{"as_of":"2026-08-16T06:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bd2ae2d4db5e79780b6e138c80b1d93801c8953fe3eae43814ac22279037aa79","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T04:34:05.794882Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.08641/citation-record","integrity":"/paper/2608.08641/integrity","json":"/paper/2608.08641/citation-record.json","paper":"/paper/2608.08641"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.582086Z","title":null,"venue":null,"work_id":"e9d3e351-ebec-449c-83b2-c1e7d298c628","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.626012Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:a6f1b7e55327812430df8ef31aa376c09f533f0f4d9c6d8092fdf3486384c238","observation_id":"7d700aec-c21a-4259-af6d-544eb5f13106","resolution":{"observed_at":"2026-08-14T04:34:06.585678Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:05.632019Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.632019Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:3742c9627dd9ccef2aa40c63aa1bb0732a012c5f9d019d7758d36febeffff763","observation_id":"87b3bcc2-179d-449e-b1ce-c2cb7b5a3b52","resolution":{"observed_at":"2026-08-14T04:34:05.632019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.564046Z","title":null,"venue":null,"work_id":"22103732-290c-4b60-aa86-296766aec90f","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.636147Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:0bfa029434e0634de208c48d05f39253bc981e8eaab47e8feddc8342fdab5821","observation_id":"89919107-05a7-4ca4-b08d-b6e3a4034916","resolution":{"observed_at":"2026-08-14T04:34:06.567518Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11445","last_updated":"2024-11-05T08:46:01Z","snapshot_observed_at":"2026-08-15T04:53:52.603385Z","submitted_at":"2024-09-17T03:39:45Z","title":"Jailbreaking Large Language Models with Symbolic Mathematics","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11445","snapshot_observed_at":"2026-08-14T04:34:05.640222Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.640222Z"},"links":{"cited_paper":"/paper/2409.11445","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:6585f0b2c488f48ea20387a4006736b7952a77c5cdeac999dc749da1af909e02","observation_id":"bb2030ca-1727-440d-93cc-ad5b633f10a0","resolution":{"observed_at":"2026-08-14T04:34:05.640222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06705","last_updated":"2019-02-20T17:38:32Z","snapshot_observed_at":"2026-08-14T17:14:47.799958Z","submitted_at":"2019-02-18T18:18:27Z","title":"On Evaluating Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06705","snapshot_observed_at":"2026-08-14T04:34:05.644759Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.644759Z"},"links":{"cited_paper":"/paper/1902.06705","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:0717831dd8bdbdb45a8e072b1154db5a2bc41e86436b14da2f7818776ed9d4aa","observation_id":"7e27b860-2a1f-4d07-92db-820697c9a100","resolution":{"observed_at":"2026-08-14T04:34:05.644759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.554154Z","title":"J.; Tram\\` e r, F.; Hassani, H.; and Wong, E","venue":null,"work_id":"74e38daf-32bb-4950-9430-07dbe2746463","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.649880Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:17f2e94cf0a4b92a684c5a4809eee960721f13491714a6b06c1e77de776e76a7","observation_id":"71e7d0ff-6a65-46da-8e1e-bbd9a111c347","resolution":{"observed_at":"2026-08-14T04:34:06.557880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.00420","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.242371Z","title":null,"venue":null,"work_id":"8e683be2-0210-410d-b13a-d6c99bbf2552","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.654163Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:341b3776c1e7b46740ccd7281ea03ff65b6f5a56c86f068f09850bab198011d3","observation_id":"65c1049b-66f8-4308-b3e5-5fc7bd2152c7","resolution":{"observed_at":"2026-08-14T04:34:06.247643Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.03594","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.182782Z","title":null,"venue":null,"work_id":"c07726ba-366a-4890-b380-dfee81213ea7","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.657924Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:e4a7cf52dc96e161a34410b1b24467e701a402f21463e33ab994f4ee56d3714c","observation_id":"9f6c117f-c6ea-44c9-b29c-3d2e71319e57","resolution":{"observed_at":"2026-08-14T04:34:06.189939Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10414","last_updated":"2024-11-15T18:34:07Z","snapshot_observed_at":"2026-08-12T19:36:09.487518Z","submitted_at":"2024-11-15T18:34:07Z","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.10414","snapshot_observed_at":"2026-08-14T04:34:05.661690Z","title":"D.; Upasani, K.; and