{"as_of":"2026-08-09T12:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:94a88199d21322ba0bfe3cb660cfb02ef827d2ae051c458ee84f225b6c8d2449","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":51,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T10:29:49.926458Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":4,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2409.10102","last_updated":"2026-05-16T07:15:07Z","snapshot_observed_at":"2026-08-04T19:12:49.508911Z","submitted_at":"2024-09-16T09:06:44Z","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-23T21:08:11.787013Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2409.10102"},"observation_digest":"sha256:765c2e359d13d14acfc6f65e9a4798d7c76ea3bb0adee30015bc3b5d57033157","observation_id":"91c34bd6-2743-4ffa-862f-9cf9a5233a5f","resolution":{"observed_at":"2026-05-23T21:08:25.872258Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2412.14113","last_updated":"2026-05-14T17:15:02Z","snapshot_observed_at":"2026-07-06T20:09:28.763595Z","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval","version":4},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-23T06:39:36.039613Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2412.14113"},"observation_digest":"sha256:d7597a8bcf438439375e74aaa8077529dddf60d46dcb7b8123b74e355e0530de","observation_id":"ca842eed-6b4d-40c3-b8d7-7fa13c1a3e7f","resolution":{"observed_at":"2026-05-23T06:42:39.713826Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-09T10:29:49.926458Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.02960","last_updated":"2025-02-05T07:54:07Z","snapshot_observed_at":"2026-08-09T10:25:22.459556Z","submitted_at":"2025-02-05T07:54:07Z","title":"Large Language Model Adversarial Landscape Through the Lens of Attack Objectives","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T10:29:49.926458Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2502.02960"},"observation_digest":"sha256:2c8271d6c07fbae41136debc907b36be86035818591a3177fc47442f66ba3ea8","observation_id":"6a777596-80af-48c8-b0b4-4dfd32229065","resolution":{"observed_at":"2026-08-09T10:29:49.926458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-09T00:50:00.462314Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T05:58:57.244749Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":124,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.462314Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:f87f4d1b38965ff1c6ad977edef599b8d38245921dd9c44abe538eef19e8ce5e","observation_id":"50cbaac6-80e9-4565-9536-9910388087cd","resolution":{"observed_at":"2026-08-09T00:50:00.462314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-08T19:15:25.682451Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-08T19:10:42.419238Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"reference_index":209,"source":"pdf_text","source_observed_at":"2026-08-08T19:15:25.682451Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2502.06872"},"observation_digest":"sha256:c52670639a57f943864d0d6bef0db488c41319802a06e226c198322d07e53e20","observation_id":"77e3b112-7ac1-4b2e-8873-37430cddf51a","resolution":{"observed_at":"2026-08-08T19:15:25.682451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T15:41:04.455697Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models.arXiv preprint arXiv:2406.00083, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.14215","last_updated":"2026-07-08T13:57:53Z","snapshot_observed_at":"2026-08-08T23:15:53.820935Z","submitted_at":"2025-05-20T11:21:40Z","title":"Safety Degradation in AI Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:04.455697Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.14215"},"observation_digest":"sha256:cbef8a79b4a5a786c58fd98f02aea1d0f21abaefb66524287bd4196707bcdc75","observation_id":"4491e144-20db-40d9-9160-c339949e7d54","resolution":{"observed_at":"2026-08-07T15:41:04.455697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T15:15:48.764754Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.15753","last_updated":"2025-05-21T16:58:14Z","snapshot_observed_at":"2026-08-07T15:09:59.174634Z","submitted_at":"2025-05-21T16:58:14Z","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:15:48.764754Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.15753