","title":"arXiv preprint arXiv:2411.11683 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.599475Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:87a97395b08fb6de49692bdc757a03e2df5b659984eb837f6604e5375a4f9c84","observation_id":"645ee5b6-15dc-400a-a28b-467228f04adf","resolution":{"observed_at":"2026-07-31T09:23:52.599475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T09:23:52.602450Z","title":"Proceedings of the Thirteenth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.602450Z"},"links":{"citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:37625aa32f4f670797e712a7f8c36c131a8d6879985712e1bcc86e2bc36eb1e3","observation_id":"13e8f177-ad24-4d22-9ff7-11500e01abc2","resolution":{"observed_at":"2026-07-31T09:23:52.602450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models"},"reference_resolution":{"displayed":77,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":75,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":77},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 77 of 77 outbound references and 0 inbound Pith citation observations for arXiv:2607.24897."}