Pasupuleti, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.661690Z"},"links":{"cited_paper":"/paper/2411.10414","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:090661bd7de1adda1617f420e2f4065f1f0505e3a8d35b55b45bc7bf367c1e10","observation_id":"b1c98a0a-cdef-483a-947a-b337ca954661","resolution":{"observed_at":"2026-08-14T04:34:05.661690Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.543177Z","title":null,"venue":null,"work_id":"5e58e7fb-6455-4435-9d02-0ae95550c141","year":2020},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.666033Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:56836edcf7d14808c4ff096c57a2c07d0abb8fa246f5ec19c6a166e7e828f181","observation_id":"8df09ed2-fecc-439d-8447-65d49fa82a43","resolution":{"observed_at":"2026-08-14T04:34:06.546923Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.532228Z","title":null,"venue":null,"work_id":"161bde03-f6a7-4dc5-a13f-f07b1c116d1d","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.669626Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:ac1ab81c12bb5761248f610d53302fdb3c903bb9968fe7801838149f7caa53bd","observation_id":"e1b539eb-bb2f-48e4-8664-7cc801b90f9b","resolution":{"observed_at":"2026-08-14T04:34:06.536326Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.520114Z","title":"S.; Chakraborty, S.; Singh, V.; Guan, T.; Wang, M.; Beirami, A.; Huang, F.; Velasquez, A.; Manocha, D.; and Bedi, A","venue":null,"work_id":"671da32a-43bc-456d-bc88-54277f0fc655","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.673201Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:8d0ac99b129891d6811311f1ed4463f316fc49021949f9ec7cd289c4dcc0cf30","observation_id":"9605bee4-01e1-44f9-af44-c48d671129c1","resolution":{"observed_at":"2026-08-14T04:34:06.524307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.508040Z","title":null,"venue":null,"work_id":"b8941ede-6300-4b8a-8bf8-c3519be52dd0","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.676882Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:546c6bb6ac3323f77d24fe5ba78e8c5c37d96aa7fc86abe9749d087486238edd","observation_id":"ef76b099-cfce-4ce9-b9e2-902d34fc73be","resolution":{"observed_at":"2026-08-14T04:34:06.511925Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.496848Z","title":"T.; and Zhang, Y","venue":null,"work_id":"fdfa9f99-0bbe-4599-87d3-d55b4c7d72d0","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.679825Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:1ea308e591667a898ab09635576a97d3701acf84a4903a024108054d72ec6e65","observation_id":"9d7d7a36-f810-4fe5-980b-2daaf6154e63","resolution":{"observed_at":"2026-08-14T04:34:06.500508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.485570Z","title":null,"venue":null,"work_id":"7d63185a-e10a-4065-9d39-98b3c8acd0ea","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.682858Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:6fb7b1ebc3f2329122538b2ce32cafd59e3195fb63fbf99adad4f2fda617063f","observation_id":"112b9ca7-a605-4853-bcf5-1d512909b5da","resolution":{"observed_at":"2026-08-14T04:34:06.489433Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.474348Z","title":null,"venue":null,"work_id":"e4c02e1b-e697-4f9c-8a9d-4cd2daefaf06","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.686034Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:4f98c3cd6e27914e1b5c7e05eb46ef8ab2d639f8f6421cfe2a6ccbdaa3d9623b","observation_id":"e796b481-5d51-4aed-a3f9-1f1b7f71ce12","resolution":{"observed_at":"2026-08-14T04:34:06.478577Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:05.689269Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.689269Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:85dfbe4d0af0577748fd8c0995b0a509689f79690b821f3f3479444158422e2a","observation_id":"68f86154-4358-4f3a-8e8b-d04858100138","resolution":{"observed_at":"2026-08-14T04:34:05.689269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.462854Z","title":null,"venue":null,"work_id":"c7e36dd9-7cc3-4247-9052-cb7f645f54fc","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.693394Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:a3ea6e4e64bbcbd412c0e0b4ba9decbbd1c01a165e675540024189c826056842","observation_id":"e190abb4-6fd9-4997-a922-d006eee36a5d","resolution":{"observed_at":"2026-08-14T04:34:06.466751Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.451556Z","title":"X.; and Wen, J.