"},"observation_digest":"sha256:32350501d80849d3b7e09791a9cb36376974f97fc2b61d247a5859219edf14b7","observation_id":"d7afac52-f6a5-4c8d-ab70-f10d27949b6a","resolution":{"observed_at":"2026-08-07T15:15:48.764754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T15:14:49.451675Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16014","last_updated":"2026-06-02T10:15:17Z","snapshot_observed_at":"2026-08-09T00:27:14.897803Z","submitted_at":"2025-05-21T20:57:16Z","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","version":5},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T15:14:49.451675Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.16014"},"observation_digest":"sha256:63c28a1a9f74b8645cf407b85d36edf68fcb01ad4578be15e4b00d33589abc61","observation_id":"54b84ce8-fc91-443f-846e-7b6b4fadf8e4","resolution":{"observed_at":"2026-08-07T15:14:49.451675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T14:32:59.243279Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18543","last_updated":"2025-05-24T06:17:59Z","snapshot_observed_at":"2026-08-08T00:41:28.430373Z","submitted_at":"2025-05-24T06:17:59Z","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T14:32:59.243279Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.18543"},"observation_digest":"sha256:a9cc264653e07117667b34c5e1029a6bcb516ecd9868db0d897c2d5cbf05e72a","observation_id":"328b8b7c-44b9-4a1d-b583-a54246d7c18b","resolution":{"observed_at":"2026-08-07T14:32:59.243279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T14:36:35.283940Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.283940Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:4e7feb51af58a0d46f242cfa59e7018bc3fda97c3bfb46e30df8bda6d111ca5e","observation_id":"4265ee53-a561-4244-b577-fe49af649332","resolution":{"observed_at":"2026-08-07T14:36:35.283940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T13:21:40.107539Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-09T10:35:51.717096Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.107539Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:dddadcbff9660c48d814283a8b5ffaded968dd57cb0dc3d168080362fa91f333","observation_id":"bc749ad0-d4f3-4c11-bf0d-2d2ea5713ce2","resolution":{"observed_at":"2026-08-07T13:21:40.107539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T12:11:28.794640Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.794640Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:578715c18534257b51febbbacd8dac21c6e176b403c046113ec0ff33e1dee3c7","observation_id":"ffc3afd1-f751-4182-93cf-2015b845a542","resolution":{"observed_at":"2026-08-07T12:11:28.794640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2506.03535","last_updated":"2026-04-20T04:02:41Z","snapshot_observed_at":"2026-07-06T21:36:15.867826Z","submitted_at":"2025-06-04T03:31:00Z","title":"Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-19T11:52:44.990234Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2506.03535"},"observation_digest":"sha256:5272f43dca697deb73d18708578cca8e2dcdffb06328715f48eeba8ced682634","observation_id":"30727c9b-87cd-4495-9751-505a1b88a8f0","resolution":{"observed_at":"2026-05-19T11:53:03.501566Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T04:15:38.811538Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11415","last_updated":"2025-06-13T02:28:46Z","snapshot_observed_at":"2026-08-07T23:47:33.467619Z","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T04:15:38.811538Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2506.11415"},"observation_digest":"sha256:1ca794aa521d53c9f687295e6f3d5a4bd282d72f20cfd9835fa6d94d3dd67e88","observation_id":"658ee460-5d59-4cf6-96ba-1e980303fe72","resolution":{"observed_at":"2026-08-07T04:15:38.811538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T19:37:31.612720Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05093","last_updated":"2025-07-07T15:13:54Z","snapshot_observed_at":"2026-08-09T04:58:06.652981Z","submitted_at":"2025-07-07T15:13:54Z","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T19:37:31.612720Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.05093"},"observation_digest":"sha256:335266e65cbc7cea3a10c281e131f7b8e1f34b41bf09e0760091f342eae804de","observation_id":"ea89fa41-4b5d-4873-956e-81c0cf00e772","resolution":{"observed_at":"2026-08-06T19:37:31.612720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T19:01:14.676455Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.08862","last_updated":"2025-07-09T13:06:58Z","snapshot_observed_at":"2026-08-06T18:51:23.874283Z","submitted_at":"2025-07-09T13:06:58Z","title":"RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T19:01:14.676455Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.08862"},"observation_digest":"sha256:636095cf6af5987166571034faa9d69a13c1f87a1ad8e723c51c7ffd98d9ebeb","observation_id":"bd98b675-2cd0-452f-9148-10e4c1c99f82","resolution":{"observed_at":"2026-08-06T19:01:14.676455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T15:48:57.340757Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-09T07:51:23.800410Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.340757Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:fc92292266cd495b261a24921872cf326763c4bb1ab27420b6ecf5c2825d6d44","observation_id":"ea27f41a-2e62-4e1a-8a1a-c919c5fc8c86","resolution":{"observed_at":"2026-08-06T15:48:57.340757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T14:42:08.191718Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18202","last_updated":"2025-07-24T08:58:41Z","snapshot_observed_at":"2026-08-08T08:00:57.460209Z","submitted_at":"2025-07-24T08:58:41Z","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-06T14:42:08.191718Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.18202"},"observation_digest":"sha256:d3085db4dd885204db44910190dfec7f61e136c54b54c0670e42067d66c41252","observation_id":"da8ed986-5354-434a-80d0-a496ca3b8b19","resolution":{"observed_at":"2026-08-06T14:42:08.191718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T20:31:48.207577Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":166,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:48.207577Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:a8dac8a5bb72968c5f3eab8a525141172f74ae78040dc3fb37fd062b11128bb1","observation_id":"08462dd7-d85c-4a84-a538-ed61b761a77a","resolution":{"observed_at":"2026-08-05T20:31:48.207577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T15:09:22.340790Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20408","last_updated":"2025-08-28T04:13:51Z","snapshot_observed_at":"2026-08-05T15:09:21.814283Z","submitted_at":"2025-08-28T04:13:51Z","title":"Fact or Facsimile? Evaluating the Factual Robustness of Modern Retrievers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T15:09:22.340790Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2508.20408"},"observation_digest":"sha256:be4a642981e20298a2fa1d6868b09018e7f3adc06237b1add3d60a7ae7c5dd8a","observation_id":"6dc4a9c9-443a-4cc7-a372-be7f1c2d2c19","resolution":{"observed_at":"2026-08-05T15:09:22.340790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T10:44:10.621289Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-08T11:14:03.361977Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.621289Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:dd93c0695e90947dac9d927ff0e59b550f32bebc2f934be286cda65dea3f45a1","observation_id":"0698889b-9b55-4363-ba93-fe97c98b0fb0","resolution":{"observed_at":"2026-08-05T10:44:10.621289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-04T21:33:59.967456Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07941","last_updated":"2025-09-09T17:21:20Z","snapshot_observed_at":"2026-08-06T22:34:55.594338Z","submitted_at":"2025-09-09T17:21:20Z","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T21:33:59.967456Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2509.07941"},"observation_digest":"sha256:3e484020810acb2ea9733cebd5dfc6dda8d5e0dbe61e60558ede53cfa35aceb8","observation_id":"b26f408d-5189-41ab-a288-c7e12d97b416","resolution":{"observed_at":"2026-08-04T21:33:59.967456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-04T15:17:39.491503Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.20324","last_updated":"2026-06-04T17:26:56Z","snapshot_observed_at":"2026-08-07T20:32:31.507281Z","submitted_at":"2025-09-24T17:11:35Z","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:39.491503Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2509.20324"},"observation_digest":"sha256:74c0b2c3e56a6b24d7c5e5faf6a2f95674eca59668bb5