-R","venue":null,"work_id":"14cc95c9-aecf-410c-a55e-14720955bcc1","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.697138Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:21acd65569479733edb9d832e44dc874ad969f5ac2a5bccefbb2af00617c7e86","observation_id":"28b5954b-e625-4cc6-9c40-868a55ec5fb0","resolution":{"observed_at":"2026-08-14T04:34:06.455377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.440904Z","title":null,"venue":null,"work_id":"4069c61d-54f0-435e-85e6-f9024335230b","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.700819Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:de1f34305d0df48c9983e6ba19e154f3afe0c1c6ab05a998e567239cb26238bd","observation_id":"2ad1bfe1-0fbc-4a19-a3d4-6b748cc9801c","resolution":{"observed_at":"2026-08-14T04:34:06.444561Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.428172Z","title":null,"venue":null,"work_id":"8cbb1d46-251c-4ffa-8600-b9b90c427c05","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.704739Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:7157b38f43e7f59c861aa3973e52845f553b888923493efb6695dbc5fca2506a","observation_id":"d0a49cd5-28b7-4c1a-8dd3-f827e2aaea84","resolution":{"observed_at":"2026-08-14T04:34:06.432655Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.416185Z","title":null,"venue":null,"work_id":"d7805169-d073-4ddf-bd21-7e29006483c6","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.708405Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:55ca7b9453b77196d8c18519316625028851fa6292c2871b61e5ff25530dc124","observation_id":"5406cb80-7385-4281-b593-fe17fda5472a","resolution":{"observed_at":"2026-08-14T04:34:06.420453Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-15T07:47:42.680001Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-14T04:34:05.712159Z","title":"V.; Hayes, J.; Ilie, M.; Pluto, J.; Song, S.; Chaudhari, H.; Shumailov, I.; Thakurta, A.; Xiao, K","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.712159Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:6f29cfc40acd7f9350d6a4646e82ecd2fba10ab6b078b5940c9295ae5f891d64","observation_id":"0e09b350-d1a2-40c0-9321-479612c7e50a","resolution":{"observed_at":"2026-08-14T04:34:05.712159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.01703","last_updated":"2025-01-31T16:47:16Z","snapshot_observed_at":"2026-08-12T22:08:43.512027Z","submitted_at":"2024-11-03T22:19:20Z","title":"UniGuard: Towards Universal Safety Guardrails for Jailbreak Attacks on Multimodal Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.01703","snapshot_observed_at":"2026-08-14T04:34:05.716475Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.716475Z"},"links":{"cited_paper":"/paper/2411.01703","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:f6648d7ee253a0676753c3cf0b8c4ca872663d5af26640cc1d7c7beb4f2dcf4a","observation_id":"c9ebf16d-3d7d-4ca7-a22a-07226d0345bc","resolution":{"observed_at":"2026-08-14T04:34:05.716475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.404985Z","title":null,"venue":null,"work_id":"da9b4a2e-1f46-4c58-a648-cdf76b9bfa39","year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.720892Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:3e999ebe424b9a19880e100365b3fbdbc64051a85f01275cc31addcaa6f1c71b","observation_id":"834c8dd1-7582-4850-b1b4-983b9371f611","resolution":{"observed_at":"2026-08-14T04:34:06.408746Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-08-13T10:47:14.572503Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-14T04:34:05.725212Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.725212Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:070bc8c4688c485a676ff0305c6bf9972ae8d582beb08f309102cd29c51baa71","observation_id":"8b0577c6-866b-41e9-aab1-afc0a4645554","resolution":{"observed_at":"2026-08-14T04:34:05.725212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.392791Z","title":null,"venue":null,"work_id":"b7c95147-9a11-4b11-88de-6b2f3bf52a8a","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.730027Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:5c832c1775a07afd3be442d1441d9ef9aba854b11b5b82bd14a8af4bc3639110","observation_id":"90d75936-fa26-458a-aa62-008ee44ee530","resolution":{"observed_at":"2026-08-14T04:34:06.397119Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.380619Z","title":null,"venue":null,"work_id":"5011e330-3a6b-437b-a1d4-141d8ce3b896","year":2020},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.733831Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:ec64ea129d80ce230f0875ba294a888ee1c46a723c3b00dc0d4af49af77fb358","observation_id":"3ffbfde2-ff9b-4cbc-a8c2-f5f4f020f91a","resolution":{"observed_at":"2026-08-14T04:34:06.384451Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.369050Z","title":null,"venue":null,"work_id":"6ee4a944-d789-45d9-901d-182a64fb5176","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.737831Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:a5bca0bcfe0a51dcd96e4d74dd924fb3818945a68524f37d3c3f4d087740cf88","observation_id":"be23aff3-f7d3-4569-bbc5-f367cb94a1c3","resolution":{"observed_at":"2026-08-14T04:34:06.372680Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.358157Z","title":null,"venue":null,"work_id":"5101711a-91a5-4838-b464-34b3273ff7c2","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.741942Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:07aaaef5d051ebda0ff38167a873935593e1f557a0f4ed917a1309730c79d15d","observation_id":"63b1e6da-8d8c-4dd9-9e76-7e7a8ce48084","resolution":{"observed_at":"2026-08-14T04:34:06.361576Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16446","last_updated":"2025-05-22T09:34:47Z","snapshot_observed_at":"2026-08-13T20:07:08.640609Z","submitted_at":"2025-05-22T09:34:47Z","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16446","snapshot_observed_at":"2026-08-14T04:34:05.746174Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.746174Z"},"links":{"cited_paper":"/paper/2505.16446","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:b2c4d1a8117e90cb73b281b492b2f3d82c2052cd9e05a648b88a9fddeaa9009f","observation_id":"9b59172d-a4ef-4023-bb5b-1d6bbac8076a","resolution":{"observed_at":"2026-08-14T04:34:05.746174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.17372","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.013256Z","title":null,"venue":null,"work_id":"0c13ba31-1466-4ec6-ba8b-1928fda063f1","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.750128Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:68a6f89898462dc300b91771f279d2dd3ad48f869e6a9542f59a5cd6cda893ab","observation_id":"ceea122d-b0e2-4f39-bad4-815874465842","resolution":{"observed_at":"2026-08-14T04:34:06.020143Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.346012Z","title":null,"venue":null,"work_id":"a46094c9-9d92-45f5-b10d-7debdf87acf4","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.754195Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:077d7aa1a6849682943857f66fe8e6bcf9709a67853d27d415f9aec4a4d30ce1","observation_id":"7c5cb7c9-ac5b-4f9f-a570-3bdcbb53c0d8","resolution":{"observed_at":"2026-08-14T04:34:06.350111Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06302","last_updated":"2024-07-03T00:51:21Z","snapshot_observed_at":"2026-08-15T04:13:31.869882Z","submitted_at":"2024-06-10T14:18:56Z","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06302","snapshot_observed_at":"2026-08-14T04:34:05.759434Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.759434Z"},"links":{"cited_paper":"/paper/2406.06302","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:10e8b75f0beca9528130e61d1bfc06c389c24817ac24708ce00ff29db4de2fac","observation_id":"01b6f241-1ae7-4868-9adb-68bad58a3ada","resolution":{"observed_at":"2026-08-14T04:34:05.759434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.26574","last_updated":"2026-08-09T11:04:41Z","snapshot_observed_at":"2026-08-15T23:30:29.523512Z","submitted_at":"2026-07-29T07:53:35Z","title":"Attack Ensembles Expose a Safety-Utility Trade-off in Black-Box Guard Defenses Against Encoded VLM Jailbreaks","version":2},"cited_work":{"arxiv_id":"2607.26574","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.26574","snapshot_observed_at":"2026-08-14T04:34:05.939955Z","title":"Attack Ensembles Expose a Safety-Utility Trade-off in Black-Box Guard Defenses Against Encoded VLM