a2139d3ada0614f8565","observation_id":"3a168799-fe6d-494c-bb28-33b08b53e1ab","resolution":{"observed_at":"2026-08-04T15:17:39.491503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-03T19:27:04.056271Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-07T23:47:52.298069Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.056271Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:1ba596a970c8da3367a0166d7f0c6bf23d3449cc821723616fc1abf0ba119bb7","observation_id":"d356bdc1-be44-41b7-b443-d3ac88d87d01","resolution":{"observed_at":"2026-08-03T19:27:04.056271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-03T10:45:19.715096Z","title":"arXiv preprint arXiv:2406.00083 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.715096Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:f863c7292d6fa6de86839923533136261189b19bba7fbc4d99e118aaf15bc120","observation_id":"bc236d1a-094c-4300-ab84-70e0ffb8542c","resolution":{"observed_at":"2026-08-03T10:45:19.715096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-10T15:39:32.595169Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:d398f1edd13bd360b81c43429847625c6d62a955fd0c96843590259af298cf5b","observation_id":"97e2bfd2-6c13-4d05-aa86-599386e4e2a0","resolution":{"observed_at":"2026-05-11T10:06:02.826341Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-11T01:46:54.430546Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:679ade67298aeaf621d537142d57eac89316230b265c8a901c488b888d9673c7","observation_id":"b44c9ca2-2724-483c-9763-091d363ca56e","resolution":{"observed_at":"2026-05-11T04:20:58.075095Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-15T07:11:16.568353Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:ed1f88f48ad28c5e5534bc39e1b9676393aae5e3e6b86419e1eac4735b0c4bdb","observation_id":"55b8bb75-59f6-48f7-86ec-6c4871aa7226","resolution":{"observed_at":"2026-05-15T07:15:11.971658Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-07-31T09:19:52.528360Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:a6fdcb6d7e9dc8f96a582cdfc4a21626967f572316cebe5937658d05cd40fab0","observation_id":"5c3a5328-e2de-447d-9e58-e1cc91352e7c","resolution":{"observed_at":"2026-05-11T11:31:00.719023Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-07T15:57:39.809778Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:0e2fb3c0194cd75f2d7546b2d34b4faab3de773b92577ed3fd506e7c63c445ac","observation_id":"8e5ad112-4320-450b-87a6-d2e016e660f8","resolution":{"observed_at":"2026-05-12T00:01:14.200165Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T18:50:41.401393Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:a15ca5be86e98da2ba05721e068a685fa94667ec27d2760cdece7a47be56bed1","observation_id":"6eb55303-672c-4096-b1e2-6793bb57973b","resolution":{"observed_at":"2026-05-09T06:10:41.480515Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-12T02:27:03.154390Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:4f85313768b90b2b2f0ebdd82010e9599f1fb18077c4e4782d2fd151e505ee21","observation_id":"9b532e46-4267-4f61-b014-7bcec7b64b37","resolution":{"observed_at":"2026-05-12T07:37:06.910242Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-15T06:09:36.338641Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:b1cf555e595510f603c1c8721eaef3b008980ffb7598b291fe1b6416c3b741c6","observation_id":"6b7266d8-8364-4ec0-96f7-3f3284ce1d61","resolution":{"observed_at":"2026-05-15T06:09:49.285246Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-19T17:38:45.919637Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:a5c3f12da3e2b8a6bbf7b1e9c51e8b5d879518e05a589fc6544a8fa27cc3c412","observation_id":"47df3c3a-d0fa-402d-bb84-dec322ccf0a5","resolution":{"observed_at":"2026-05-19T17:42:42.322138Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09822","last_updated":"2026-05-10T23:55:13Z","snapshot_observed_at":"2026-08-05T13:34:08.474381Z","submitted_at":"2026-05-10T23:55:13Z","title":"Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-12T02:27:06.805794Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09822"},"observation_digest":"sha256:14a19d978031faa368ca537c6204e78d2d98945b24005b612607d020a8bc63f3","observation_id":"4a43d873-cb4e-48c2-aed4-b37a706d047f","resolution":{"observed_at":"2026-05-12T07:37:04.167030Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