Jailbreaks","venue":"cs.CR","work_id":"6fbad14d-a989-422b-a572-4080aeb44d0a","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.763288Z"},"links":{"cited_paper":"/paper/2607.26574","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:7fd355958ed5dbcb1a91bb03110040a8e0552c518788c2cbadb9d85d7caa0810","observation_id":"fc758ee4-53a5-4692-991b-616c7246b4af","resolution":{"observed_at":"2026-08-14T04:34:05.945115Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03441","last_updated":"2026-05-05T07:25:33Z","snapshot_observed_at":"2026-08-10T21:29:00.284608Z","submitted_at":"2026-05-05T07:25:33Z","title":"Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03441","snapshot_observed_at":"2026-08-14T04:34:05.766813Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.766813Z"},"links":{"cited_paper":"/paper/2605.03441","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:3417c9d1a95ff6cfeeadea19d54d7edbcc3677b15de107b2d6d249b55c6e5e81","observation_id":"c52a508a-c01e-4915-97ec-43ac3e382613","resolution":{"observed_at":"2026-08-14T04:34:05.766813Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.333123Z","title":null,"venue":null,"work_id":"d444f128-d5d8-4c4f-9713-5d92530a713d","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.770562Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:59de660e8607948f3745b908c2ef329f2d63468137752f86e9e56b8566b9a8dc","observation_id":"b3ca0353-594f-4e80-aad7-d9fe34ba6d2b","resolution":{"observed_at":"2026-08-14T04:34:06.337775Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2506.09353","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:05.911152Z","title":null,"venue":null,"work_id":"69ed94c9-5a19-4478-bacb-ac34394d8eee","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.774038Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:e165d40b012592d11b093c4953837aaa56e4561df189ce2d1fe05d50a31433f1","observation_id":"7020e03c-2d0c-481d-b4a1-daa23f58ca5a","resolution":{"observed_at":"2026-08-14T04:34:05.917621Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.318143Z","title":null,"venue":null,"work_id":"b5fef55e-677d-4ca4-9d9c-9bfaf6393c22","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.778495Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:7271527842dfa6907a7cab001cd8004469c989080fb91dd1a7b0767214a33cad","observation_id":"b1b9a787-c100-4644-9582-962c6e82c417","resolution":{"observed_at":"2026-08-14T04:34:06.323577Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.305093Z","title":null,"venue":null,"work_id":"88c7b6a6-db48-4fc9-a5a7-201042035662","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.782374Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:7358c1b299e79f13f6fe8bede751c293122fccf94aac8853c4da622d5ea32cd2","observation_id":"7146c729-75f1-4ca5-92e0-3b41ffea95ad","resolution":{"observed_at":"2026-08-14T04:34:06.309383Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.291761Z","title":"S.; and Guo, Q","venue":null,"work_id":"569c85ee-a4e9-4d4a-b9f8-33aa5803e3c6","year":2025},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.786184Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:d6027e15d916bec74dfbb16665f7de6fd565b254fe52f4d523a2a5817bb6ddfe","observation_id":"82ecfd6b-b055-4c76-9fbb-56f046b79fea","resolution":{"observed_at":"2026-08-14T04:34:06.296388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02207","last_updated":"2024-06-17T22:26:32Z","snapshot_observed_at":"2026-08-13T04:27:42.124177Z","submitted_at":"2024-02-03T16:43:42Z","title":"Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02207","snapshot_observed_at":"2026-08-14T04:34:05.790457Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.790457Z"},"links":{"cited_paper":"/paper/2402.02207","citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:aa0e27d0a55c2cce7b674436d9f8d0444fb0962340a552694e56ecc9ae96ba3d","observation_id":"29c3bfb9-7b12-4ec8-9597-dd868610c2fe","resolution":{"observed_at":"2026-08-14T04:34:05.790457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T04:34:06.278767Z","title":null,"venue":null,"work_id":"70323a21-b96e-4cc5-9989-1f21b73359e9","year":2026},"citing_paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-14T04:34:05.794882Z"},"links":{"citing_paper":"/paper/2608.08641"},"observation_digest":"sha256:56ebc552e6babd82008fe3a6df475b37304f8fecf7a90d3bed9f89bc3247795e","observation_id":"ccf65291-32e2-4399-9d22-a18e180a6a7a","resolution":{"observed_at":"2026-08-14T04:34:06.282864Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.08641","last_updated":"2026-08-09T11:19:30Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T04:56:51.892005Z","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":5,"verified_fuzzy":5},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2608.08641."}