.11996","last_updated":"2026-05-12T11:46:25Z","snapshot_observed_at":"2026-07-06T23:23:44.276236Z","submitted_at":"2026-05-12T11:46:25Z","title":"BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-13T05:10:11.345256Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.11996"},"observation_digest":"sha256:82aba9b2d124b1697736ebb523da34aed025919b3ffb7b57a458ef2cbe255107","observation_id":"bef98505-0f5b-411d-a8bf-a460bd48ddf7","resolution":{"observed_at":"2026-05-13T05:12:17.840776Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.22041","last_updated":"2026-05-21T06:25:46Z","snapshot_observed_at":"2026-08-02T21:43:59.005437Z","submitted_at":"2026-05-21T06:25:46Z","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-22T05:58:03.701617Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.22041"},"observation_digest":"sha256:3e8ee5feb810d9915933f92ed2ad1c3fc093d95dda1973d661b829e980c15d50","observation_id":"70b3c23b-d66a-4024-b56b-75b3aea22579","resolution":{"observed_at":"2026-05-22T06:01:08.946270Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.28074","last_updated":"2026-05-27T07:30:30Z","snapshot_observed_at":"2026-08-02T21:44:55.814873Z","submitted_at":"2026-05-27T07:30:30Z","title":"SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-29T11:49:32.880569Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.28074"},"observation_digest":"sha256:6cd9bd0274fc15c68675eae61ff814fd7b01c207322ba546421247aa00315baf","observation_id":"eb22206c-65a4-4f8b-9a37-b080c9baabbe","resolution":{"observed_at":"2026-06-29T11:53:23.276673Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.01212","last_updated":"2026-06-03T04:47:29Z","snapshot_observed_at":"2026-07-06T23:41:48.357871Z","submitted_at":"2026-05-31T13:03:47Z","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-28T17:43:41.256808Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.01212"},"observation_digest":"sha256:e6b186e0b8b4e69e0f41d51bd7fce2feb5af06e00095c20089912d4fb72e69f3","observation_id":"3f50070c-d0bb-4aab-a2ab-00f6a455b65e","resolution":{"observed_at":"2026-07-01T20:46:13.965582Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.03354","last_updated":"2026-06-02T09:03:56Z","snapshot_observed_at":"2026-08-04T03:13:16.157376Z","submitted_at":"2026-06-02T09:03:56Z","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-28T10:02:27.652157Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.03354"},"observation_digest":"sha256:5790105ea5883174bef14b49a308f03af3be943bf2109b87dc8e8de1b7007022","observation_id":"98b64758-2bfc-4225-b2ea-c19ab634e4bb","resolution":{"observed_at":"2026-07-02T03:26:29.518497Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.07783","last_updated":"2026-06-05T18:54:23Z","snapshot_observed_at":"2026-08-08T19:29:30.860745Z","submitted_at":"2026-06-05T18:54:23Z","title":"Evaluating RAG Reliability under Clean, Misleading, and Mixed Retrieval","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T21:49:50.544602Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.07783"},"observation_digest":"sha256:c351011fbcf49155c588adac947ab025236db5996bed1f86935207b82e586f99","observation_id":"2857d78b-0fdd-48b9-b79f-9b36cab6b428","resolution":{"observed_at":"2026-07-02T18:57:16.554219Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.17443","last_updated":"2026-06-16T02:54:34Z","snapshot_observed_at":"2026-07-06T23:53:02.028020Z","submitted_at":"2026-06-16T02:54:34Z","title":"Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-27T01:40:08.788224Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.17443"},"observation_digest":"sha256:e48b0870bd67a35adc0b52e5b6989a37096c51525d30095495fef3a4069983ae","observation_id":"22ed9aac-637c-4036-986c-aba0c7161e10","resolution":{"observed_at":"2026-07-03T20:08:55.781044Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:a1143396b7292eb0b0c9d903298a68e7777293f67772b31476157e6bb07d6132","observation_id":"e566a183-4f0b-456a-9d6a-d0607974a524","resolution":{"observed_at":"2026-07-03T21:28:59.101853Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.23892","last_updated":"2026-06-22T19:41:57Z","snapshot_observed_at":"2026-08-06T14:11:51.998297Z","submitted_at":"2026-06-22T19:41:57Z","title":"REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-26T08:44:45.853401Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.23892"},"observation_digest":"sha256:3b59220072d267c3ec0ac910285e1661917df55eae0f9d3dbbf2749900c69df2","observation_id":"aa3bdd1d-adb2-447d-851a-caad10033dd2","resolution":{"observed_at":"2026-07-04T10:29:45.744501Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-06T23:51:47.345747Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:f2464b759c7c87953cbc5d05df94b30a4c25e4d665af994d52fb3f1ef38e7312","observation_id":"213c305a-3481-42fa-b2a1-101e37b2b6b3","resolution":{"observed_at":"2026-07-04T20:00:07.859278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2607.00012","last_updated":"2026-05-08T10:35:13Z","snapshot_observed_at":"2026-08-04T21:03:13.172809Z","submitted_at":"2026-05-08T10:35:13Z","title":"PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption","version":1},"reference_index":128,"source":"arxiv_source","source_observed_at":"2026-07-02T23:42:23.695930Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.00012"},"observation_digest":"sha256:3b233ef69355e428f00d4b84cd966a407f346813de0c631445f5e07d0b16a280","observation_id":"6e1ab760-3a35-4b45-ba72-c0e6102bcea5","resolution":{"observed_at":"2026-07-02T23:47:27.213076Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-07-12T00:17:10.365724Z","title":"BadRAG: Identify- ing vulnerabilities in retrieval augmented generation of large language models.arXiv preprint arXiv:2406.00083,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.03739","last_updated":"2026-07-04T06:56:06Z","snapshot_observed_at":"2026-08-02T11:16:44.267497Z","submitted_at":"2026-07-04T06:56:06Z","title":"A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-12T00:17:10.365724Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.03739"},"observation_digest":"sha256:7af3b942a2046143493634feaffde2adce4dba4bbb7996e727c69eb41087e3cd","observation_id":"232c078d-9864-487a-84a5-2c5a3c7add66","resolution":{"observed_at":"2026-07-12T00:17:10.365724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":215,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:875f0b599fca2cf60de2d09a0bfe34a3342bba9d864260d4b76c48f6596f7d20","observation_id":"d669d442-fdad-44ba-a64d-6e84070b1c76","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-01T17:47:13.420601Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17535","last_updated":"2026-07-20T04:27:50Z","snapshot_observed_at":"2026-08-08T02:11:09.053606Z","submitted_at":"2026-07-20T04:27:50Z","title":"Salience Induction against Multi-Hop RAG Agents: Threat and Defense","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:13.420601Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.17535"},"observation_digest":"sha256:018c70a8bce68e110faece01135120ceb9626a9bb67d498b846237c0cd84f168","observation_id":"9086b9e9-e56c-4c1d-87fd-60e0ec848a83","resolution":{"observed_at":"2026-08-01T17:47:13.420601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T00:08:56.979447Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models. arxiv 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.979447Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:1a4f8a929cd7b7fba8ce08e9243c9ed31b6c916cd7bbf755ca3723b6dfd98ecd","observation_id":"773c8ce7-9fb7-439e-bfb2-53574988c585","resolution":{"observed_at":"2026-08-06T00:08:56.979447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T17:25:42.532072Z","title":"arXiv preprint arXiv:2406.00083 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04756","last_updated":"2026-08-05T12:23:24Z","snapshot_observed_at":"2026-08-08T23:12:25.437395Z","submitted_at":"2026-08-05T12:23:24Z","title":"PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-06T17:25:42.532072Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2608.04756"},"observation_digest":"sha256:27e55271b91566c8751299d21359ebea4a1f132ec44dc2dd65f042afc7416c70","observation_id":"630011d5-95b3-47a7-90bd-cc0e7b280b2d","resolution":{"observed_at":"2026-08-06T17:25:42.532072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2406.00083/citation-record","integrity":"/paper/2406.00083/integrity","json":"/paper/2406.00083/citation-record.json","paper":"/paper/2406.00083"},"outbound":[],"paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 51 inbound Pith citation observations for arXiv:2406.00083."}